76 matches found
CVE-2023-6322 Stack-based buffer overflow in message parser functionality
A stack-based buffer overflow vulnerability exists in the message parsing functionality of the Roku Indoor Camera SE version 3.0.2.4679 and Wyze Cam v3 version 4.36.11.5859. A specially crafted message can lead to stack-based buffer overflow. An attacker can make authenticated requests to trigger...
CVE-2023-6322 Stack-based buffer overflow in message parser functionality
A stack-based buffer overflow vulnerability exists in the message parsing functionality of the Roku Indoor Camera SE version 3.0.2.4679 and Wyze Cam v3 version 4.36.11.5859. A specially crafted message can lead to stack-based buffer overflow. An attacker can make authenticated requests to trigger...
gobgp:fuzz_parse_bmp_message: Crash with empty stacktrace
Detailed Report: https://oss-fuzz.com/testcase?key=5099338471636992 Project: gobgp Fuzzing Engine: libFuzzer Fuzz Target: fuzzparsebmpmessage Job Type: libfuzzerasangobgp Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xfffffffffffffff0 Crash State: NULL Sanitizer: address ASAN...
Malicious code in ok-message-parser (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5a80a6a3a1ffdd474bf80a592d152a61ed541b41acd3be180d2c1bd91be1fb7f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
opensips:fuzz_msg_parser: Heap-buffer-overflow in _parse_to
Project: https://github.com/OpenSIPS/opensips.git Detailed Report: https://oss-fuzz.com/testcase?key=6442184157560832 Project: opensips Fuzzing Engine: libFuzzer Fuzz Target: fuzzmsgparser Job Type: libfuzzerasanopensips Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...
opensips:fuzz_msg_parser: Heap-buffer-overflow in parse_hname2
Project: https://github.com/OpenSIPS/opensips.git Detailed Report: https://oss-fuzz.com/testcase?key=4784549297520640 Project: opensips Fuzzing Engine: libFuzzer Fuzz Target: fuzzmsgparser Job Type: libfuzzerasanopensips Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...
CVE-2021-34703: Missing Initialization of a Variable
A vulnerability in the Link Layer Discovery Protocol LLDP message parser of Cisco IOS Software and Cisco IOS XE Software could allow an attacker to trigger a reload of an affected device, resulting in a denial of service DoS condition. This vulnerability is due to improper initialization of a...
dovecot -- multiple vulnerabilities
Aki Tuomi reports: lib-smtp doesn't handle truncated command parameters properly, resulting in infinite loop taking 100% CPU for the process. This happens for LMTP where it doesn't matter so much and also for submission-login where unauthenticated users can trigger it. Aki also reports: Snippet...
PT-2019-4785
Name of the Vulnerable Software and Affected Versions Rsyslog version 8.1908.0 Description The issue is related to a heap overflow in the parser for AIX log messages in Rsyslog. This occurs when the parser fails to account for strings that do not satisfy the constraint of having a log message...
Valve: Unchecked weapon id in WeaponList message parser on client leads to RCE
Let's look at WeaponList message parser code in the HLSDK: cpp int CHudAmmo::MsgFuncWeaponListconst char pszName, int iSize, void pbuf BEGINREAD pbuf, iSize ; WEAPON Weapon; strcpy Weapon.szName, READSTRING ; Weapon.iAmmoType = intREADCHAR; Weapon.iMax1 = READBYTE; if Weapon.iMax1 == 255...
phpBB 'includes/message_parser.php' HTML injection vulnerability
phpBB is phpBB group developed a set of open source and PHP-based Web forum software . The software has support for multiple languages , multiple databases and customized layout and so on. An HTML injection vulnerability exists in versions prior to phpBB 3.0.8, which arises from the program's...
phpBB 'includes/message_parser.php' HTML Injection Vulnerability
phpBB is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal...
Code injection
The hpssd message parser in hpssd.py in HP Linux Imaging and Printing HPLIP 1.6.7 allows local users to cause a denial of service process stop via a crafted packet, as demonstrated by sending "msg=0" to TCP port 2207...
CVE-2008-2941
The hpssd message parser in hpssd.py in HP Linux Imaging and Printing HPLIP 1.6.7 allows local users to cause a denial of service process stop via a crafted packet, as demonstrated by sending "msg=0" to TCP port 2207...
CVE-2008-2941
CVE-2008-2941 is tied to the hpssd message parser in HP Linux Imaging and Printing (HPLIP) 1.6.7. A local attacker can cause a denial of service by sending specially crafted packets to TCP port 2207, stopping the hpssd process. The issue is documented across multiple advisories (e.g., RHSA-2008:0...
