ntopng:fuzz_dissect_packet: Heap-buffer-overflow in NetworkInterface::processPacket

Project: https://github.com/ntop/ntopng.git Detailed Report: https://oss-fuzz.com/testcase?key=5555893120073728 Project: ntopng Fuzzing Engine: afl Fuzz Target: fuzzdissectpacket Job Type: aflasanntopng Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address: 0x76619133257c Crash...

Improper Validation of Integrity Check Value

Overview Affected versions of this package are vulnerable to Improper Validation of Integrity Check Value in the processPacket method of KCCMBlockCipher, which invokes processAAD only when associated data is present, so with no AAD the G1 block nonce, length, flag is never mixed into the MAC and...

OSV-2023-1381 Heap-buffer-overflow in NetworkInterface::processPacket

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65428 Crash type: Heap-buffer-overflow READ 10 Crash state: NetworkInterface::processPacket NetworkInterface::dissectPacket fuzzdissectpacket.cpp...

OSV-2023-1375 Heap-buffer-overflow in IEC104Stats::processPacket

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65402 Crash type: Heap-buffer-overflow READ 1 Crash state: IEC104Stats::processPacket Flow::processIEC60870Packet NetworkInterface::processPacket...

PT-2023-35679 · Git +1 · Ntopng

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read, which occurs in the IEC104Stats::processPacket function, called by Flow::processIEC60870Packet and...

ntopng:fuzz_dissect_packet: Heap-buffer-overflow in NetworkInterface::processPacket

Project: https://github.com/ntop/ntopng.git Detailed Report: https://oss-fuzz.com/testcase?key=5137192884174848 Project: ntopng Fuzzing Engine: afl Fuzz Target: fuzzdissectpacket Job Type: aflasanntopng Platform Id: linux Crash Type: Heap-buffer-overflow READ 10 Crash Address: 0x6160000011ca Cras...

OSV-2023-1352 Heap-buffer-overflow in Flow::dissectMDNS

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65271 Crash type: Heap-buffer-overflow READ Crash state: Flow::dissectMDNS NetworkInterface::processPacket NetworkInterface::dissectPacket...

OSV-2023-1160 Heap-buffer-overflow in IEC104Stats::processPacket

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64147 Crash type: Heap-buffer-overflow READ 1 Crash state: IEC104Stats::processPacket Flow::processIEC60870Packet NetworkInterface::processPacket...

ntopng:fuzz_dissect_packet: Heap-buffer-overflow in IEC104Stats::processPacket

Project: https://github.com/ntop/ntopng.git Detailed Report: https://oss-fuzz.com/testcase?key=6499462159400960 Project: ntopng Fuzzing Engine: afl Fuzz Target: fuzzdissectpacket Job Type: aflasanntopng Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x612000017e81 Crash...

OSV-2023-976 Heap-buffer-overflow in Flow::dissectMDNS

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63060 Crash type: Heap-buffer-overflow READ 2 Crash state: Flow::dissectMDNS NetworkInterface::processPacket NetworkInterface::dissectPacket...

OSV-2023-761 Heap-buffer-overflow in ICMPinfo::dissectICMP

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61836 Crash type: Heap-buffer-overflow READ 4 Crash state: ICMPinfo::dissectICMP NetworkInterface::processPacket NetworkInterface::dissectPacket...

OSV-2023-741 Heap-buffer-overflow in Flow::dissectBittorrent

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61737 Crash type: Heap-buffer-overflow READ 1 Crash state: Flow::dissectBittorrent NetworkInterface::processPacket NetworkInterface::dissectPacket...

OSV-2023-726 Heap-buffer-overflow in Flow::dissectNetBIOS

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61648 Crash type: Heap-buffer-overflow READ 1 Crash state: Flow::dissectNetBIOS NetworkInterface::processPacket NetworkInterface::dissectPacket...

OSV-2023-710 Heap-buffer-overflow in Flow::dissectMDNS

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61538 Crash type: Heap-buffer-overflow READ 10 Crash state: Flow::dissectMDNS NetworkInterface::processPacket NetworkInterface::dissectPacket...

OSV-2023-697 Heap-buffer-overflow in IEC104Stats::processPacket

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61443 Crash type: Heap-buffer-overflow READ 1 Crash state: IEC104Stats::processPacket Flow::processIEC60870Packet NetworkInterface::processPacket...

ntopng:fuzz_dissect_packet: Heap-buffer-overflow in IEC104Stats::processPacket

Project: https://github.com/ntop/ntopng.git Detailed Report: https://oss-fuzz.com/testcase?key=5311671464493056 Project: ntopng Fuzzing Engine: afl Fuzz Target: fuzzdissectpacket Job Type: aflasanntopng Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6120000200ff Crash...

ntopng:fuzz_dissect_packet: Heap-buffer-overflow in IEC104Stats::processPacket

Project: https://github.com/ntop/ntopng.git Detailed Report: https://oss-fuzz.com/testcase?key=4712554363224064 Project: ntopng Fuzzing Engine: afl Fuzz Target: fuzzdissectpacket Job Type: aflasanntopng Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address: 0x61100001a045 Crash...

OSV-2023-462 Heap-buffer-overflow in IEC104Stats::processPacket

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59625 Crash type: Heap-buffer-overflow READ 1 Crash state: IEC104Stats::processPacket Flow::processIEC60870Packet Flow::processPacket...

OSV-2023-425 Heap-buffer-overflow in ICMPinfo::dissectICMP

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59217 Crash type: Heap-buffer-overflow READ 1 Crash state: ICMPinfo::dissectICMP NetworkInterface::processPacket NetworkInterface::dissectPacket...

CVE-2018-20013

In UrBackup 2.2.6, an attacker can send a malformed request to the client over the network, and trigger a fileservplugin/CClientThread.cpp CClientThread::ProcessPacket metadataid!=0 assertion, leading to shutting down the client application...