SUSE CVE-2011-1659

Integer overflow in posix/fnmatch.c in the GNU C Library aka glibc or libc6 2.13 and earlier allows context-dependent attackers to cause a denial of service application crash via a long UTF8 string that is used in an fnmatch call with a crafted pattern argument, a different vulnerability than...

SUSE CVE-2015-2059

The stringpreputf8toucs4 function in libin before 1.31, as used in jabberd2, allows context-dependent attackers to read system memory and possibly have other unspecified impact via invalid UTF-8 characters in a string, which triggers an out-of-bounds read...

SUSE CVE-2015-4522

The nsUnicodeToUTF8::GetMaxLength function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 might allow remote attackers to cause a denial of service memory corruption and application crash or possibly have unspecified other impact via unknown vectors, related to an "overflow."...

SUSE CVE-2017-7867

International Components for Unicode ICU for C/C++ before 2017-02-13 has an out-of-bounds write caused by a heap-based buffer overflow related to the utf8TextAccess function in common/utext.cpp and the utextsetNativeIndex function...

SUSE CVE-2017-7868

International Components for Unicode ICU for C/C++ before 2017-02-13 has an out-of-bounds write caused by a heap-based buffer overflow related to the utf8TextAccess function in common/utext.cpp and the utextmoveIndex32 function...

SUSE CVE-2018-5178

A buffer overflow was found during UTF8 to Unicode string conversion within JavaScript with extremely large amounts of data. This vulnerability requires the use of a malicious or vulnerable legacy extension in order to occur. This vulnerability affects Thunderbird ESR 52.8, Thunderbird 52.8, and...

SUSE CVE-2018-16429

GNOME GLib 2.56.1 has an out-of-bounds read vulnerability in gmarkupparsecontextparse in gmarkup.c, related to utf8str...

SUSE CVE-2019-10691

The JSON encoder in Dovecot before 2.3.5.2 allows attackers to repeatedly crash the authentication service by attempting to authenticate with an invalid UTF-8 sequence as the username...

SUSE CVE-2019-12207

njs through 0.3.1, used in NGINX, has a heap-based buffer over-read in nxtutf8decode in nxt/nxtutf8.c...

SUSE-SU-2022:4280-1 Security update for sudo

This update for sudo fixes the following issues: Security fixes: - CVE-2022-43995: Fixed a potential heap-based buffer over-read when entering a password of seven characters or fewer and using the crypt password backend bsc1204986. Other: - Make sure SIGCHLD is not ignored when sudo is executed;...

krb5:Fuzz_chpw: Heap-buffer-overflow in krb5int_utf8_normalize

Project: https://github.com/krb5/krb5.git Detailed Report: https://oss-fuzz.com/testcase?key=5458404279975936 Project: krb5 Fuzzing Engine: honggfuzz Fuzz Target: Fuzzchpw Job Type: honggfuzzasankrb5 Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x60300000047b Crash...

EyouCms 跨站请求伪造漏洞

Zanzan Network Technology EyouCms Eyou CMS is an open source content management system CMS based on ThinkPHP by China Zanzan Network Technology. A security vulnerability exists in EyouCms version V1.5.9-UTF8-SP1, which originates from a cross-site request forgery CSRF contained in the Edit...

CVE-2022-43323

CVE-2022-43323 affects EyouCMS version 1.5.9-UTF8-SP1. The issue is a Cross-Site Request Forgery (CSRF) in the Top Up Balance component within the Edit Member module. Root cause detail is CSRF in the specific Top Up Balance functionality; exploitation details are not elaborated beyond the CSRF la...

krb5:Fuzz_chpw: Use-after-poison in krb5int_utf8_normalize

Project: https://github.com/krb5/krb5.git Detailed Report: https://oss-fuzz.com/testcase?key=4803710668111872 Project: krb5 Fuzzing Engine: afl Fuzz Target: Fuzzchpw Job Type: aflasankrb5 Platform Id: linux Crash Type: Use-after-poison READ 1 Crash Address: 0x7f1de6dfd02b Crash State:...

CVE-2022-38890

Nginx NJS v0.7.7 was discovered to contain a segmentation violation via njsutf8next at src/njsutf8.h...

CVE-2022-38890

Nginx NJS v0.7.7 was discovered to contain a segmentation violation via njsutf8next at src/njsutf8.h...

CVE-2022-38890

Nginx NJS v0.7.7 was discovered to contain a segmentation violation via njsutf8next at src/njsutf8.h...

PT-2022-24613 · Nginx · Nginx Njs

Name of the Vulnerable Software and Affected Versions: Nginx NJS version 0.7.7 Description: A segmentation violation was discovered in Nginx NJS via the njs utf8 next function at src/njs utf8.h. Recommendations: For Nginx NJS version 0.7.7, at the moment, there is no information about a newer...

CVE-2022-36225

CVE-2022-36225 affects EyouCMS v1.5.8-UTF8-SP1. A CSRF vulnerability exists in the backend-related features: background, column management, and add functions. The NVD entry lists CVSS v3.1 base score 8.8 (HIGH) with network attack vector, user interaction required, and impacts to confidentiality,...

PT-2022-23267 · Eyoucms · Eyoucms

Name of the Vulnerable Software and Affected Versions: EyouCMS version 1.5.8-UTF8-SP1 Description: The issue concerns a Cross Site Request Forgery CSRF vulnerability. It affects the background, column management function, and add functionality. Recommendations: For EyouCMS version 1.5.8-UTF8-SP1,...