openstack-neutron: arbitrary dnsmasq reconfiguration via extra_dhcp_opts

An input-validation flaw was found in openstack-neutron, where an authenticated attacker could change the dnsmasq configuration. By crafting extradhcpopts values, the attacker could crash the dnsmasq, change parameters for tenants sharing the same interface, or otherwise alter that daemon’s...

Vulnerability of the jetp3852_print_page() function (device/gdev3852.c) in the software suite for processing, transforming, and generating Ghostscript documents, allowing a hacker to trigger a service failure

The vulnerability of the jetp3852printpage function device/gdev3852.c in the software suite for processing, transforming, and generating Ghostscript documents is related to buffer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure...

OSV-2017-24 Heap-buffer-overflow in pnm_type_find

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4039 Crash type: Heap-buffer-overflow READ 1 Crash state: pnmtypefind gsttypefindfactorycallfunction gsttypefindhelperfordata...

CVE-2020-13544

An exploitable sign extension vulnerability exists in the TextMaker document parsing functionality of SoftMaker Office 2021’s TextMaker application. A specially crafted document can cause the document parser to sign-extend a length used to terminate a loop, which can later result in the loop’s...

Denial Of Service (DoS)

opensc is vulnerable to denial of service. A stack-based buffer overflow in tcosdecipher allows an attacker to crash the application...

The vulnerabilities of the functions rx_cache_find() and rx_cache_insert() in the packet capture and analysis utility tcpdump allow a hacker to induce a service failure.

The vulnerability of the functions rxcachefind and rxcacheinsert in the tcpdump utility for capturing and analyzing network traffic involves reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

UBUNTU-CVE-2020-25085

QEMU 5.0.0 has a heap-based Buffer Overflow in flatviewreadcontinue in exec.c because hw/sd/sdhci.c mishandles a write operation in the SDHCBLKSIZE case...

CVE-2019-20797

An issue was discovered in e6y prboom-plus 2.5.1.5. There is a buffer overflow in client and server code responsible for handling received UDP packets, as demonstrated by ISendPacket or ISendPacketTo in inetwork.c...

Moderate: Red Hat Security Advisory: libsndfile security update

An update for libsndfile is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

CVE-2018-14550

An issue has been found in third-party PNM decoding associated with libpng 1.6.35. It is a stack-based buffer overflow in the function gettoken in pnm2png.c in pnm2png...

CVE-2019-13362

Codedoc v3.2 has a stack-based buffer overflow in addvariable in codedoc.c, related to codedocstrlcpy...

NBMonitor 1.6.5.0 - Key Denial of Service (PoC)

NBMonitor 1.6.5.0 - Key Denial of Service PoC -- coding: utf-8 -- Exploit Title: NBMonitor 1.6.5 - 'Key' Denial of Service PoC Date: 15/02/2019 Author: Alejandra Sánchez Vendor Homepage: http://www.nsauditor.com/ Software Link: http://www.nbmonitor.com/downloads/nbmonitorsetup.exe Version: 1.6.5....

The vulnerability of the Curlauth_create_plain_message function in the software’s interaction with servers via cURL allows a hacker to cause a service failure.

The vulnerability of the Curlauthcreateplainmessage function in the software’s interaction with servers via cURL is due to an overflow in the “buffer”. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Arm Whois 3.11 Denial Of Service

Exploit Title: Arm Whois 3.11 - Denial of Service PoC Date: 2018-10-31 Exploit Author: Yair RodrAguez Aparicio Vendor Homepage: http://www.armcode.com/ Software Link: http://www.armcode.com/downloads/arm-whois.exe Version: 3.11 Tested on: Windows XP Profesional EspaA+-ol SP3 x86 Steps to Produce...

Zortam MP3 Media Studio 23.95 - Denial of Service Exploit

Exploit for windows platform in category dos / poc Exploit Title: Zortam MP3 Media Studio 23.95 - Denial of Service PoC Author: Gionathan "John" Reale Homepage: https://www.zortam.com Software Link: https://www.zortam.com/download.html Tested Version: 23.95 Tested on OS: Windows 7 x64 Steps to...

CVE-2018-7648

An issue was discovered in mj2/opjmj2extract.c in OpenJPEG 2.3.0. The output prefix was not checked for length, which could overflow a buffer, when providing a prefix with 50 or more characters on the command line...

CVE-2017-18206

In utils.c in zsh before 5.4, symlink expansion had a buffer overflow...

UBUNTU-CVE-2018-7487

There is a heap-based buffer overflow in the LoadPCX function of inpcx.cpp in sam2p 0.49.4. A Crafted input will lead to a denial of service or possibly unspecified other impact...

CVE-2017-3158

A race condition in Guacamole's terminal emulator in versions 0.9.5 through 0.9.10-incubating could allow writes of blocks of printed data to overlap. Such overlapping writes could cause packet data to be misread as the packet length, resulting in the remaining data being written beyond the end o...

ReSIProcate 'ares_parse_a_reply' function buffer overflow vulnerability

reSIProcate is a C++ implementation of protocols such as SIP Session Initiation Protocol, ICE P2P Communication Protocol and TURN Profile Transfer Protocol. A buffer overflow vulnerability exists in the 'aresparseareply' function of the embedded ares library in versions of reSIProcate prior to...