Apache Traffic Server Cachekey Plugin Data Compromise

The vulnerability of the cachekey plugin in the Apache Traffic Server web server arises from an operation that occurs outside the buffer limits of the stack. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected...

Adobe Photoshop buffer error vulnerability

Adobe Photoshop is a set of image processing software from the American company Audobee Adobe. A stack buffer overflow vulnerability exists in Adobe Photoshop. An attacker could exploit this vulnerability to execute arbitrary code...

PT-2021-3641

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 92.0.4515.107 Description The issue is related to a stack buffer overflow in the printing function of Google Chrome, which could allow a remote attacker who has compromised the renderer process to potentially...

chromium -- multiple vulnerabilities

Chrome Releases reports: This release contains 35 security fixes, including: 1210985 High CVE-2021-30565: Out of bounds write in Tab Groups. Reported by David Erceg on 2021-05-19 1202661 High CVE-2021-30566: Stack buffer overflow in Printing. Reported by Leecraso and Guang Gong of 360 Alpha Lab o...

imagemagick:encoder_ps_fuzzer: Stack-buffer-overflow in PeekMagickByteBuffer

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=6704119854268416 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderpsfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type: Stack-buffer-overflow READ 1...

openvpn:fuzz_proxy: Stack-buffer-overflow in unicodize

Detailed Report: https://oss-fuzz.com/testcase?key=4909025455112192 Project: openvpn Fuzzing Engine: honggfuzz Fuzz Target: fuzzproxy Job Type: honggfuzzasanopenvpn Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 1 Crash Address: 0x7fff8ccc9320 Crash State: unicodize ntlmphase3...

Huawei EulerOS: Security Advisory for cairo (EulerOS-SA-2021-2213)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

imagemagick:encoder_pocketmod_fuzzer: Stack-buffer-overflow in PeekMagickByteBuffer

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5185582895595520 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderpocketmodfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type: Stack-buffer-overflow RE...

OSV-2021-1017 Stack-buffer-overflow in piv_compute_signature

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36200 Crash type: Stack-buffer-overflow WRITE Crash state: pivcomputesignature sccomputesignature usekey...

OSV-2021-1015 Dynamic-stack-buffer-overflow in VP8SetSegmentParams

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36191 Crash type: Dynamic-stack-buffer-overflow WRITE Crash state: VP8SetSegmentParams SetLoopParams OneStatPass...

PT-2021-27661

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a stack-buffer-overflow crash. Technical details about the crash include the function names piv compute signature, sc compute...

PT-2021-27660

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type identified as Dynamic-stack-buffer-overflow WRITE. The crash state involves several functions: VP8SetSegmentParams,...

Amazon Linux 2 : grub2 (ALAS-2021-1684)

The version of grub2 installed on the remote host is prior to 2.06-2. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2021-1684 advisory. 2024-02-29: CVE-2019-14865 was added to this advisory. A flaw was found in the grub2-set-bootflag utility of grub2. A local...

openSUSE 15 Security Update : curl (openSUSE-SU-2021:1762-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2021:1762-1 advisory. - curl 7.7 through 7.76.1 suffers from an information disclosure when the -t command line option, known as CURLOPTTELNETOPTIONS in libcurl, is used ...

EulerOS 2.0 SP5 : cairo (EulerOS-SA-2021-2213)

According to the version of the cairo packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A flaw was found in cairo's image-compositor.c. This flaw allows an attacker who can provide a crafted input file to cairo's image-compositor for...

CVE-2021-34827

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1330 1.13B01 BETA routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the SOAPAction HTTP header. The issue...

CVE-2021-34827

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1330 1.13B01 BETA routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the SOAPAction HTTP header. The issue...

htslib:hts_open_fuzzer: Dynamic-stack-buffer-overflow in bcf_fmt_sized_array

Project: https://github.com/samtools/htslib.git Detailed Report: https://oss-fuzz.com/testcase?key=6226486104293376 Project: htslib Fuzzing Engine: afl Fuzz Target: htsopenfuzzer Job Type: aflasanhtslib Platform Id: linux Crash Type: Dynamic-stack-buffer-overflow WRITE 8 Crash Address:...

libtiff:tiff_read_rgba_fuzzer: Dynamic-stack-buffer-overflow in TIFFVGetFieldDefaulted

Project: https://gitlab.com/libtiff/libtiff.git Detailed Report: https://oss-fuzz.com/testcase?key=5227009264451584 Project: libtiff Fuzzing Engine: afl Fuzz Target: tiffreadrgbafuzzer Job Type: aflasanlibtiff Platform Id: linux Crash Type: Dynamic-stack-buffer-overflow READ 8 Crash Address:...

libtpms:fuzz: Dynamic-stack-buffer-overflow in CryptDigestUpdateInt

Project: https://github.com/stefanberger/libtpms.git Detailed Report: https://oss-fuzz.com/testcase?key=5865241224282112 Project: libtpms Fuzzing Engine: afl Fuzz Target: fuzz Job Type: aflasanlibtpms Platform Id: linux Crash Type: Dynamic-stack-buffer-overflow WRITE 8 Crash Address: 0x7ffdc77848...