CVE-2021-28874

CVE-2021-28874 concerns SerenityOS. A buffer overflow was present in LibTextCode that could be triggered by opening a crafted file. The issue has been fixed in SerenityOS by commit c9f25bca048443e317f1994ba9b106f2386688c3. Connected Red Hat and CVE trackers reflect the same description. The vulne...

CVE-2021-27343

CVE-2021-27343 affects SerenityOS (unstructured “Unspecified” entry) in the Crypto::der_decode_sequence() function under /Userland/Libraries/LibCrypto/ASN1/DER.h. The vulnerability is a buffer overflow triggered during RSA key ASN.1 parsing, enabling potential leakage of sensitive information (co...

CVE-2021-27343

SerenityOS Unspecified is affected by: Buffer Overflow. The impact is: obtain sensitive information context-dependent. The component is: /Userland/Libraries/LibCrypto/ASN1/DER.h Crypto::derdecodesequence function. The attack vector is: Parsing RSA Key ASN.1...

SerenityOS 缓冲区错误漏洞

SerenityOS is a graphical Unix-like operating system for x86 computers. SerenityOS 2021-03-27 A buffer error vulnerability exists that stems from a buffer overflow in the EndOfCentralDirectory::read function...

PT-2021-17406 · Unknown · Serenityos

Name of the Vulnerable Software and Affected Versions: SerenityOS affected versions not specified Description: The issue allows an attacker to obtain sensitive information, depending on the context, due to a buffer overflow. This occurs in the Crypto::der decode sequence function, specifically wh...

PT-2021-17970 · Unknown · Libtextcode +1

Name of the Vulnerable Software and Affected Versions: SerenityOS versions prior to c9f25bca048443e317f1994ba9b106f2386688c3 Description: The issue is a buffer overflow vulnerability in LibTextCode, which can be triggered by opening a crafted file. Recommendations: For versions prior to...

SerenityOS 缓冲区错误漏洞

SerenityOS is a graphical Unix-like operating system for x86 computers. A buffer overflow vulnerability exists in /Userland/Libraries/LibCrypto/ASN1/DER.h in SerenityOS. An attacker can exploit this vulnerability to obtain sensitive information by parsing the RSA key ASN.1...

SerenityOS 缓冲区错误漏洞

SerenityOS is a graphical Unix-like operating system for x86 computers. SerenityOS suffers from a buffer error vulnerability that stems from a buffer overflow vulnerability contained in a file made by opening in LibTextCode...

PT-2021-18583 · Unknown · Serenityos

Name of the Vulnerable Software and Affected Versions: SerenityOS version 2021-03-27 Description: The issue is related to a buffer overflow in the EndOfCentralDirectory::read function. Recommendations: For SerenityOS version 2021-03-27, consider restricting the use of the...

Denial of Service Vulnerability in SerenityOS

SerenityOS is a graphical Unix-like operating system for x86 computers. A denial of service vulnerability exists in SerenityOS. An attacker could exploit this vulnerability to cause a denial of service attack...

serenity:FuzzShell: Bad-cast to AST::BarewordLiteral from Shell::AST::Glob in Shell::Parser::parse_glob

Project: https://github.com/SerenityOS/serenity.git Detailed Report: https://oss-fuzz.com/testcase?key=4739929078497280 Project: serenity Fuzzing Engine: libFuzzer Fuzz Target: FuzzShell Job Type: libfuzzerubsanserenity Platform Id: linux Crash Type: Bad-cast Crash Address: 0x0000026a30d0 Crash...

serenity:FuzzRegexPosixExtended: Heap-buffer-overflow in regex::Lexer::back

Project: https://github.com/SerenityOS/serenity.git Detailed Report: https://oss-fuzz.com/testcase?key=5077400093982720 Project: serenity Fuzzing Engine: libFuzzer Fuzz Target: FuzzRegexPosixExtended Job Type: libfuzzerasanserenity Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

serenity:FuzzBMP: Heap-buffer-overflow in Gfx::decode_bmp_pixel_data

Project: https://github.com/SerenityOS/serenity.git Detailed Report: https://oss-fuzz.com/testcase?key=5380810148151296 Project: serenity Fuzzing Engine: libFuzzer Fuzz Target: FuzzBMP Job Type: libfuzzerasanserenity Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

CVE-2019-20172

Kernel/VM/MemoryManager.cpp in SerenityOS before 2019-12-30 does not reject syscalls with pointers into the kernel-only virtual address space, which allows local users to gain privileges by overwriting a return address that was found on the kernel stack...

CVE-2019-20172

Kernel/VM/MemoryManager.cpp in SerenityOS before 2019-12-30 does not reject syscalls with pointers into the kernel-only virtual address space, which allows local users to gain privileges by overwriting a return address that was found on the kernel stack...

Code injection

Kernel/VM/MemoryManager.cpp in SerenityOS before 2019-12-30 does not reject syscalls with pointers into the kernel-only virtual address space, which allows local users to gain privileges by overwriting a return address that was found on the kernel stack...

CVE-2019-20172

Kernel/VM/MemoryManager.cpp in SerenityOS before 2019-12-30 does not reject syscalls with pointers into the kernel-only virtual address space, which allows local users to gain privileges by overwriting a return address that was found on the kernel stack...

CVE-2019-20172

CVE-2019-20172 affects SerenityOS (pre-2019-12-30). The vulnerability is in Kernel/VM/MemoryManager.cpp where syscalls with pointers into kernel-only virtual address space are not rejected, enabling a local attacker to gain privileges by overwriting a return address found on the kernel stack. Imp...

SerenityOS Elevation of Privilege Vulnerability

SerenityOS is a graphical Unix-like operating system for x86 computers. A security vulnerability exists in the Kernel/VM/MemoryManager.cpp file in versions of SerenityOS prior to 2019-12-30. A local attacker can exploit this vulnerability to gain privileges by overwriting the return address...

PT-2019-16118 · Serenityos · Serenityos

Name of the Vulnerable Software and Affected Versions: SerenityOS versions prior to 2019-12-30 Description: The issue allows local users to gain privileges by overwriting a return address found on the kernel stack, due to the failure of Kernel/VM/MemoryManager.cpp to reject syscalls with pointers...