CVE-2023-39670

CVE-2023-39670 affects Tenda AC6, specifically US_AC6V1.0BR_V15.03.05.16. The vulnerability is a buffer overflow in the fgets function, with sources reporting potential arbitrary code execution or denial of service. CVSS v3.1 vector from NVD indicates a critical impact (9.8) under network attack ...

D-Link DIR-880 security vulnerabilities

The D-Link DIR-880 is a router from China-based AUO D-Link. A security vulnerability exists in D-Link DIR-880 version A1FW107WWb08, which originates from a buffer overflow vulnerability in the function fgets...

CVE-2023-39674

CVE-2023-39674 affects D-Link DIR-880 A1_FW107WWb08, where a buffer overflow in the firmware’s fgets function is identified. The root cause is a flawed handling of input in the affected component, enabling potential impact on confidentiality, integrity, and availability (per CVSS 3.1 metrics: HIG...

CVE-2023-39674: Buffer Copy without Checking Size of Input

D-Link DIR-880 A1FW107WWb08 was discovered to contain a buffer overflow via the function fgets...

CVE-2023-39674

D-Link DIR-880 A1FW107WWb08 was discovered to contain a buffer overflow via the function fgets...

CVE-2023-39666

CVE-2023-39666 affects the D-Link DIR-842 firmware fw_revA_1-02_eu_multi_20151008. The vulnerability consists of multiple buffer overflows in the fgets function exposed via the acStack_120 and acStack_220 parameters. CVSS 3.1/3.1 base score 9.8 (CRITICAL) with network attack vector, no user inter...

CVE-2023-39670

Tenda AC6 USAC6V1.0BRV15.03.05.16 was discovered to contain a buffer overflow via the function fgets...

PT-2023-27064

Name of the Vulnerable Software and Affected Versions Tenda WH450 version 1.0.0.18 Description A buffer overflow issue was discovered via the function fgets. Recommendations For Tenda WH450 version 1.0.0.18, consider disabling the fgets function as a temporary workaround until a patch is availabl...

PT-2023-27063 · Tenda · Tenda Ac6

Name of the Vulnerable Software and Affected Versions: Tenda AC6 version US AC6V1.0BR V15.03.05.16 Description: A buffer overflow issue was discovered via the function fgets. Recommendations: For Tenda AC6 version US AC6V1.0BR V15.03.05.16, consider restricting access to the function fgets until ...

PT-2023-4465 · D Link · D-Link Dir-880L +1

Name of the Vulnerable Software and Affected Versions: D-Link DIR-842 version fw revA 1-02 eu multi 20151008 D-Link DIR-880 version A1 Description: The issue is related to buffer overflow errors in the fgets function of the D-Link DIR-880 and DIR-842 firmware. This can be exploited by a remote...

CVE-2020-21535

In transfig's fig2dev 3.2.7b it is possible for an attacker to create a specially crafted file that causes a buffer overflow due to the usage of fgets. This leads to a denial of service, impacting availability of the program...

CVE-2020-21533

In transfig's fig2dev 3.2.7b it is possible for an attacker to create a specially crafted file that causes a buffer overflow due to the usage of fgets. This leads to a denial of service, impacting availability of the program...

CVE-2020-21530

In transfig's fig2dev 3.2.7b it is possible for an attacker to create a specially crafted file that causes a buffer overflow due to usage of fgets. This leads to a denial of service via segmentation fault, impacting availability of the program...

systemd: reexec state injection: fgets() on overlong lines leads to line splitting

...

systemd: line splitting via fgets() allows for state injection during daemon-reexec

It was discovered that systemd is vulnerable to a state injection attack when deserializing the state of a service. Properties longer than LINEMAX are not correctly parsed and an attacker may abuse this flaw in particularly configured services to inject, change, or corrupt the service state...

Privilege Escalation

libsystemd.so is vulnerable to privilege escalation. When NotifyAccess != none, the line read by fgets in the unitdeserialize function allows line splitting during daemon-reexec when long lines are submitted which can result in state injection. An attacker is able to exploit this vulnerability to...

systemd - reexec State Injection

systemd - reexec State Injection / I am sending this bug report to Ubuntu, even though it's an upstream bug, as requested at https://github.com/systemd/systemd/blob/master/docs/CONTRIBUTING.mdsecurity-vulnerability-reports . When systemd re-executes e.g. during a package upgrade, state is...

systemd - 'reexec' State Injection

/ I am sending this bug report to Ubuntu, even though it's an upstream bug, as requested at https://github.com/systemd/systemd/blob/master/docs/CONTRIBUTING.mdsecurity-vulnerability-reports . When systemd re-executes e.g. during a package upgrade, state is serialized into a memfd before the execv...

Linux systemd Line Splitting Exploit

Linux has an issue with systemd where overlong input to fgets during reexec state injection can lead to line splitting. systemd: reexec state injection: fgets on overlong lines leads to line splitting CVE-2018-15686 I am sending this bug report to Ubuntu, even though it's an upstream bug, as...

Linux systemd Line Splitting

systemd: reexec state injection: fgets on overlong lines leads to line splitting CVE-2018-15686 I am sending this bug report to Ubuntu, even though it's an upstream bug, as requested at https://github.com/systemd/systemd/blob/master/docs/CONTRIBUTING.mdsecurity-vulnerability-reports . When system...