10129 matches found
CVE-2022-40149 Stack Buffer Overflow in Jettison
Those using Jettison to parse untrusted XML or JSON data may be vulnerable to Denial of Service attacks DOS. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow. This effect may support a denial of service attack...
CVE-2022-40150 Stack Buffer Overflow in Jettison
Those using Jettison to parse untrusted XML or JSON data may be vulnerable to Denial of Service attacks DOS. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by Out of memory. This effect may support a denial of service attack...
OSV-2022-891 Stack-buffer-overflow in flb_env_var_translate
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51278 Crash type: Stack-buffer-overflow WRITE Crash state: flbenvvartranslate flbparserconffile configrandomfuzzer.c...
PT-2022-37277 · Git +1 · Fluent-Bit
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a stack buffer overflow error, as indicated by a crash report. The crash involves the flb env var translate and flb parser conf...
OSV-2022-888 Stack-buffer-overflow in gs_type2_interpret
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51275 Crash type: Stack-buffer-overflow READ 4 Crash state: gstype2interpret copiedtype1glyphoutline gsdefaultglyphinfo...
PT-2022-37275 · Git +1 · Ghostscript
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a stack-buffer-overflow read crash. Technical details include a crash state involving functions such as gs type2 interpret, copie...
CVE-2022-33183. Stack buffer overflow using in “firmwaredownload” and “diagshow” commands.
A vulnerability in Brocade Fabric OS CLI before Brocade Fabric OS v9.1.0, 9.0.1e, 8.2.3c, 8.2.0cbn5, 7.4.2.j could allow a remote authenticated attacker to perform stack buffer overflow using in “firmwaredownload” and “diagshow” commands. Affected Product All Brocade Fabric OS versions...
fluent-bit:flb-it-fuzz-config_random_fuzzer_OSSFUZZ: Stack-buffer-overflow in flb_env_var_translate
Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=4574057239019520 Project: fluent-bit Fuzzing Engine: honggfuzz Fuzz Target: flb-it-fuzz-configrandomfuzzerOSSFUZZ Job Type: honggfuzzasanfluent-bit Platform Id: linux Crash Type:...
ghostscript:gs_device_pdfwrite_fuzzer: Stack-buffer-overflow in gs_type2_interpret
Detailed Report: https://oss-fuzz.com/testcase?key=4704787672727552 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicepdfwritefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Stack-buffer-overflow READ 4 Crash Address: 0x7fff31529760 Crash State:...
SUSE: Security Advisory (SUSE-SU-2022:3229-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
OSV-2022-872 Stack-buffer-overflow in PfxEntry::test_condition
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51134 Crash type: Stack-buffer-overflow READ 1 Crash state: PfxEntry::testcondition PfxEntry::checkword AffixMgr::prefixcheck...
PT-2022-37267 · Git +1 · Hunspell
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a stack-buffer-overflow read, which occurs in the PfxEntry::test condition function, called by PfxEntry::checkword and...
hunspell:affdicfuzzer: Stack-buffer-overflow in PfxEntry::test_condition
Project: https://github.com/hunspell/hunspell.git Detailed Report: https://oss-fuzz.com/testcase?key=5030975893012480 Project: hunspell Fuzzing Engine: afl Fuzz Target: affdicfuzzer Job Type: aflasanhunspell Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address: 0x7ffc62a7c898...
CVE-2022-36660
xhyve commit dfbe09b was discovered to contain a stack buffer overflow via the component pcivtrndnotify...
CVE-2022-36660
CVE-2022-36660 affects xhyve at commit dfbe09b, with a stack buffer overflow in the pci_vtrnd_notify() component. The advisory signals a high-severity impact (CVSS 3.1: 9.8) through network access, no user interaction, and high impact to confidentiality, integrity, and availability. A temporary m...
CVE-2022-36660
xhyve commit dfbe09b was discovered to contain a stack buffer overflow via the component pcivtrndnotify...
CVE-2022-36660
xhyve commit dfbe09b was discovered to contain a stack buffer overflow via the component pcivtrndnotify...
CVE-2022-36660
xhyve commit dfbe09b was discovered to contain a stack buffer overflow via the component pcivtrndnotify...
Amazon Linux 2022 : libtiff, libtiff-devel, libtiff-static (ALAS2022-2022-094)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2022-2022-094 advisory. A heap buffer overflow flaw was found in Libtiffs' tiffinfo.c in TIFFReadRawDataStriped function. This flaw allows an attacker to pass a crafted TIFF file to the tiffinfo tool, triggering a hea...
