LibTIFF 缓冲区错误漏洞

LibTIFF is a library for reading and writing TIFF Tagged Image File Format files. The library contains a number of command line tools for working with TIFF files. LibTIFF suffers from a buffer overflow vulnerability, which stems from a boundary error in tiffcrop at tools/tiffcrop.c:3724 when...

LibTIFF 资源管理错误漏洞

LibTIFF is a library for reading and writing TIFF Tagged Image File Format files. The library contains a number of command line tools for working with TIFF files. LibTIFF suffers from a buffer overflow vulnerability, which stems from a boundary error in tiffcrop at tools/tiffcrop.c:3701 when...

LibTIFF 缓冲区错误漏洞

LibTIFF is a library for reading and writing TIFF Tagged Image File Format files. The library contains a number of command-line tools for processing TIFF files. libTIFF suffers from an out-of-bounds read vulnerability, which stems from a boundary error in iffcrop at tools/tiffcrop.c:3488 when...

Dell PowerScale OneFS 缓冲区错误漏洞

Dell PowerScale OneFS is an operating system from Dell USA Inc. PowerScale OneFS operating system that provides a horizontally scalable NAS. Dell PowerScale OneFS suffers from a buffer overflow vulnerability that stems from a boundary error when processing untrusted input, which can be exploited ...

D-Link DIR-825 Buffer Overflow Vulnerability (CNVD-2023-21665)

D-Link DIR-825 is a router from D-Link, a Chinese company. D-Link DIR-825 v1.33.0.44ebdd4-embedded and previous versions are vulnerable to a buffer overflow vulnerability, which is caused by a boundary error when handling untrusted input, and can be exploited to execute arbitrary code against the...

ROS-20230127-02

Vim text editor vulnerability is related to NULL pointer dereferencing error in function guix11createblankmouse in guix11.c. Exploiting the vulnerability could allow an attacker, remotely, trick the victim into opening a specially crafted file and performing a denial-of-service attack DoS. "denia...

Vim text editor’s do_string_sub() function vulnerability, allowing a hacker to execute arbitrary code

The vulnerability of the dostringsub function in the Vim text editor is related to a boundary error in processing unreliable input data. Exploiting this vulnerability allows an attacker to execute arbitrary code...

Google Chrome Buffer Overflow Vulnerability (CNVD-2023-12026)

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a security vulnerability that originates from a boundary error in the platform application for untrusted inputs, which can be exploited by a remote attacker to convince users to install malicious extension...

ROS-20230112-02

A vulnerability in the Vim text editor is related to a boundary error in the msgputsprintf0 function in message.c. Exploitation of the vulnerability could allow an attacker acting remotely to trick the victim into to open a specially crafted file, cause a heap buffer overflow, and execute arbitra...

The vulnerability of the PJSIP multimedia library, related to buffer overflows in dynamic memory, allows attackers to execute arbitrary code on the target system.

The vulnerability of the PJSIP multimedia library is related to a boundary error during the decoding of STUN messages. Exploiting this vulnerability allows an attacker to send a specially crafted STUN message to the application, cause a buffer overflow, and execute arbitrary code on the target...

Fedora 35 : samba (2022-003403ec6b)

The remote Fedora 35 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-003403ec6b advisory. Update to version 4.15.12 ---- Update to version 4.15.11 - Security fixes for CVE-2022-3437 Tenable has extracted the preceding description block...

D-Link DIR-3060 Buffer Overflow Vulnerability

D-Link DIR-3060 is a router from China Friendship Communications D-Link Inc. It provides a function to connect to the network.The D-Link DIR-3060 DIR3060A1FW111B04.bin version contains a buffer overflow vulnerability, which stems from a boundary error in FUN0049ac18 when handling untrusted input....

D-Link DIR-3060 安全漏洞

D-Link DIR-3060 is a router from China Friendship Communications D-Link Inc. It provides a function to connect to the network.The D-Link DIR-3060 DIR3060A1FW111B04.bin version contains a buffer overflow vulnerability, which stems from a boundary error in FUN0049ac18 when handling untrusted input....

PicoC StringStrncpy function buffer overflow vulnerability

PicoC is a lightweight C interpreter. A buffer overflow vulnerability exists in PicoC version 3.2.2, which stems from a boundary error in the StringStrncpy function in cstdlib/string.c when ExpressionParseFunctionCall is called while processing untrusted input. An attacker can exploit the...

ROS-20221108-01

A vulnerability in the cURL command line utility is related to an error in parsing URLs with IDN characters that are replaced by ASCII analogs during IDN conversion. Exploitation of the vulnerability could allow an attacker acting remotely to bypass curl's HSTS inspection and force it to Use the...

EulerOS 2.0 SP10 : net-snmp (EulerOS-SA-2022-2692)

According to the versions of the net-snmp packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The vulnerability exists due to a boundary error when handling INDEX of NET-SNMP-VACM-MIB. A remote attacker can trick the victim into loading...

EulerOS 2.0 SP10 : net-snmp (EulerOS-SA-2022-2660)

According to the versions of the net-snmp packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The vulnerability exists due to a boundary error when handling INDEX of NET-SNMP-VACM-MIB. A remote attacker can trick the victim into loading...

GLSA-202210-29 : Net-SNMP: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202210-29 Net-SNMP: Multiple Vulnerabilities - The vulnerability exists due to a boundary error when handling INDEX of NET-SNMP-VACM-MIB. A remote attacker can trick the victim into loading a specially crafted MIB collection,...

The vulnerability of the D-Bus inter-process communication mechanism, related to a boundary error caused by an invalid fixed-length array of elements, allows a malicious actor to trigger a service failure.

The vulnerability of the D-Bus inter-process communication mechanism is related to a boundary error caused by an invalid fixed-length array element, where the length of the array is not a multiple of the length of an individual element. Exploiting this vulnerability can allow a malicious actor to...

Bento4 AP4_HdlrAtom::AP4_HdlrAtom function denial of service vulnerability

Bento4 is an open source C library for reading and writing MP4 files. version v1.6.0-639 of Bento4 suffers from a denial of service vulnerability that stems from a boundary error in the component AP4HdlrAtom::AP4HdlrAtom when handling untrusted input. An attacker could exploit the vulnerability t...