Lucene search
+L

10827 matches found

NVD
NVD
•added 2021/08/13 11:15 p.m.•36 views

CVE-2021-21813

Within the function HandleFileArg the argument filepattern is under control of the user who passes it in from the command line. filepattern is passed directly to memcpy copying the path provided by the user into a staticly sized buffer without any length checks resulting in a stack-buffer overflo...

7.8CVSS0.00333EPSS
SaveExploits1References1
Prion
Prion
•added 2021/08/13 11:15 p.m.•35 views

Stack overflow

A stack-based buffer overflow vulnerability exists in the command-line-parsing HandleFileArg functionality of AT&T Labs’ Xmill 0.7. Within the function HandleFileArg the argument filepattern is under control of the user who passes it in from the command line. filepattern is passed directly to...

4.6CVSS8.9AI score0.00333EPSS
SaveExploits1References1Affected Software1
attackerkb
attackerkb
•added 2021/08/13 11:15 p.m.•13 views

CVE-2021-21813

Within the function HandleFileArg the argument filepattern is under control of the user who passes it in from the command line. filepattern is passed directly to memcpy copying the path provided by the user into a staticly sized buffer without any length checks resulting in a stack-buffer overflo...

7.8CVSS7.3AI score0.00333EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2021/08/13 10:43 p.m.•71 views

CVE-2021-21815

A stack-based buffer overflow vulnerability exists in the command-line-parsing HandleFileArg functionality of AT&T Labs' Xmill 0.7. Within the function HandleFileArg the argument filepattern is under control of the user who passes it in from the command line. filepattern is passed directly to...

7.8CVSS8.2AI score0.00333EPSS
SaveExploits1References1
CVE
CVE
•added 2021/08/13 10:40 p.m.•164 views

CVE-2021-21813

AT&T Labs Xmill 0.7 contains a stack-based buffer overflow in the command-line handle argument path. In HandleFileArg, the filepattern supplied by the user is copied into a fixed-size buffer (400 bytes) via unsafe copy operations (memcpy/strcpy/strlen), without proper length checks. This can over...

7.8CVSS7.8AI score0.00333EPSS
SaveExploits1References1Affected Software1
OSS-Fuzz
OSS-Fuzz
•added 2021/08/13 6:18 p.m.•9 views

knot-dns:fuzz_zscanner: Stack-buffer-overflow in parse

Project: https://gitlab.labs.nic.cz/knot/knot-dns Detailed Report: https://oss-fuzz.com/testcase?key=5926354183913472 Project: knot-dns Fuzzing Engine: libFuzzer Fuzz Target: fuzzzscanner Job Type: libfuzzerasanknot-dns Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 2 Crash Address:...

5.9AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/08/13 12:00 a.m.•8 views

CVE-2021-21815: Out-of-bounds Write

A stack-based buffer overflow vulnerability exists in the command-line-parsing HandleFileArg functionality of AT&T Labs' Xmill 0.7. Within the function HandleFileArg the argument filepattern is under control of the user who passes it in from the command line. filepattern is passed directly to...

7.8CVSS8AI score0.00333EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/08/13 12:00 a.m.•5 views

CVE-2021-21813: Out-of-bounds Write

Within the function HandleFileArg the argument filepattern is under control of the user who passes it in from the command line. filepattern is passed directly to memcpy copying the path provided by the user into a staticly sized buffer without any length checks resulting in a stack-buffer overflo...

7.8CVSS6.1AI score0.00333EPSS
SaveExploits1References2
OSS-Fuzz
OSS-Fuzz
•added 2021/08/12 8:04 p.m.•10 views

frr:zebra: Stack-buffer-overflow in netlink_parse_rtattr

Project: https://github.com/FRRouting/frr.git Detailed Report: https://oss-fuzz.com/testcase?key=4825168559079424 Project: frr Fuzzing Engine: libFuzzer Fuzz Target: zebra Job Type: libfuzzerasanfrr Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Address: 0x7ffd93ba90e0 Crash...

5.9AI score
SaveExploits0
osv_cve
osv_cve
•added 2021/08/12 3:15 p.m.•30 views

CVE-2021-20314

Stack buffer overflow in libspf2 versions below 1.2.11 when processing certain SPF macros can lead to Denial of service and potentially code execution via malicious crafted SPF explanation messages...

