UBUNTU-CVE-2020-21685

Buffer Overflow vulnerability in hashfindi function in hashtbl.c in nasm 2.15rc0 allows remote attackers to cause a denial of service via crafted asm file...

UBUNTU-CVE-2020-21528

A Segmentation Fault issue discovered in in ieeesegment function in outieee.c in nasm 2.14.03 and 2.15 allows remote attackers to cause a denial of service via crafted assembly file...

DEBIAN-CVE-2020-19187

Buffer Overflow vulnerability in fmtentry function in progs/dumpentry.c:1100 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command...

Generating FLIRT signatures for Nim and other non-C programming languages

Adversaries are increasingly writing malware in programming languages such as Go, Rust, or Nim, because they present challenges to investigators using reverse-engineering tools designed to work best against the C family of languages. Its often difficult for reverse engineers examining non-C...

CVE-2022-48065

GNU Binutils before 2.40 was discovered to contain a memory leak vulnerability var the function findabstractinstance in dwarf2.c...

c-ares 缓冲区错误漏洞

c-ares is a C library for asynchronous DNS requests from the individual developers of c-ares. A security vulnerability exists in c-ares versions 1161 through 1170, which originates from a buffer overflow via the function aresparsesoareply in aresparsesoareply.c. The vulnerability is caused by the...

CVE-2020-22217

CVE-2020-22217 affects c-ares (pre-1.16.1 through 1.17.0). Root cause: buffer overflow in ares_parse_soa_reply.c. Exploitation could impact availability (CVSS shows Availability=High) with no confidentiality/integrity impact stated. Several connected advisories note patches/updates are available ...

CVE-2022-48065

GNU Binutils before 2.40 was discovered to contain a memory leak vulnerability var the function findabstractinstance in dwarf2.c...

CVE-2021-32292

An issue was discovered in json-c from 20200420 post 0.14 unreleased code through 0.15-20200726. A stack-buffer-overflow exists in the auxiliary sample program jsonparse which is located in the function parseit...

PT-2023-4758 · Json-C +3 · Json-C +3

Name of the Vulnerable Software and Affected Versions: json-c versions 0.14 through 0.15-20200726 Description: A stack-buffer-overflow issue exists in the json parse auxiliary sample program, specifically in the parseit function. This issue is related to a buffer overflow in memory, which can be...

PT-2023-6122 · Gnu +5 · Gnu Binutils +5

Name of the Vulnerable Software and Affected Versions: GNU Binutils versions prior to 2.40 Description: The issue is related to a memory leak in the find abstract instance function in dwarf2.c. This can be exploited by a remote attacker to cause a denial of service. Recommendations: For versions...

CVE-2022-48064

GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function bfddwarf2findnearestlinewithalt at dwarf2.c. The attacker could supply a crafted ELF file and cause a DNS attack...

CVE-2020-22217

Buffer overflow vulnerability in c-ares before 1161 thru 1170 via function aresparsesoareply in aresparsesoareply.c...

CVE-2021-32292

CVE-2021-32292 affects json-c: a stack-buffer-overflow in the auxiliary sample program json_parse (parseit) reported for json-c versions from 0.14 unreleased code up to 0.15-20200726. Connected documents indicate mitigations: Gentoo GLSA-202408-08 recommends upgrading to json-c-0.16 or newer. Ins...

CVE-2022-48063

The connected sources confirm CVE-2022-48063 affects GNU Binutils prior to 2.40. The vulnerability is an excessive memory consumption issue in the load_separate_debug_files function (dwarf2.c). An attacker could create a crafted ELF file to trigger a DNS-based denial of service. Impact is limited...

CVE-2022-48064

GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function bfddwarf2findnearestlinewithalt at dwarf2.c. The attacker could supply a crafted ELF file and cause a DNS attack...

CVE-2021-32292

An issue was discovered in json-c from 20200420 post 0.14 unreleased code through 0.15-20200726. A stack-buffer-overflow exists in the auxiliary sample program jsonparse which is located in the function parseit...

CVE-2021-32292

An issue was discovered in json-c from 20200420 post 0.14 unreleased code through 0.15-20200726. A stack-buffer-overflow exists in the auxiliary sample program jsonparse which is located in the function parseit...

json-c 缓冲区错误漏洞

json-c is a C-based JSON parser. A buffer error vulnerability exists in json-c 0.15-20200726 and earlier versions, which stems from a buffer overflow vulnerability in the function parseit. An attacker can exploit this vulnerability to execute arbitrary code...

CVE-2022-48063

GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function loadseparatedebugfiles at dwarf2.c. The attacker could supply a crafted ELF file and cause a DNS attack...