32 matches found
Denial Of Service (DoS)
boost is vulnerable to denial of service. Invalid pointer dereference flaws were found in the way the Boost regular expression library processed certain, invalid expressions. An attacker able to make an application using the Boost library process a specially-crafted regular expression could cause...
CVE-2019-6246
An issue was discovered in SVG++ aka svgpp 1.2.3. After calling the gil::getcolor function in Generic Image Library in Boost, the return code is used as an address, leading to an Access Violation because of an out-of-bounds read...
boost/boost_regex_fuzzer: Crash in boost::re_detail_NUMBER::basic_regex_creator<char, boost::regex_traits<char, boo
Project: https://github.com/boostorg/boost.git Detailed report: https://oss-fuzz.com/testcase?key=5753309638950912 Project: boost Fuzzer: aflboostregexfuzzer Fuzz target binary: boostregexfuzzer Job Type: aflasanboost Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x101eb0115af2 Crash...
boost: Crash in boost::re_detail_NUMBER::basic_regex_creator<char, boost::regex_traits<char, boo
Project: https://github.com/boostorg/boost.git Detailed report: https://oss-fuzz.com/testcase?key=4946144398409728 Project: boost Fuzzer: libFuzzerboostregexfuzzer Fuzz target binary: boostregexfuzzer Job Type: libfuzzerasanboost Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...
The vulnerability of the Red Hat Enterprise Linux operating system, which allows a remote attacker to compromise the accessibility of protected information
The vulnerability of the boost-devel-1.33.1 package for the Red Hat Enterprise Linux operating system can lead to a violation of the accessibility of protected information. This vulnerability can be exploited remotely...
Boost library protection bypass
Invalid UTF-8 sequences validation...
SuSE 10 Security Update : boost (ZYPP Patch Number 8210)
Two problems have been fixed in the boost library : - boost::pool's orderedmalloc could have overflowed when calculating the allocation size. CVE-2012-2677 - fully qualify the the boost::datetime::dstadjustmentoffsets non security. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text...
Durandal - Distributed CPU/GPU Hash Cracker v 0.5 released
Durandal - Distributed CPU/GPU Hash Cracker v 0.5 released Durandal is a distributed GPU/CPU computing software that aims to crack passwords. Mostly written in C++ with the Boost library, it works on many systems, however it is only built for Windows and GNU/Linux for the moment, on the x86 and x...
Green Dam Change System Time
// Green Dam listen on udp port 1234 and wait for the 4 bytes time value // We can send some bytes to change the time of the dest system // testgreendamatgmail.com include include include int mainint argc, char argv try if argc != 3 std::cerr " std::endl; std::cerr "Example: testgd 192.168.0.12...
openSUSE 10 Security Update : boost (boost-4946)
Certain regular expressions could cause the boost library to crash CVE-2008-0171, CVE-2008-0172. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update boost-4946. The text description of this plugin...
SuSE 10 Security Update : boost (ZYPP Patch Number 4978)
Certain regular expressions could cause the boost library to crash. CVE-2008-0171 / CVE-2008-0172 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid31452;...