libpng:libpng_read_fuzzer: Dynamic-stack-buffer-overflow in OSS_FUZZ_png_read_info

Project: https://github.com/glennrp/libpng.git Detailed Report: https://oss-fuzz.com/testcase?key=4516115123404800 Project: libpng Fuzzing Engine: afl Fuzz Target: libpngreadfuzzer Job Type: aflasanlibpng Platform Id: linux Crash Type: Dynamic-stack-buffer-overflow WRITE Crash Address:...

OSV-2021-925 Stack-buffer-overflow in is_same_net6

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35889 Crash type: Stack-buffer-overflow READ Crash state: issamenet6 dhcp6mayberelay dhcp6mayberelay...

PT-2021-28334

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a stack-buffer-overflow read crash. The crash state involves functions such as is same net6, dhcp6 maybe relay. No information is...

dnsmasq:fuzz_dhcp6: Stack-buffer-overflow in is_same_net6

Detailed Report: https://oss-fuzz.com/testcase?key=5062365753245696 Project: dnsmasq Fuzzing Engine: libFuzzer Fuzz Target: fuzzdhcp6 Job Type: libfuzzerasandnsmasq Platform Id: linux Crash Type: Stack-buffer-overflow READ Crash Address: 0x7f150bc2b870 Crash State: issamenet6 dhcp6mayberelay...

Huawei EulerOS: Security Advisory for cairo (EulerOS-SA-2021-2095)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

fio:fuzz_parseini: Stack-buffer-overflow in add_file

Detailed Report: https://oss-fuzz.com/testcase?key=5737427762282496 Project: fio Fuzzing Engine: afl Fuzz Target: fuzzparseini Job Type: aflasanfio Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Address: 0x7f9d5a556820 Crash State: addfile strfilenamecb handleoption Sanitizer:...

OSV-2021-921 Stack-buffer-overflow in bool re2::DFA::InlinedSearchLoop<true, true, true>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35821 Crash type: Stack-buffer-overflow READ 1 Crash state: bool re2::DFA::InlinedSearchLoop re2::DFA::Search re2::Prog::SearchDFA...

PT-2021-28332

Name of the Vulnerable Software and Affected Versions: re2 affected versions not specified Description: The issue is related to a stack-buffer-overflow read, which occurs in the re2::DFA::InlinedSearchLoop function. This function is part of the re2::DFA::Search and re2::Prog::SearchDFA calls...

re2:re2_fuzzer: Stack-buffer-overflow in bool re2::DFA::InlinedSearchLoop<true, true, true>

Project: https://code.googlesource.com/re2 Detailed Report: https://oss-fuzz.com/testcase?key=5733284528128000 Project: re2 Fuzzing Engine: libFuzzer Fuzz Target: re2fuzzer Job Type: libfuzzerasani386re2 Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address: 0xfff929ef Crash...

Backdoor.Win32.Zombam.l Buffer Overflow

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/9729e9fc004ea49d3c2ddee28736dae3.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Zombam.l Vulnerability: Remote Stack Buffer Overflow Description: Zombam malware...

MGASA-2021-0312 Updated php packages fix security vulnerabilities

Updated PHP packages fix security vulnerabilities: - Fixed bug 81122: SSRF bypass in FILTERVALIDATEURL. CVE-2021-21705 PDOFirebird: - Fixed bug 76448: Stack buffer overflow in firebirdinfocb. CVE-2021-21704 - Fixed bug 76449: SIGSEGV in firebirdhandledoer. CVE-2021-21704 - Fixed bug 76450: SIGSEG...

OSV-2021-915 Stack-buffer-overflow in sc_asn1_read_tag

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35766 Crash type: Stack-buffer-overflow READ 1 Crash state: scasn1readtag scasn1findtag pivcomputesignature...

PT-2021-28329

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a stack-buffer-overflow read error. The crash state indicates involvement of functions such as sc asn1 read tag, sc asn1 find tag...

CentOS 8 : fwupd (CESA-2021:2566)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2021:2566 advisory. - grub2: acpi command allows privileged user to load crafted ACPI tables when Secure Boot is enabled CVE-2020-14372 - grub2: Use-after-free in rmmod...

opensc:fuzz_pkcs15_reader: Stack-buffer-overflow in sc_asn1_read_tag

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=4722545294180352 Project: opensc Fuzzing Engine: afl Fuzz Target: fuzzpkcs15reader Job Type: aflasanopensc Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address: 0x7ffe588dc643 Cra...

CVE-2021-33889

OpenThread wpantund through 2021-07-02 has a stack-based Buffer Overflow because of an inconsistency in the integer data type for metriclen...

CVE-2021-21704

Several flaws has been found in php. The pdofirebase module does not check the length of the server version string in a response packet causing a stack buffer overflow, does not verify the data and uses the wrong type to cast length leading to a crash, and does not validate the response before...

Advisory ROSA-SA-2021-1956

Software: procps-ng 3.3.10 OS: Cobalt 7.9 CVE-ID: CVE-2018-1126. CVE-Crit: CRITICAL. CVE-DESC: procps-ng before version 3.3.15 is vulnerable due to incorrect integer size in proc / alloc. , Which leads to truncation / integer overflow problems. This flaw is related to CVE-2018-1124. CVE-STATUS:...

Advisory ROSA-SA-2021-1832

Software: exempi 2.2.0 OS: Cobalt 7.9 CVE-ID: CVE-2017-18235 CVE-Crit: MEDIUM CVE-DESC: An issue was discovered in Exempi before 2.4.3. The VPXChunk class in XMPFiles / source / FormatSupport / WEBPSupport.cpp does not guarantee non-zero width and height values, allowing remote attackers to cause...

EulerOS Virtualization for ARM 64 3.0.2.0 : cairo (EulerOS-SA-2021-2095)

According to the versions of the cairo packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in cairo 1.16.0. There is an infinite loop in the function arcerrornormalized in the file...