ndpi:fuzz_process_packet: Stack-buffer-overflow in getTLScertificate

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5117057716977664 Project: ndpi Fuzzing Engine: libFuzzer Fuzz Target: fuzzprocesspacket Job Type: libfuzzerasanndpi Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 6 Crash Address: 0x7ffd947a7e...

WAGO PFC200 iocheckd service "I/O-Check" get_coupler_details remote code execution vulnerability

Summary An exploitable stack buffer overflow vulnerability exists in the command line utility getcouplerdetails of the WAGO PFC 200. A specially crafted set of packets sent to the iocheckd service “I/O-Check” can cause a stack buffer overflow in the sub-process getcouplerdetails, resulting in cod...

WAGO PFC200 iocheckd service "I/O-Check" BC_ProductLabel remote code execution vulnerability

Summary An exploitable stack buffer overflow vulnerability exists in the iocheckd service “I/O-Check” functionality of WAGO PFC 200. A specially crafted set of packets can cause a stack buffer overflow, resulting in code execution. An attacker can send unauthenticated packets to trigger this...

binutils:fuzz_disassemble: Stack-buffer-overflow in buffer_read_memory

Detailed Report: https://oss-fuzz.com/testcase?key=5715112182939648 Project: binutils Fuzzing Engine: libFuzzer Fuzz Target: fuzzdisassemble Job Type: libfuzzerasanbinutils Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 16 Crash Address: 0x7ffcabe23898 Crash State: bufferreadmemory...

openthread:ncp-uart-received-fuzzer: Stack-buffer-overflow in ot::MeshCoP::Commissioner::GeneratePskc

Project: https://github.com/openthread/openthread.git Detailed Report: https://oss-fuzz.com/testcase?key=5163475521503232 Project: openthread Fuzzing Engine: libFuzzer Fuzz Target: ncp-uart-received-fuzzer Job Type: libfuzzerasanopenthread Platform Id: linux Crash Type: Stack-buffer-overflow WRIT...

openthread:radio-receive-done-fuzzer: Stack-buffer-overflow in ot::Message::Write

Project: https://github.com/openthread/openthread.git Detailed Report: https://oss-fuzz.com/testcase?key=5110937602490368 Project: openthread Fuzzing Engine: afl Fuzz Target: radio-receive-done-fuzzer Job Type: aflasanopenthread Platform Id: linux Crash Type: Stack-buffer-overflow READ 11 Crash...

Advantech DiagAnywhere CVE-2019-18257 Multiple Stack Buffer Overflow Vulnerabilities

...

Integard Pro NoJs 2.2.0.9026 - Remote Buffer Overflow Exploit

Exploit Title: Integard Pro NoJs 2.2.0.9026 - Remote Buffer Overflow Exploit Author: purpl3f0xsecur1ty Vendor Homepage: https://www.tucows.com/ Software Link: http://www.tucows.com/preview/519612/Integard-Home Version: Pro 2.2.0.9026 / Home 2.0.0.9021 Tested on: Windows XP / Win7 / Win10 CVE:...

Integard Pro NoJs 2.2.0.9026 - Remote Buffer Overflow

Integard Pro NoJs 2.2.0.9026 - Remote Buffer Overflow Exploit Title: Integard Pro NoJs 2.2.0.9026 - Remote Buffer Overflow Date: 2019-09-22 Exploit Author: purpl3f0xsecur1ty Vendor Homepage: https://www.tucows.com/ Software Link: http://www.tucows.com/preview/519612/Integard-Home Version: Pro...

opensc:fuzz_pkcs15_reader: Stack-buffer-overflow in sc_pkcs15emu_object_add

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=5181993696624640 Project: opensc Fuzzing Engine: honggfuzz Fuzz Target: fuzzpkcs15reader Job Type: honggfuzzasanopensc Platform Id: linux Crash Type: Stack-buffer-overflow READ Crash Address:...

Denial Of Service (DoS) Through Stack Buffer Overflow

library-go is vulnerable to denial of service DoS through stack-based buffer overflow attacks. The vulnerability exists in clientmetrics.go due to a possible infinite recursion when registering client controller metrics...

openSUSE: Security Advisory for cups (openSUSE-SU-2019:2573-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

DEBIAN-CVE-2019-18660

The Linux kernel before 5.4.1 on powerpc allows Information Exposure because the Spectre-RSB mitigation is not in place for all applicable CPUs, aka CID-39e72bf96f58. This is related to arch/powerpc/kernel/entry64.S and arch/powerpc/kernel/security.c...

OPENSUSE-SU-2019:2575-1 Security update for cups

This update for cups fixes the following issues: - CVE-2019-8675: Fixed a stack buffer overflow in libcups's asn1gettype functionbsc1146358. - CVE-2019-8696: Fixed a stack buffer overflow in libcups's asn1getpacked function bsc1146359. This update was imported from the SUSE:SLE-15:Update update...

Security update for cups (important)

openSUSE Security Update: Security update for cups Announcement ID: openSUSE-SU-2019:2573-1 Rating: important References: 1146358 1146359 Cross-References: CVE-2019-8675 CVE-2019-8696 Affected Products: openSUSE Leap 15.0 An update that fixes two vulnerabilities is now available. Description: Thi...

OPENSUSE-SU-2019:2573-1 Security update for cups

This update for cups fixes the following issues: - CVE-2019-8675: Fixed a stack buffer overflow in libcups's asn1gettype functionbsc1146358. - CVE-2019-8696: Fixed a stack buffer overflow in libcups's asn1getpacked function bsc1146359. This update was imported from the SUSE:SLE-15:Update update...

tcpdump: Stack-based buffer over-read in print-hncp.c:print_prefix() via crafted pcap

In tcpdump 4.9.2, a stack-based buffer over-read exists in the printprefix function of print-hncp.c via crafted packet data because of missing initialization...

PT-2019-13855 · Nbd · Nbd

Name of the Vulnerable Software and Affected Versions: nbd affected versions not specified Description: The issue is related to the Structured reply feature of the newstyle NBD protocol, which allows the server to send a reply in chunks. A bounds check error due to signed/unsigned confusion can...

SUSE-SU-2019:3030-1 Security update for cups

This update for cups fixes the following issues: - CVE-2019-8675: Fixed a stack buffer overflow in libcups's asn1gettype functionbsc1146358. - CVE-2019-8696: Fixed a stack buffer overflow in libcups's asn1getpacked function bsc1146359...

CVE-2019-2251

If a bitmap file is loaded from any un-authenticated source, there is a possibility that the bitmap can potentially cause stack buffer overflow. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon...