icu:locale_morph_fuzzer: Stack-buffer-overflow in ulocimp_toLanguageTag_74

Project: https://github.com/unicode-org/icu.git Detailed Report: https://oss-fuzz.com/testcase?key=4822681071255552 Project: icu Fuzzing Engine: libFuzzer Fuzz Target: localemorphfuzzer Job Type: libfuzzerasanicu Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 1 Crash Address:...

SnakeYAML YAML Buffer Overflow DoS

The vulnerability of the YAML serialization and deserialization library SnakeYAML lies in buffer overflows in the stack. Exploiting this vulnerability can allow an attacker to cause a service failure...

serenity:FuzzShellPosix: Stack-buffer-overflow in ak_verification_failed

Project: https://github.com/SerenityOS/serenity.git Detailed Report: https://oss-fuzz.com/testcase?key=5838737525047296 Project: serenity Fuzzing Engine: libFuzzer Fuzz Target: FuzzShellPosix Job Type: libfuzzerasanserenity Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Address:...

Amazon Linux 2 : php (ALASPHP8.2-2023-002)

The version of php installed on the remote host is prior to 8.2.9-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2PHP8.2-2023-002 advisory. GHSA-76gg-c692-v2mw: Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP NOTE: Fixed...

Amazon Linux 2 : php (ALASPHP8.0-2023-009)

The version of php installed on the remote host is prior to 8.0.30-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2PHP8.0-2023-009 advisory. GHSA-76gg-c692-v2mw: Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP NOTE: Fixe...

Amazon Linux 2 : php (ALASPHP8.1-2023-004)

The version of php installed on the remote host is prior to 8.1.22-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2PHP8.1-2023-004 advisory. GHSA-76gg-c692-v2mw: Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP NOTE: Fixe...

D-Link DIR-868L Router Buffer Overflow

The vulnerability of the D-Link DIR-868L router’s microprogramming software arises from buffer overflow on the stack. Exploiting this vulnerability allows a remote attacker to trigger a buffer overflow...

CNCSoft-B Buffer Overflow Code Execution

The vulnerability of the CNCSoft-B numerical control software and the DOPSoft software is caused by buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Advisory ROSA-SA-2023-2232

Software: firefox 102.14.0 OS: rosa-server79 packageevrstring: firefox-102.14.0-3.res7.x8664.rpm CVE-ID: CVE-2023-3417 BDU-ID: 2023-03965 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the Thunderbird email client exists due to improper handling of the Unicode character for overriding text directio...

Siemens JT2GO security vulnerability

Siemens Teamcenter Visualization is a software that provides teamwork capabilities for designing 2D and 3D scenarios.Siemens JT2GO is a JT file viewer. A stack buffer overflow vulnerability exists in Siemens Teamcenter Visualization and JT2Go, which can be exploited by an attacker to execute code...

D-Link DAP-2622 Code Execution

The vulnerability of the DDP microprogramming software-based wireless access points from D-Link, such as the DAP-2622, is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker operating remotely to execute arbitrary code...

serenity:FuzzPDF: Stack-buffer-overflow in ak_verification_failed

Project: https://github.com/SerenityOS/serenity.git Detailed Report: https://oss-fuzz.com/testcase?key=6273785365659648 Project: serenity Fuzzing Engine: libFuzzer Fuzz Target: FuzzPDF Job Type: libfuzzerasanserenity Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Address:...

Amazon Linux 2023 : php8.2, php8.2-bcmath, php8.2-cli (ALAS2023-2023-324)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-324 advisory. In PHP versions 8.0. before 8.0.30, 8.1. before 8.1.22, and 8.2. before 8.2.8 various XML functions rely on libxml global state to track configuration variables, like whether external entities...

Medium: ruby20

Issue Overview: An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5. A stack out-of-bounds read occurs in matchat during regular expression searching. A logical error involving order of validation and access in matchat could...

Oracle Linux 7 : qemu (ELSA-2018-4262)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-4262 advisory. - net: ignore packet size greater than INTMAX Jason Wang Orabug: 28762625 CVE-2018-17963 - pcnet: fix possible buffer overflow Jason Wang Orabug:...

LibTIFF Fax3encode DoS

The vulnerability of the fax3encode function in the LibTIFF library arises from buffer overflows in the stack. Exploiting this vulnerability could allow a malicious actor to cause a service failure...

LibTIFF rotateimage() DoS

The vulnerability of the rotateimage function in the LibTIFF library arises due to buffer overflow on the stack. Exploiting this vulnerability could allow an attacker to cause a service failure...

LibTIFF Buffer Overflow DoS

The vulnerability of the uvencode function in the LibTIFF library arises due to buffer overflow on the stack. Exploiting this vulnerability could allow an attacker to cause a service failure...

icu:locale_morph_fuzzer: Stack-buffer-overflow in icu_74::CheckedArrayByteSink::Append

Project: https://github.com/unicode-org/icu.git Detailed Report: https://oss-fuzz.com/testcase?key=6691907944972288 Project: icu Fuzzing Engine: libFuzzer Fuzz Target: localemorphfuzzer Job Type: libfuzzerasanicu Platform Id: linux Crash Type: Stack-buffer-overflow READ Crash Address:...

serenity:FuzzPDF: Stack-buffer-overflow in ak_verification_failed

Project: https://github.com/SerenityOS/serenity.git Detailed Report: https://oss-fuzz.com/testcase?key=5191499442421760 Project: serenity Fuzzing Engine: libFuzzer Fuzz Target: FuzzPDF Job Type: libfuzzerasanserenity Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Address:...