12248 matches found
Heap overflow
In libpbc.a in PBC through 2017-03-02, there is a heap-based buffer over-read in pbcMipnew in map.c...
CVE-2018-12915
In libpbc.a in PBC through 2017-03-02, there is a buffer over-read in calchash in map.c...
CVE-2018-12915
CVE-2018-12915 is a buffer over-read in the calc_hash function of map.c within the Liberty/Google protocol buffer library (PBC) static library libpbc.a, affected up to 2017-03-02. Multiple connected sources (Red Hat, CNVD, NVD, CVE listings) corroborate the description. The provided documents do ...
CVE-2018-12917
CVE-2018-12917 is a vulnerability in the libpbc.a library (PBC) up to 2017-03-02. Multiple sources describe a heap-based buffer over-read in _pbcM_ip_new within map.c. The issue is documented across NVD, Red Hat, CNVD, CVE/CVEList, and others, confirming a memory read beyond bounds in that specif...
CVE-2018-12917
In libpbc.a in PBC through 2017-03-02, there is a heap-based buffer over-read in pbcMipnew in map.c...
CVE-2018-12915
In libpbc.a in PBC through 2017-03-02, there is a buffer over-read in calchash in map.c...
Heap overflow
The mghandlecgi function in mongoose.c in Mongoose 6.11 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash, or NULL pointer dereference via an HTTP request, related to the mbufinsert function...
CVE-2018-12098
The liblnkdatablockread function in liblnkdatablock.c in liblnk through 2018-04-19 allows remote attackers to cause an information disclosure heap-based buffer over-read via a crafted lnk file. NOTE: the vendor has disputed this as described in libyal/liblnk issue 33 on GitHub...
CVE-2018-12097
The liblnklocationinformationreaddata function in liblnklocationinformation.c in liblnk through 2018-04-19 allows remote attackers to cause an information disclosure heap-based buffer over-read via a crafted lnk file. NOTE: the vendor has disputed this as described in libyal/liblnk issue 33 on...
CVE-2018-12096
The liblnkdatastringgetutf8stringsize function in liblnkdatastring.c in liblnk through 2018-04-19 allows remote attackers to cause an information disclosure heap-based buffer over-read via a crafted lnk file. NOTE: the vendor has disputed this as described in libyal/liblnk issue 33 on GitHub...
CVE-2018-11731
The libfsntfsmftentryreadattributes function in libfsntfsmftentry.c in libfsntfs through 2018-04-20 allows remote attackers to cause an information disclosure heap-based buffer over-read via a crafted ntfs file. NOTE: the vendor has disputed this as described in libyal/libfsntfs issue 8 on GitHub...
CVE-2018-12098
The liblnkdatablockread function in liblnkdatablock.c in liblnk through 2018-04-19 allows remote attackers to cause an information disclosure heap-based buffer over-read via a crafted lnk file. NOTE: the vendor has disputed this as described in libyal/liblnk issue 33 on GitHub...
CVE-2018-11731
The libfsntfsmftentryreadattributes function in libfsntfsmftentry.c in libfsntfs through 2018-04-20 allows remote attackers to cause an information disclosure heap-based buffer over-read via a crafted ntfs file. NOTE: the vendor has disputed this as described in libyal/libfsntfs issue 8 on GitHub...
CVE-2018-11723
The libpffnametoidmapentryread function in libpffnametoidmap.c in libyal libpff through 2018-04-28 allows remote attackers to cause an information disclosure heap-based buffer over-read via a crafted pff file. NOTE: the vendor has disputed this as described in libyal/libpff issue 66 on GitHub...
CVE-2018-11728
The libfsntfsreparsepointvaluesreaddata function in libfsntfsreparsepointvalues.c in libfsntfs through 2018-04-20 allows remote attackers to cause an information disclosure heap-based buffer over-read via a crafted ntfs file. NOTE: the vendor has disputed this as described in libyal/libfsntfs iss...
CVE-2018-11729
The libfsntfsmftentryreadheader function in libfsntfsmftentry.c in libfsntfs through 2018-04-20 allows remote attackers to cause an information disclosure heap-based buffer over-read via a crafted ntfs file. NOTE: the vendor has disputed this as described in libyal/libfsntfs issue 8 on GitHub...
CVE-2018-12096
The liblnkdatastringgetutf8stringsize function in liblnkdatastring.c in liblnk through 2018-04-19 allows remote attackers to cause an information disclosure heap-based buffer over-read via a crafted lnk file. NOTE: the vendor has disputed this as described in libyal/liblnk issue 33 on GitHub...
CVE-2018-12097
The liblnklocationinformationreaddata function in liblnklocationinformation.c in liblnk through 2018-04-19 allows remote attackers to cause an information disclosure heap-based buffer over-read via a crafted lnk file. NOTE: the vendor has disputed this as described in libyal/liblnk issue 33 on...
CVE-2018-11723
The libpffnametoidmapentryread function in libpffnametoidmap.c in libyal libpff through 2018-04-28 allows remote attackers to cause an information disclosure heap-based buffer over-read via a crafted pff file. NOTE: the vendor has disputed this as described in libyal/libpff issue 66 on GitHub...