dlplibs/wqfuzzer: Stack-buffer-overflow in WPSEmbeddedObject::operator=

Detailed report: https://oss-fuzz.com/testcase?key=5119335720288256 Project: dlplibs Fuzzer: libFuzzerdlplibswqfuzzer Fuzz target binary: wqfuzzer Job Type: libfuzzerasandlplibs Platform Id: linux Crash Type: Stack-buffer-overflow READ 8 Crash Address: 0x7f774d6f6158 Crash State:...

pcre2/pcre2_fuzzer: Stack-buffer-overflow in get_grouplength

Project: svn://vcs.exim.org/pcre2/code/trunk Detailed report: https://oss-fuzz.com/testcase?key=5643597614940160 Project: pcre2 Fuzzer: libFuzzerpcre2fuzzer Fuzz target binary: pcre2fuzzer Job Type: libfuzzerasanpcre2 Platform Id: linux Crash Type: Stack-buffer-overflow READ 4 Crash Address:...

llvm/llvm-microsoft-demangle-fuzzer: Stack-buffer-overflow in llvm::ms_demangle::Demangler::demangleStringLiteral

Project: https://github.com/llvm/llvm-project.git Detailed report: https://oss-fuzz.com/testcase?key=5665174389784576 Project: llvm Fuzzer: libFuzzerllvmllvm-microsoft-demangle-fuzzer Fuzz target binary: llvm-microsoft-demangle-fuzzer Job Type: libfuzzerasanllvm Platform Id: linux Crash Type:...

libarchive/libarchive_fuzzer: Stack-buffer-overflow in parse_file_extra_owner

Project: https://github.com/libarchive/libarchive.git Detailed report: https://oss-fuzz.com/testcase?key=5676090753810432 Project: libarchive Fuzzer: afllibarchivefuzzer Fuzz target binary: libarchivefuzzer Job Type: aflasanlibarchive Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 1...

SolarWinds DameWare Mini Remote Client Agent < 12.0.3 Stack Buffer Overflow

The remote host is running a version of SolarWinds DameWare Mini Remote Client Agent prior to 12.0.3. A stack-based buffer overflow condition exists in DWRCS.EXE due to improper validation of user supplied data passed to wsprintfw. An attacker can exploit this, via a specially crafted message, to...

ffmpeg/ffmpeg_AV_CODEC_ID_AGM_fuzzer: Stack-buffer-overflow in get_tree_codes

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5745747003179008 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDAGMfuzzer Fuzz target binary: ffmpegAVCODECIDAGMfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Stack-buffer-overflow...

libheif/file-fuzzer: Stack-buffer-overflow in void apply_sao_internal<unsigned short>

Project: https://github.com/strukturag/libheif.git Detailed report: https://oss-fuzz.com/testcase?key=5660192059949056 Project: libheif Fuzzer: libFuzzerlibheiffile-fuzzer Fuzz target binary: file-fuzzer Job Type: libfuzzerasanlibheif Platform Id: linux Crash Type: Stack-buffer-overflow READ 4...

EulerOS Virtualization 2.5.3 : kernel (EulerOS-SA-2019-1182)

According to the version of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - A security flaw was found in the chapservercomputemd5 function in the ISCSI target code in the Linux kernel in a way an authenticati...

EulerOS Virtualization 2.5.4 : kernel (EulerOS-SA-2019-1187)

According to the version of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - A security flaw was found in the chapservercomputemd5 function in the ISCSI target code in the Linux kernel in a way an authenticati...

EulerOS Virtualization 2.5.3 : ntp (EulerOS-SA-2019-1207)

According to the version of the ntp packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - The ntpq and ntpdc command-line utilities that are part of ntp package are vulnerable to stack-based buffer overflow via crafted...

MatrixSSL 4.0.1 RCE Vulnerability

MatrixSSL is prone to a remote code execution RCE vulnerability. Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

OPENSUSE-SU-2019:1172-1 Security update for ovmf

This update for ovmf fixes the following issues: Security issues fixed: - CVE-2019-0160: Fixed multiple buffer overflows in UDF-related codes in MdeModulePkg\Universal\Disk\PartitionDxe\Udf.c and MdeModulePkg\Universal\Disk\UdfDxe bsc1130267. - CVE-2018-12181: Fixed a stack buffer overflow in the...

openSUSE: Security Advisory for ovmf (openSUSE-SU-2019:1139-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Security update for ovmf (moderate)

openSUSE Security Update: Security update for ovmf Announcement ID: openSUSE-SU-2019:1139-1 Rating: moderate References: 1128503 Cross-References: CVE-2018-12181 Affected Products: openSUSE Leap 42.3 An update that fixes one vulnerability is now available. Description: This update for ovmf fixes...

Stack overflow

IBM DB2 9.7, 10.1, 10.5, and 11.1 libdb2e.so.1 is vulnerable to a stack based buffer overflow, caused by improper bounds checking which could allow an attacker to execute arbitrary code. IBM X-Force ID: 153316...

CVE-2018-1936

IBM DB2 9.7, 10.1, 10.5, and 11.1 libdb2e.so.1 is vulnerable to a stack based buffer overflow, caused by improper bounds checking which could allow an attacker to execute arbitrary code. IBM X-Force ID: 153316...

PT-2019-3892

Name of the Vulnerable Software and Affected Versions Apache HTTP Server versions 2.4.32 through 2.4.39 Description The issue is related to a stack buffer overflow or NULL pointer deference in the mod remoteip module of the Apache HTTP Server. This can be triggered by a specially crafted PROXY...

SUSE-SU-2019:0738-1 Security update for ovmf

This update for ovmf fixes the following issue: Security issue fixed: - CVE-2018-12181: Fixed a stack buffer overflow in the HII database when a corrupted Bitmap was used bsc1128503...

Denial Of Service

ImageMagick is vulnerable to denial of service DoS. The attacker can input a malicious image file to the function PopHexPixel of coders/ps.c, resulting in a stack buffer overflow and leading to a code execution...

OPENSUSE-SU-2019:0174-1 Security update for curl

This update for curl fixes the following issues: Security issues fixed: - CVE-2019-3823: Fixed a heap out-of-bounds read in the code handling the end-of-response for SMTP bsc1123378. - CVE-2019-3822: Fixed a stack based buffer overflow in the function creating an outgoing NTLM type-3 message...