Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 LTS / 23.04 : ConnMan vulnerabilities (USN-6236-1)

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 LTS / 23.04 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6236-1 advisory. It was discovered that ConnMan could be made to write out of bounds. A remote attacker could possibly use thi...

CVE-2020-23910: Out-of-bounds Write

Stack-based buffer overflow vulnerability in asn1c through v0.9.28 via function genhashget in genhash.c...

CVE-2020-23910

Stack-based buffer overflow vulnerability in asn1c through v0.9.28 via function genhashget in genhash.c...

PT-2023-11655

Name of the Vulnerable Software and Affected Versions asn1c versions prior to 0.9.29 Description A stack-based buffer overflow issue exists via the genhash get function in genhash.c. Recommendations For versions prior to 0.9.29, update to version 0.9.29 or later to resolve the issue...

CVE-2020-23910

CVE-2020-23910 affects the asn1c project up to version v0.9.28; the vulnerability is a stack-based buffer overflow in the function genhash_get within genhash.c. The connected documents do not provide exploitation details or remediation/patch information. NVD lists a HIGH availability impact with ...

CVE-2023-35012 IBM Db2 code execution

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 11.5 with a Federated configuration is vulnerable to a stack-based buffer overflow, caused by improper bounds checking. A local user with SYSADM privileges could overflow the buffer and execute arbitrary code on the system. IBM X-For...

CVE-2023-35012

Summary: CVE-2023-35012 affects IBM Db2 for Linux, UNIX and Windows (including Db2 Connect Server) 11.5 with a Federated configuration. The issue is a stack-based buffer overflow caused by improper bounds checking, enabling a local user with SYSADM privileges to overflow a buffer and execute arbi...

CVE-2023-35012: Stack-based Buffer Overflow

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 11.5 with a Federated configuration is vulnerable to a stack-based buffer overflow, caused by improper bounds checking. A local user with SYSADM privileges could overflow the buffer and execute arbitrary code on the system. IBM X-For...

PT-2023-5823 · D Link · D-Link Dir-3040

Name of the Vulnerable Software and Affected Versions: D-Link DIR-3040 affected versions not specified Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-3040 routers. The specific flaw exists within the prog.cgi binary, whi...

CVE-2023-37375

A vulnerability has been identified in Tecnomatix Plant Simulation V2201 All versions V2201.0008, Tecnomatix Plant Simulation V2302 All versions V2302.0002. The affected application is vulnerable to stack-based buffer overflow while parsing specially crafted SPP files. This could allow an attacke...

CVE-2023-37374

Summary of CVE-2023-37374 (Tecnomatix Plant Simulation): A stack-based buffer overflow occurs when parsing specially crafted STP files in Tecnomatix Plant Simulation. Affected products/versions are Tecnomatix Plant Simulation V2201 (all versions < V2201.0008) and V2302 (all versions

Panasonic Control FPWin Pro7

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: Panasonic Equipment: Control FPWIN Pro7 Vulnerabilities: Type Confusion, Stack-based Buffer Overflow, Improper Restriction of Operations within the Bounds of a Memory Buffer 2. RISK EVALUATION Successful exploitation of...

CVE-2023-37375: Stack-based Buffer Overflow

A vulnerability has been identified in Tecnomatix Plant Simulation V2201 All versions V2201.0008, Tecnomatix Plant Simulation V2302 All versions V2302.0002. The affected application is vulnerable to stack-based buffer overflow while parsing specially crafted SPP files. This could allow an attacke...

CVE-2023-37374: Stack-based Buffer Overflow

A vulnerability has been identified in Tecnomatix Plant Simulation V2201 All versions V2201.0008, Tecnomatix Plant Simulation V2302 All versions V2302.0002. The affected application is vulnerable to stack-based buffer overflow while parsing specially crafted STP files. This could allow an attacke...

CVE-2023-35322: Stack-based Buffer Overflow

Windows Deployment Services Remote Code Execution Vulnerability...

PT-2023-3601

Name of the Vulnerable Software and Affected Versions Panasonic Control FPWIN Pro versions 7.6.0.3 and all previous versions Description A stack-based buffer overflow in Panasonic Control FPWIN Pro may allow arbitrary code execution when opening specially crafted project files. This issue is...

CVE-2022-31810: Improper Input Validation

A vulnerability has been identified in SiPass integrated All versions V2.90.3.8. Affected server applications improperly check the size of data packets received for the configuration client login, causing a stack-based buffer overflow. This could allow an unauthenticated remote attacker to crash...

Fortinet Fortigate Proxy mode with deep inspection - Stack-based buffer overflow (FG-IR-23-183)

The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-23-183 advisory. - A stack-based overflow vulnerability CWE-124 in Fortinet FortiOS version 7.0.0 through 7.0.10 and 7.2.0 through 7.2.3 and...

CVE-2023-24018

A stack-based buffer overflow vulnerability exists in the libzebra.so.0.0.0 securitydecryptpassword functionality of Milesight UR32L v32.3.0.5. A specially crafted HTTP request can lead to a buffer overflow. An authenticated attacker can send an HTTP request to trigger this vulnerability...

Stack overflow

A stack-based buffer overflow vulnerability exists in the urvpnclient httpconnectionreadcb functionality of Milesight UR32L v32.3.0.5. A specially crafted network packet can lead to a buffer overflow. An attacker can send a malicious packet to trigger this vulnerability...