394878 matches found
CVE-2022-44318
CVE-2022-44318 설명 PicoC 버전 3.2.2는 ExpressionParseFunctionCall에서 호출할 때 cstdlib/string.c의 StringStrcat 함수에 힙 버퍼 오버플로우가 포함된 것으로 발견되었습니다. Picoc를 사용하는 모든 프로젝트나 라이브러리도 이 문제의 영향을 받습니다. 예를 들어 picoc-js가 있습니다. 환경 설정 PicoC에서 힙 오버플로우 취약점을 재현하려면 먼저 취약한 버전v3.2.2의 PicoC 라이브러리와 인터프리터를 다운로드하여 컴파일해야 합니다: git clone...
CVE-2023-40294-and-CVE-2023-40295
제 환경에서 boron을 실행하던 중, 우연히 2개의 힙 버퍼 오버플로우를 발견했습니다. libboronlibboron.so.2 버전 2.0.8에서 약간 잘못된 형식의 입력을 처리할 때 발생했습니다. 이는 Mac x8664과 Linux x8664에서 공식적으로 테스트되었습니다: Files for reproduction reproduction.zip 컴파일 git clone https://github.com/0branch/boron.git cd boron ./configure && make sudo make install &&...
CVE-2013-2028_Checker
CVE-2013-2028 - Nginx HTTP Server 1.3.9-1.4.0 청크 인코딩 스택 버퍼 오버플로우 설명 nginx 1.3.91.4.0의 http/ngxhttpparse.c에 있는 ngxhttpparsechunked 함수는 원격 공격자가 큰 청크 크기의 chunked Transfer-Encoding 요청을 통해 서비스 거부크래시 및 임의 코드 실행을 유발할 수 있게 하며, 이는 정수 부호 오류 및 스택 기반 버퍼 오버플로우를 트리거합니다. 예시 $ python3 nginxcve20132028checker.py...
Important: Red Hat Security Advisory: mod_auth_openidc:2.3 security update
An update for the modauthopenidc:2.3 module is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important...
cjose: cjose: Heap buffer overflow in AES Key Wrap decryption leads to denial of service
A flaw was found in cjose, a C library for Javascript Object Signing and Encryption JOSE. A remote, unauthenticated attacker can exploit a heap buffer overflow vulnerability in the AES Key Wrap decryption process. By submitting a crafted Javascript Web Encryption JWE to an application, the attack...
Important: Red Hat Security Advisory: mod_auth_openidc:2.3 security update
An update for the modauthopenidc:2.3 module is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common...
cjose: cjose: Heap buffer overflow in AES Key Wrap decryption leads to denial of service
A flaw was found in cjose, a C library for Javascript Object Signing and Encryption JOSE. A remote, unauthenticated attacker can exploit a heap buffer overflow vulnerability in the AES Key Wrap decryption process. By submitting a crafted Javascript Web Encryption JWE to an application, the attack...
Important: Red Hat Security Advisory: mod_auth_openidc:2.3 security update
An update for the modauthopenidc:2.3 module is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important...
cjose: cjose: Heap buffer overflow in AES Key Wrap decryption leads to denial of service
A flaw was found in cjose, a C library for Javascript Object Signing and Encryption JOSE. A remote, unauthenticated attacker can exploit a heap buffer overflow vulnerability in the AES Key Wrap decryption process. By submitting a crafted Javascript Web Encryption JWE to an application, the attack...
CVE-2026-15894
The Zephyr RTOS Bluetooth Mesh stack is vulnerable to a stack-based buffer overflow in the On-Demand Private Proxy solicitation handler (subsys/bluetooth/mesh/solicitation.c). The sol_pdu_decrypt() function copies a received Solicitation PDU into a fixed 17-byte stack buffer without bounding the ...
CVE-2026-15894 Bluetooth Mesh solicitation PDU stack buffer overflow via oversized advertisement
The Bluetooth Mesh On-Demand Private Proxy solicitation handler in subsys/bluetooth/mesh/solicitation.c copies a received Solicitation PDU into a fixed 17-byte stack buffer without bounding the source length. In solpdudecrypt, out is allocated as NETBUFSIMPLE17 and then filled with...
CVE-2026-15894 Bluetooth Mesh solicitation PDU stack buffer overflow via oversized advertisement
The Bluetooth Mesh On-Demand Private Proxy solicitation handler in subsys/bluetooth/mesh/solicitation.c copies a received Solicitation PDU into a fixed 17-byte stack buffer without bounding the source length. In solpdudecrypt, out is allocated as NETBUFSIMPLE17 and then filled with...
CVE-2026-15894 Bluetooth Mesh solicitation PDU stack buffer overflow via oversized advertisement
The Bluetooth Mesh On-Demand Private Proxy solicitation handler in subsys/bluetooth/mesh/solicitation.c copies a received Solicitation PDU into a fixed 17-byte stack buffer without bounding the source length. In solpdudecrypt, out is allocated as NETBUFSIMPLE17 and then filled with...
CVE-2025-43504
좋은 /bin이 나쁘게 변할 때: LLDB의 debugserver에서 발견된 원격 사전 인증 오버플로우 서론 어릴 적, 저는 동네 월마트의 DVD 할인 통을 뒤지는 것을 늘 즐겼습니다. 위에는 똑같은 영화들이 많이 놓여 있었지만, 실제로 깊이 뒤적이다 보면 더 흥미롭고 마니아적인 타이틀을 발견할 수 있었죠. 프로그램이 버퍼를 오버플로우할 때, 여러분은 본질적으로 그 프로그램의 할인 통에 손을 집어넣는 셈입니다. 손을 얼마나 깊이 넣느냐에 따라 DVD——즉, 이 경우에는 메모리에서 덮어쓰이는 구조체들——이 달라질 수 있습니다...
Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update
An update for kernel is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring Syst...
kernel: ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events
In the Linux kernel, the following vulnerability has been resolved: ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events The DSP event handling code in hwdepread could write more bytes to the user buffer than requested, when a user provides a buffer smaller than the event header...
kernel: Bluetooth: MGMT: validate LTK enc_size on load
A flaw was found in the Linux kernel's Bluetooth management MGMT component. An attacker could exploit a vulnerability in how Long Term Keys LTK are loaded. By providing an oversized encryption size, a stack buffer overflow can occur, potentially leading to a denial of service...
jq-els-backport-cve-2025-48060
jq-els-backport-cve-2025-48060 상위 버전에서 CVE-2025-48060heap buffer overflow in jvstringempty 수정을 jq 1.6으로 백포트했습니다. 백포트 CVE-2025-48060 – 상위 커밋 c6e0416 “빈 문자열 형식화 시 힙 버퍼 오버플로우 수정”을 최신 jq 버전에서 jq-1.6으로 백포트, 내부 문자열 표현jvstringempty을 조정하고, 회귀 테스트0implode를 추가했으며, 성공적으로 재빌드 및 테스트 스위트를 실행했습니다. 이 패치 적용 방법 공식...
Security Bulletin: Multiple Vulnerabilities in IBM Cloud Pak System
Summary Multiple vulnerabilities were found in openSSL used by IBM OS Image for Red Hat Enterprise Linux Systems shipped with IBM Cloud Pak System. Vulnerabilities were addressed in IBM Cloud Pak System version 2.3.6.2. Vulnerability Details CVEID:CVE-2026-34181 DESCRIPTION: Issue Summary: The...