RHEL 5 : openssl (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - openssl: doaproutch function does not verify that certain memory allocation succeeds CVE-2016-2842 -...

CVE-2024-33763

lunasvg v2.3.9 was discovered to contain a stack-buffer-underflow at lunasvg/source/layoutcontext.cpp...

PYSEC-2024-281

lunasvg v2.3.9 was discovered to contain a stack-buffer-underflow at lunasvg/source/layoutcontext.cpp...

PYSEC-2024-281

lunasvg v2.3.9 was discovered to contain a stack-buffer-underflow at lunasvg/source/layoutcontext.cpp...

CVE-2024-33763: Out-of-bounds Read

lunasvg v2.3.9 was discovered to contain a stack-buffer-underflow at lunasvg/source/layoutcontext.cpp...

CVE-2024-33763

lunasvg v2.3.9 was discovered to contain a stack-buffer-underflow at lunasvg/source/layoutcontext.cpp...

CVE-2024-33763

lunasvg v2.3.9 was discovered to contain a stack-buffer-underflow at lunasvg/source/layoutcontext.cpp...

CVE-2024-33763

The lunasvg SVG rendering library (version v2.3.9 ) is vulnerable to a stack-buffer-underflow (also described as an Out-of-bounds Read ) located in the lunasvg/source/layoutcontext.cpp component. This flaw originates from improper buffer size validation and could potentially lead to unauthorized ...

CVE-2024-33763

lunasvg v2.3.9 was discovered to contain a stack-buffer-underflow at lunasvg/source/layoutcontext.cpp...

OSV-2024-336 Stack-buffer-underflow in mkechar

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68343 Crash type: Stack-buffer-underflow READ 4 Crash state: mkechar sympartition ntod...

PT-2024-40721 · Git +1 · Flex

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided input. Description: The issue is related to a stack-buffer-underflow READ 4 crash type. The crash state involves functions such as mkechar, sympartition, and ntod. No information ...

OSV-2024-319 Stack-buffer-underflow in filter_apply_chain

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68328 Crash type: Stack-buffer-underflow READ 4 Crash state: filterapplychain filterapplychain initializeoutputfilters...

PT-2024-40711 · Git +1 · Flex

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a stack-buffer-underflow read crash. The crash state includes functions such as filter apply chain and initialize output filters...

flex:fuzz-main: Stack-buffer-underflow in mkechar

Detailed Report: https://oss-fuzz.com/testcase?key=4784777778495488 Project: flex Fuzzing Engine: libFuzzer Fuzz Target: fuzz-main Job Type: libfuzzerasanflex Platform Id: linux Crash Type: Stack-buffer-underflow READ 4 Crash Address: 0x7cd7c5f0001c Crash State: mkechar sympartition ntod Sanitize...

flex:fuzz-main: Stack-buffer-underflow in filter_apply_chain

Project: https://github.com/westes/flex.git Detailed Report: https://oss-fuzz.com/testcase?key=5743164481667072 Project: flex Fuzzing Engine: libFuzzer Fuzz Target: fuzz-main Job Type: libfuzzerasanflex Platform Id: linux Crash Type: Stack-buffer-underflow READ 4 Crash Address: 0x7c22c670001c Cra...

CVE-2024-26828

CVE-2024-26828 is a Linux kernel issue in the CIFS SMB client: parse_server_interfaces() incorrectly compares bytes_left/size with mixed signed/unsigned types (ssize_t vs size_t), causing a loop to continue when remaining bytes become negative, enabling a buffer underflow. The advisories describe...

CVE-2024-26828 cifs: fix underflow in parse_server_interfaces()

In the Linux kernel, the following vulnerability has been resolved: cifs: fix underflow in parseserverinterfaces In this loop, we step through the buffer and after each item we check if the sizeleft is greater than the minimum size we need. However, the problem is that "bytesleft" is type ssizet...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from a parseserverinterfaces buffer underflow...

flex:fuzz-main: Stack-buffer-underflow in mkechar

Project: https://github.com/westes/flex.git Detailed Report: https://oss-fuzz.com/testcase?key=4942722591948800 Project: flex Fuzzing Engine: libFuzzer Fuzz Target: fuzz-main Job Type: libfuzzerasanflex Platform Id: linux Crash Type: Stack-buffer-underflow READ 4 Crash Address: 0x7e791fa0001c Cra...

gdbm: stack-buffer-underflow in get_dump_line

Hi! This is a manual report, different from the robot-generated ones you've probably seen in the past. With the following fuzz target which tests gdbmloadfromfile: include include include include include include include include static char dbname = "a.db"; int LLVMFuzzerTestOneInputconst uint8t...