CVE-2015-7848

An integer overflow can occur in NTP-dev.4.3.70 leading to an out-of-bounds memory copy operation when processing a specially crafted private mode packet. The crafted packet needs to have the correct message authentication code and a valid timestamp. When processed by the NTP daemon, it leads to ...

SUSE-SU-2016:3272-1 Security update for samba

This update for samba fixes the following issues: Security issues fixed: - CVE-2016-2125: Don't send delegated credentials to all servers. bsc1014441. - CVE-2016-2126: Denial of service due to a client triggered crash in the winbindd parent process. bsc1014442. - CVE-2016-2123: Heap-based Buffer...

Netgear WNR2000 Remote Code Execution

Stack buffer overflow vulnerability in NETGEAR WNR2000 router Discovered by Pedro Ribeiro [email protected], Agile Information Security ========================================================================== Disclosure: 20/12/2016 / Last updated: 20/12/2016 Background on the affected products:...

CVE-2016-9033

Joyent SmartOS Hyprlofs file system contains a local buffer overflow in the Ioctl HYPRLOFS_ADD_ENTRIES path. The vulnerability arises in hyprlofs_vnops.c where a stack-allocated path buffer size MAXPATHLEN (1024) can be overrun due to a length check of e[i].hle_plen using > MAXPATHLEN instead ...

In ie8 using ROP and Heap Spray using the bounce of the shell-vulnerability warning-the black bar safety net

This exploit program is for the Windows 7 platform on the IE8 browser. The focus of our attention is one that uses the Java network launch Protocol JNLP the plug-in, this plug-in there is overflow vulnerability. In order to achieve the use, I will use the Heaplib to construct a ROP chain in order...

Disk Savvy Enterprise Server <= 9.4.18 Buffer Overflow Vulnerability

Disk Savvy Enterprise Server is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CentOS 7 : glibc (CESA-2016:2573)

An update for glibc is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

Huawei Play 5C phone TP touchscreen driver suffers from buffer overflow vulnerability

Huawei Play 5C is a smartphone from Huawei. A buffer overflow vulnerability exists in the TP touchscreen driver of the Huawei Play 5C phone. Due to the lack of parameter checking in the TP touchscreen driver, an attacker who gains root privileges and exploits the vulnerability can construct...

CVE-2016-9533

tifpixarlog.c in libtiff 4.0.6 has out-of-bounds write vulnerabilities in heap allocated buffers. Reported as MSVR 35094, aka "PixarLog horizontalDifference heap-buffer-overflow."...

PHP 'ext/phar/phar_object. c' heap overflow vulnerability, CVE-2016-4342）

Parse . tar/. zip/. phar file, the stack boundary condition control is not strict, leading to possible heap overflow. Create a new empty file"aaaa"0 byte, packaged into a "aaaa. tar"file is not compressed before the aaaa file size is 0 it. By PharFileInfo object getContent method to get the aaaa...

Dlink DIR routers HNAP login function multiple vulnerabilities-vulnerability warning-the black bar safety net

The affected products in the background Smartphones, laptops, tablets, phones, Smart TV, gaming console and other devices all at the same time to connect. This is why we designed our new AC3200 Ultra Wi-Fi router. By Tri-Band technology, making speeds of up to 3. 2Gbps, which provides a demanding...

QEMU 'hw/9pfs/9p.c' integer overflow vulnerability

QEMU aka Quick Emulator is a set of simulation processor software developed by French programmer Fabrice Bellard. The software is fast and cross-platform. QEMU 'hw/9pfs/9p.c' suffers from an integer overflow vulnerability that can be exploited by an attacker to crash the program and cause a denia...

CURL-CVE-2016-8622 URL unescape heap overflow via integer truncation

The URL percent-encoding decode function in libcurl is called curleasyunescape. Internally, even if this function would be made to allocate a destination buffer larger than 2GB, it would return that new length in a signed 32-bit integer variable, thus the length would get either truncated only or...

CVE-2016-8335

CVE-2016-8335 is an exploitable stack-based buffer overflow in Iceni Argus IPNameAdd(), triggered by unvalidated source strings copied via strcpy before length checks. Affects Iceni Argus 6.6.04 (Linux x64) and 6.6.04 (Windows x64). The vulnerability stems from a 255-byte destination buffer (dest...

CVE-2016-8339

A buffer overflow in Redis 3.2.x prior to 3.2.4 causes arbitrary code execution when a crafted command is sent. An out of bounds write vulnerability exists in the handling of the client-output-buffer-limit option during the CONFIG SET command for the Redis data structure store. A crafted CONFIG S...

Quagga Buffer Overflow Vulnerability

Quagga is a routing software suite. The suite implements protocols such as OSPFv2, OSPFv3, and RIP v1/v2 on a variety of platforms and provides route redistribution, route mapping, and other features. Quagga suffers from a buffer overflow vulnerability that can be exploited by an attacker to...

Cisco ASA Software Identity Firewall Feature Buffer Overflow Vulnerability (cisco-sa-20161019-asa-idfw)

A vulnerability in the Identity Firewall feature of Cisco ASA Software could allow an unauthenticated, remote attacker to cause a reload of the affected system or to remotely execute code. Copyright C 2016 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources...

Apache Tomcat JK ISAPI Connector Buffer Overflow Vulnerability

Apache Tomcat JK ISAPI Connector is a module for Apache or IIS to connect to the backend Tomcat , which supports clustering and load balancing and so on. A buffer overflow vulnerability exists in Apache Tomcat JK ISAPI Connector, which allows remote attackers to send specially crafted URIs to the...

Tencent Video Super Long Character Overflow Vulnerability

Tencent Video Player is the video player client product of Tencent Video. An overflow vulnerability exists in Tencent Video when opening qlv media files by failing to place a length limit on the characters added at the end of the file. An attacker is allowed to exploit this vulnerability to...

FreeBSD-SA-16:29.bspatch

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-16:29.bspatch Security Advisory The FreeBSD Project Topic: Heap overflow vulnerability in bspatch Category: core Module: bsdiff Announced: 2016-10-10 Affects:...