9.8CVSS6.2AI score0.02833EPSS
SaveExploits0References5
Debian CVE
Debian CVE
•added 2021/08/12 2:37 p.m.•104 views

CVE-2021-20314

Stack buffer overflow in libspf2 versions below 1.2.11 when processing certain SPF macros can lead to Denial of service and potentially code execution via malicious crafted SPF explanation messages...

9.8CVSS9.8AI score0.02833EPSS
SaveExploits0
Mend
Mend
•added 2021/08/12 2:37 p.m.•5 views

CVE-2021-20314

Stack buffer overflow in libspf2 versions below 1.2.11 when processing certain SPF macros can lead to Denial of service and potentially code execution via malicious crafted SPF explanation messages...

9.8CVSS0.02833EPSS
SaveExploits0References10
CVE
CVE
•added 2021/08/12 2:37 p.m.•297 views

CVE-2021-20314

CVE-2021-20314 concerns the libspf2 library (versions below 1.2.11). The vulnerability is a stack-buffer overflow when processing certain SPF macros that can lead to denial of service and potentially code execution via crafted SPF explanation messages. Related advisories (GLSA-202401-22) describe...

9.8CVSS9.6AI score0.02833EPSS
SaveExploits0References5Affected Software1
AlpineLinux
AlpineLinux
•added 2021/08/12 2:37 p.m.•152 views

CVE-2021-20314

Stack buffer overflow in libspf2 versions below 1.2.11 when processing certain SPF macros can lead to Denial of service and potentially code execution via malicious crafted SPF explanation messages...

9.8CVSS9.8AI score0.02833EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2021/08/12 12:00 a.m.•52 views

Debian DLA-2739-1 : libspf2 - LTS security update

The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-2739 advisory. - Stack buffer overflow in libspf2 versions below 1.2.11 when processing certain SPF macros can lead to Denial of service and potentially code execution via malicious craft...

9.8CVSS8.3AI score0.02833EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/08/12 12:00 a.m.•6 views

CVE-2021-20314: Out-of-bounds Write

Stack buffer overflow in libspf2 versions below 1.2.11 when processing certain SPF macros can lead to Denial of service and potentially code execution via malicious crafted SPF explanation messages...

9.8CVSS6.3AI score0.02833EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2021/08/12 12:00 a.m.•34 views

Debian DSA-4955-1 : libspf2 - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dsa-4955 advisory. - Stack buffer overflow in libspf2 versions below 1.2.11 when processing certain SPF macros can lead to Denial of service and potentially code execution via malicious...

9.8CVSS8.3AI score0.02833EPSS
SaveExploits0References5
Packet Storm
Packet Storm
•added 2021/08/11 12:00 a.m.•331 views

HackTool.Win32.Hidd.b Buffer Overflow

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/665a408981294ca49be23096363eec2f.txt Contact: [email protected] Media: twitter.com/malvuln Threat: HackTool.Win32.Hidd.b Vulnerability: Remote Stack Buffer Overflow UDP Datagram Description: The...

0.8AI score
SaveExploits0
CNVD
CNVD
•added 2021/08/11 12:00 a.m.•76 views

NETGEAR R6400 Stack Buffer Overflow Vulnerability (CNVD-2022-06699)

NETGEAR R6400 is an AC1750 dual-band WiFi router.A stack buffer overflow vulnerability exists in versions prior to NETGEAR R6400 1.0.1.52. No details of the vulnerability are currently available...

7.2CVSS5.5AI score0.01219EPSS
SaveExploits0References1
CNVD
CNVD
•added 2021/08/11 12:00 a.m.•72 views

fig2dev stack buffer overflow vulnerability

fig2dev is used to convert .fig files to various graphics languages and formats. A stack buffer overflow vulnerability exists in the putarrow component of genpict2e.c in fig2dev version 3.2.7b. An attacker could exploit this vulnerability to cause a denial of service by converting xfig files to...

4.3CVSS4.9AI score0.00778EPSS
SaveExploits1
Rows per page
Query Builder