Format string

Format string vulnerability in Huawei AR100, AR120, AR150, AR200, AR500, AR550, AR1200, AR2200, AR2500, AR3200, and AR3600 routers with software before V200R007C00SPC900 and NetEngine 16EX routers with software before V200R007C00SPC900 allows remote authenticated users to cause a denial of servic...

CVE-2016-6901

Format string vulnerability in Huawei AR100, AR120, AR150, AR200, AR500, AR550, AR1200, AR2200, AR2500, AR3200, and AR3600 routers with software before V200R007C00SPC900 and NetEngine 16EX routers with software before V200R007C00SPC900 allows remote authenticated users to cause a denial of servic...

CVE-2016-6901

CVE-2016-6901 is a Huawei format-string vulnerability affecting AR100/120/150/200/500/550/1200/2200/2500/3200/3600 routers and NetEngine 16EX with software before V200R007C00SPC900. It allows remote authenticated users to cause a denial of service via format specifiers when processing partial com...

CVE-2016-6901: Improper Input Validation

Format string vulnerability in Huawei AR100, AR120, AR150, AR200, AR500, AR550, AR1200, AR2200, AR2500, AR3200, and AR3600 routers with software before V200R007C00SPC900 and NetEngine 16EX routers with software before V200R007C00SPC900 allows remote authenticated users to cause a denial of servic...

CVE-2016-5169

Format string vulnerability in Google Chrome OS before 53.0.2785.103 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors...

CVE-2016-5169

Format string vulnerability in Google Chrome OS before 53.0.2785.103 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors...

Format string

Format string vulnerability in Google Chrome OS before 53.0.2785.103 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors...

CVE-2016-5169

Format string vulnerability in Google Chrome OS before 53.0.2785.103 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors...

CVE-2016-5169

CVE-2016-5169 is a format-string vulnerability in Google Chrome OS up to version 53.0.2785.103, allowing remote attackers to cause a denial of service or possibly other impact via unknown vectors. The referenced Chrome OS security update (Stable Channel 53.0.2785.103) addresses this issue. Affect...

CVE-2016-5169: Undefined Security Weakness

Format string vulnerability in Google Chrome OS before 53.0.2785.103 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors...

PT-2016-6289

Name of the Vulnerable Software and Affected Versions Google Chrome OS versions prior to 53.0.2785.103 Description A format string issue allows remote attackers to cause a denial of service or possibly have other unspecified impacts via unknown vectors. Recommendations For versions prior to...

Dropbear SSH Server < 2016.72 Multiple Vulnerabilities

According to its self-reported version in its banner, Dropbear SSH running on the remote host is prior to 2016.74. It is, therefore, affected by the following vulnerabilities : - A format string flaw exists due to improper handling of string format specifiers e.g., %s and %x in usernames and host...

Dropbear SSH Format String Vulnerability

Dropbear is a relatively small SSH server and client. Dropbear SSH suffers from a format string vulnerability that allows an attacker to execute arbitrary code within the context of the application...

MGASA-2016-0301 Updated dropbear packages fix security vulnerability

Message printout was vulnerable to format string injection. If specific usernames including "%" symbols can be created on a system validated by getpwnam then an attacker could run arbitrary code as root when connecting to Dropbear server. Also, a dbclient user who can control username or host...

Updated dropbear packages fix security vulnerability

Message printout was vulnerable to format string injection. If specific usernames including "%" symbols can be created on a system validated by getpwnam then an attacker could run arbitrary code as root when connecting to Dropbear server. Also, a dbclient user who can control username or host...

Google Chrome OS Remote Formatting String Vulnerability

Google Chrome OS is a fast, lightweight, open source web-based operating system. A format string handling vulnerability exists in Google Chrome OS that allows remote attackers to submit a special request that can be exploited to crash an application or execute arbitrary code...

JVN#94779084: H2O use of externally-controlled format string

H2O is an open source web server software. H2O uses externally-controlled format strings CWE-134 in the code which output error logs. Impact An unauthenticated remote attacker may cause a denial-of-service DoS condition. Solution Update the Software Update to the latest version according to the...

H2O HTTP Server < 2.0.4, 2.1.x < 2.1.0-beta3 Format String Vulnerability

H2O HTTP Server is prone to a format string vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:h2oproject:h2o"; if...

WS-2016-7067

Format String vulnerability in in radare2 before 0.10.6, allow attackers to execute arbitrary code...

Android Privilege Escalation

The vulnerability of the drivers/thermal/qpnp-adc-tm.c file in Qualcomm’s Android operating system is related to a format string vulnerability. