DEBIAN-CVE-2020-14983

The server in Chocolate Doom 3.0.0 and Crispy Doom 5.8.0 doesn't validate the user-controlled numplayers value, leading to a buffer overflow. A malicious user can overwrite the server's stack...

CVE-2020-14983

The server in Chocolate Doom 3.0.0 and Crispy Doom 5.8.0 doesn't validate the user-controlled numplayers value, leading to a buffer overflow. A malicious user can overwrite the server's stack...

Buffer overflow

The server in Chocolate Doom 3.0.0 and Crispy Doom 5.8.0 doesn't validate the user-controlled numplayers value, leading to a buffer overflow. A malicious user can overwrite the server's stack...

CVE-2020-14983

The CVE-2020-14983 issue affects Chocolate Doom 3.0.0 (and Crispy Doom 5.8.0 in the report) where the server does not validate the user-controlled num_players value, causing a stack-based buffer overflow. The vulnerability is in the networking code and can lead to server stack overwrite, with the...

CVE-2020-14983

The server in Chocolate Doom 3.0.0 and Crispy Doom 5.8.0 doesn't validate the user-controlled numplayers value, leading to a buffer overflow. A malicious user can overwrite the server's stack...

PT-2020-14107 · Fabien Sanglard +2 · Crispy Doom +2

Name of the Vulnerable Software and Affected Versions: Chocolate Doom version 3.0.0 Crispy Doom version 5.8.0 Description: The issue arises from the server's failure to validate the user-controlled num players value, resulting in a buffer overflow. This allows a malicious user to overwrite the...

CVE-2020-14983: Buffer Copy without Checking Size of Input

The server in Chocolate Doom 3.0.0 and Crispy Doom 5.8.0 doesn't validate the user-controlled numplayers value, leading to a buffer overflow. A malicious user can overwrite the server's stack...

CVE-2019-20172

Kernel/VM/MemoryManager.cpp in SerenityOS before 2019-12-30 does not reject syscalls with pointers into the kernel-only virtual address space, which allows local users to gain privileges by overwriting a return address that was found on the kernel stack...

CVE-2017-1000376

libffi requests an executable stack allowing attackers to more easily trigger arbitrary code execution by overwriting the stack. Please note that libffi is used by a number of other libraries. It was previously stated that this affects libffi version 3.2.1 but this appears to be incorrect. libffi...

CVE-2019-13104

In Das U-Boot versions 2016.11-rc1 through 2019.07-rc4, an underflow can cause memcpy to overwrite a very large amount of data including the whole stack while reading a crafted ext4 filesystem...

CVE-2019-13104: Integer Underflow (Wrap or Wraparound)

In Das U-Boot versions 2016.11-rc1 through 2019.07-rc4, an underflow can cause memcpy to overwrite a very large amount of data including the whole stack while reading a crafted ext4 filesystem...

EulerOS 2.0 SP5 : libffi (EulerOS-SA-2019-1756)

According to the version of the libffi packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - libffi requests an executable stack allowing attackers to more easily trigger arbitrary code execution by overwriting the stack. Please note that...

PT-2019-13128

Name of the Vulnerable Software and Affected Versions Das U-Boot versions 2016.11-rc1 through 2019.07-rc4 Description An underflow issue can cause the memcpy function to overwrite a large amount of data, including the whole stack, when reading a crafted ext4 filesystem. Recommendations For Das...

Exploit for Classic Buffer Overflow in Advsys Build_Engine

CVE-2018-20343 This is a PoC for CVE-2018-20343https://vuln...

Code injection

Mitsubishi E-Designer, Version 7.52 Build 344 contains six code sections which may be exploited to overwrite the stack. This can result in arbitrary code execution, compromised data integrity, denial of service, and system crash...

CVE-2017-9638

Mitsubishi E-Designer, Version 7.52 Build 344 contains six code sections which may be exploited to overwrite the stack. This can result in arbitrary code execution, compromised data integrity, denial of service, and system crash...

CVE-2017-9638

CVE-2017-9638 affects Mitsubishi Electric Europe B.V. E-Designer, version 7.52 Build 344. The vulnerability is a stack-based buffer overflow in six code sections that can lead to arbitrary code execution, data integrity compromise, denial of service, and system crash. Connected sources (ICS-CERT)...

CVE-2017-9638

Mitsubishi E-Designer, Version 7.52 Build 344 contains six code sections which may be exploited to overwrite the stack. This can result in arbitrary code execution, compromised data integrity, denial of service, and system crash...

Important: Red Hat Security Advisory: kernel-alt security, bug fix, and enhancement update

An update for kernel-alt is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fro...

kernel: Arbitrary stack overwrite causing oops via crafted signal frame

A flaw was found in the Linux kernel's handling of signal frame on PowerPC systems. A malicious local user process could craft a signal frame allowing an attacker to corrupt memory...