13604 matches found
openSUSE Security Update : liblouis (openSUSE-2018-1039)
This update for liblouis fixes the following issues : Security issues fixed : - CVE-2018-11440: Fixed a stack-based buffer overflow in the function parseChars in compileTranslationTable.c bsc1095189 - CVE-2018-11577: Fixed a segmentation fault in loulogPrint in logging.c bsc1095945 -...
CVE-2018-17439
An issue was discovered in the HDF HDF5 1.10.3 library. There is a stack-based buffer overflow in the function H5Sextentgetdims in H5S.c. Specifically, this issue occurs while converting an HDF5 file to a GIF file...
CVE-2018-17439
An issue was discovered in the HDF HDF5 1.10.3 library. There is a stack-based buffer overflow in the function H5Sextentgetdims in H5S.c. Specifically, this issue occurs while converting an HDF5 file to a GIF file...
Stack overflow
An issue was discovered in the HDF HDF5 1.10.3 library. There is a stack-based buffer overflow in the function H5Sextentgetdims in H5S.c. Specifically, this issue occurs while converting an HDF5 file to a GIF file...
CVE-2018-17439
CVE-2018-17439 : A stack-based buffer overflow in the HDF5 1.10.3 library affects the H5S_extent_get_dims() function in H5S.c, triggered when converting an HDF5 file to a GIF. This issue, observed in the HDF5 1.10.3 stack, could lead to memory corruption and is documented in Nessus/SUSE advisorie...
SUSE SLED12 / SLES12 Security Update : liblouis (SUSE-SU-2018:2780-1)
This update for liblouis, python-louis, python3-louis fixes the following issues : Security issues fixed : CVE-2018-11440: Fixed a stack-based buffer overflow in the function parseChars in compileTranslationTable.c bsc1095189 CVE-2018-11577: Fixed a segmentation fault in loulogPrint in logging.c...
Stack overflow
An issue was discovered in libsvg2 through 2012-10-19. A stack-based buffer overflow in the svgGetNextPathField function in svgstring.c allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact because a strncpy copy limit is miscalculated...
CVE-2018-17334
CVE-2018-17334 affects the libsvg2 SVG parser. The vulnerability is a stack-based buffer overflow in the svgGetNextPathField function (svg_string.c) present up to 2012-10-19. A miscalculated strncpy copy limit can be exploited by remote attackers to cause a denial of service (application crash) a...
CVE-2018-17174
A stack-based buffer overflow was discovered in the xtimor NMEA library aka nmealib 0.5.3. nmeaparse in parser.c allows an attacker to trigger denial of service even arbitrary code execution in a certain context in a product using this library via malformed data...
CVE-2018-17174
The CVE-2018-17174 affects the xtimor NMEA library (aka nmealib) up to version 0.5.3. The vulnerability is a stack-based buffer overflow in nmea_parse() (parser.c), allowing malformed data to trigger denial of service and, in certain contexts, potentially arbitrary code execution within a product...
Stack overflow
An exploitable stack-based buffer overflow vulnerability exists in the retrieval of a database field in video-core's HTTP server of Samsung SmartThings Hub. The video-core process insecurely extracts the shard.videoHostURL field from its SQLite database, leading to a buffer overflow on the stack...
Stack overflow
An exploitable stack-based buffer overflow vulnerability exists in the retrieval of database fields in the video-core HTTP server of the Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17. The strcpy call overflows the destination buffer, which has a size of 2000 bytes. An attacker ca...
CVE-2018-3906
An exploitable stack-based buffer overflow vulnerability exists in the retrieval of a database field in video-core's HTTP server of Samsung SmartThings Hub. The video-core process insecurely extracts the shard.videoHostURL field from its SQLite database, leading to a buffer overflow on the stack...
CVE-2018-3913
Samsung SmartThings Hub STH-ETH-250 (Firmware 0.20.17) is affected by a stack-based buffer overflow in the video-core HTTP server’s shard data retrieval. The vulnerability arises from unconstrained strcpy Copy operations when reading fields from the shard table (secretKey, accessKey, sessionToken...
CVE-2018-3914
An exploitable stack-based buffer overflow vulnerability exists in the retrieval of database fields in the video-core HTTP server of the Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17. The strcpy call overflows the destination buffer, which has a size of 2000 bytes. An attacker ca...
(Pwn2own) Samsung Galaxy S8 Shannon GPRS Stack-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Samsung Galaxy S8. User interaction is required to exploit this vulnerability in that the target must have their cellular radios enabled. The specific flaw exists within the handling of IPCP header...
Amazon Linux AMI : ntp (ALAS-2018-1083)
ntpd in ntp 4.2.x before 4.2.8p7 allows authenticated users that know the private symmetric key to create arbitrarily-many ephemeral associations in order to win the clock selection of ntpd and modify a victim's clock via a Sybil attack. This issue exists because of an incomplete fix for...
Delta Industrial Automation CNCSoft ScreenEditor DPB File UserVARComment wFont Stack-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Delta Industrial Automation CNCSoft ScreenEditor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific fl...
EulerOS Virtualization 2.5.0 : ncurses (EulerOS-SA-2018-1252)
According to the versions of the ncurses packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In ncurses 6.0, there is a stack-based buffer overflow in the fmtentry function. A crafted input will lead to a remote arbitrary...
