CVE-2019-20684

Concrete details available: CVE-2019-20684 is a stack-based buffer overflow in multiple NETGEAR routers (e.g., D3600, D6000, D6200, D7000, R6700v2, XR500, etc.) that is exploitable by an unauthenticated attacker over adjacent network. The underlying cause is improper data boundary checks leading ...

CVE-2019-20683

CVE-2019-20683 is a stack-based buffer overflow in various NETGEAR routers/gateways that can be exploited by an unauthenticated attacker. Affected products include D3600 (pre-1.0.0.76), D6000 (pre-1.0.0.76), D6200 (pre-1.1.00.32), D7000 (pre-1.0.1.68), JR6150 (pre-1.0.1.18), PR2000 (pre-1.0.0.28)...

CVE-2019-20683

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D3600 before 1.0.0.76, D6000 before 1.0.0.76, D6200 before 1.1.00.32, D7000 before 1.0.1.68, JR6150 before 1.0.1.18, PR2000 before 1.0.0.28, R6020 before 1.0.0.38, R6050 before...

CVE-2019-20682

The vulnerability CVE-2019-20682 affects NETGEAR devices and is caused by a stack-based buffer overflow exploitable by an unauthenticated attacker. Affected models include D3600 (pre-1.0.0.76), D6000 (pre-1.0.0.76), D6200 (pre-1.1.00.32), D7000 (pre-1.0.1.68), JR6150 (pre-1.0.1.18), PR2000 (pre-1...

CVE-2019-20682

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D3600 before 1.0.0.76, D6000 before 1.0.0.76, D6200 before 1.1.00.32, D7000 before 1.0.1.68, JR6150 before 1.0.1.18, PR2000 before 1.0.0.28, R6020 before 1.0.0.38, R6050 before...

EulerOS Virtualization 3.0.2.2 : glibc (EulerOS-SA-2020-1478)

According to the versions of the glibc packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In the GNU C Library aka glibc or libc6 through 2.28, the getaddrinfo function would successfully parse a string that contained an...

EulerOS Virtualization 3.0.2.2 : libarchive (EulerOS-SA-2020-1488)

According to the versions of the libarchive package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - libarchive version commit 5a98dcf8a86364b3c2c469c85b93647dfb139961 onwards version v2.8.0 onwards contains a CWE-835: Loop wit...

Huawei EulerOS: Security Advisory for sudo (EulerOS-SA-2020-1435)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization 3.0.2.2 : cifs-utils (EulerOS-SA-2020-1495)

According to the version of the cifs-utils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - Stack-based buffer overflow in cifskey.c or cifscreds.c in cifs-utils before 6.4, as used in pamcifscreds, allows remote attacker...

CVE-2020-6996

Triangle MicroWorks DNP3 Outstation LibrariesDNP3 Outstation .NET Protocol components and DNP3 Outstation ANSI C source code libraries are affected:3.16.00 through 3.25.01. A specially crafted message may cause a stack-based buffer overflow. Authentication is not required to exploit this...

Stack overflow

Triangle MicroWorks DNP3 Outstation LibrariesDNP3 Outstation .NET Protocol components and DNP3 Outstation ANSI C source code libraries are affected:3.16.00 through 3.25.01. A specially crafted message may cause a stack-based buffer overflow. Authentication is not required to exploit this...

CVE-2020-6996

CVE-2020-6996 affects Triangle MicroWorks DNP3 Outstation Libraries (DNP3 Outstation .NET Protocol components and DNP3 Outstation ANSI C source) in versions 3.16.00–3.25.01. Root cause: stack-based buffer overflow triggered by a specially crafted message, with no authentication required. Impact: ...

CVE-2019-20640

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D3600 before 1.0.0.76, D6000 before 1.0.0.76, D6200 before 1.1.00.32, D7000 before 1.0.1.68, JR6150 before 1.0.1.18, PR2000 before 1.0.0.28, R6020 before 1.0.0.38, R6050 before...

Stack overflow

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D3600 before 1.0.0.76, D6000 before 1.0.0.76, D6200 before 1.1.00.32, D7000 before 1.0.1.68, JR6150 before 1.0.1.18, PR2000 before 1.0.0.28, R6020 before 1.0.0.38, R6050 before...

CVE-2019-20640

CVE-2019-20640 affects multiple NETGEAR devices (D3600, D6000, D6200, D7000, JR6150, PR2000, R6020, R6050, R6080, R6120, R6220, R6260, R6700v2, R6800, R6900v2, WNR2020, XR500) with a stack-based buffer overflow triggered by an unauthenticated attacker. The root cause is a memory boundary check fa...

EulerOS 2.0 SP3 : sudo (EulerOS-SA-2020-1435)

According to the versions of the sudo package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In Sudo through 1.8.29, an attacker with access to a Runas ALL sudoer account can impersonate a nonexistent user by invoking sudo with a numeric ui...

Eaton HMiSoft VU3 File Parsing wMailBlindCopyToLen Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Eaton HMiSoft. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of the...

Low: Red Hat Security Advisory: ntp security update

An update for ntp is now available for Red Hat Enterprise Linux 7.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Triangle MicroWorks DNP3 Outstation Libraries

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Triangle MicroWorks Equipment: DNP3 Outstation Libraries Vulnerability: Stacked-based Buffer Overflow 2. RISK EVALUATION Successful exploitation of this vulnerability could possibly allow remote...

CVE-2015-8546

Concrete details: CVE-2015-8546 affects Samsung mobile devices with Shannon333 baseband (Galaxy S6/S6 Edge/S6 Edge+/Note5) and firmware up to 2015-11-12. Vulnerability is a stack-based buffer overflow in the baseband process, enabling remote code execution via a fake base station. Exploitation st...