CVE-2023-39672

Tenda WH450 v1.0.0.18 was discovered to contain a buffer overflow via the function fgets...

CVE-2023-39674

D-Link DIR-880 A1FW107WWb08 was discovered to contain a buffer overflow via the function fgets...

CVE-2023-39670

Tenda AC6 USAC6V1.0BRV15.03.05.16 was discovered to contain a buffer overflow via the function fgets...

CVE-2023-39674: Buffer Copy without Checking Size of Input

D-Link DIR-880 A1FW107WWb08 was discovered to contain a buffer overflow via the function fgets...

CVE-2023-39672: Buffer Copy without Checking Size of Input

Tenda WH450 v1.0.0.18 was discovered to contain a buffer overflow via the function fgets...

CVE-2023-39670: Buffer Copy without Checking Size of Input

Tenda AC6 USAC6V1.0BRV15.03.05.16 was discovered to contain a buffer overflow via the function fgets...

CVE-2023-39666: Buffer Copy without Checking Size of Input

D-Link DIR-842 fwrevA1-02eumulti20151008 was discovered to contain multiple buffer overflows in the fgets function via the acStack120 and acStack220 parameters...

PT-2023-27063 · Tenda · Tenda Ac6

Name of the Vulnerable Software and Affected Versions: Tenda AC6 version US AC6V1.0BR V15.03.05.16 Description: A buffer overflow issue was discovered via the function fgets. Recommendations: For Tenda AC6 version US AC6V1.0BR V15.03.05.16, consider restricting access to the function fgets until ...

PT-2023-4465 · D Link · D-Link Dir-880L +1

Name of the Vulnerable Software and Affected Versions: D-Link DIR-842 version fw revA 1-02 eu multi 20151008 D-Link DIR-880 version A1 Description: The issue is related to buffer overflow errors in the fgets function of the D-Link DIR-880 and DIR-842 firmware. This can be exploited by a remote...

PT-2023-27064

Name of the Vulnerable Software and Affected Versions Tenda WH450 version 1.0.0.18 Description A buffer overflow issue was discovered via the function fgets. Recommendations For Tenda WH450 version 1.0.0.18, consider disabling the fgets function as a temporary workaround until a patch is availabl...

CVE-2020-21535

In transfig's fig2dev 3.2.7b it is possible for an attacker to create a specially crafted file that causes a buffer overflow due to the usage of fgets. This leads to a denial of service, impacting availability of the program...

CVE-2020-21533

In transfig's fig2dev 3.2.7b it is possible for an attacker to create a specially crafted file that causes a buffer overflow due to the usage of fgets. This leads to a denial of service, impacting availability of the program...

CVE-2020-21530

In transfig's fig2dev 3.2.7b it is possible for an attacker to create a specially crafted file that causes a buffer overflow due to usage of fgets. This leads to a denial of service via segmentation fault, impacting availability of the program...

systemd: reexec state injection: fgets() on overlong lines leads to line splitting

...

systemd: line splitting via fgets() allows for state injection during daemon-reexec

It was discovered that systemd is vulnerable to a state injection attack when deserializing the state of a service. Properties longer than LINEMAX are not correctly parsed and an attacker may abuse this flaw in particularly configured services to inject, change, or corrupt the service state...

Privilege Escalation

libsystemd.so is vulnerable to privilege escalation. When NotifyAccess != none, the line read by fgets in the unitdeserialize function allows line splitting during daemon-reexec when long lines are submitted which can result in state injection. An attacker is able to exploit this vulnerability to...

systemd - 'reexec' State Injection

/ I am sending this bug report to Ubuntu, even though it's an upstream bug, as requested at https://github.com/systemd/systemd/blob/master/docs/CONTRIBUTING.mdsecurity-vulnerability-reports . When systemd re-executes e.g. during a package upgrade, state is serialized into a memfd before the execv...

systemd - reexec State Injection

systemd - reexec State Injection / I am sending this bug report to Ubuntu, even though it's an upstream bug, as requested at https://github.com/systemd/systemd/blob/master/docs/CONTRIBUTING.mdsecurity-vulnerability-reports . When systemd re-executes e.g. during a package upgrade, state is...

Linux systemd Line Splitting

systemd: reexec state injection: fgets on overlong lines leads to line splitting CVE-2018-15686 I am sending this bug report to Ubuntu, even though it's an upstream bug, as requested at https://github.com/systemd/systemd/blob/master/docs/CONTRIBUTING.mdsecurity-vulnerability-reports . When system...

Linux systemd Line Splitting Exploit

Linux has an issue with systemd where overlong input to fgets during reexec state injection can lead to line splitting. systemd: reexec state injection: fgets on overlong lines leads to line splitting CVE-2018-15686 I am sending this bug report to Ubuntu, even though it's an upstream bug, as...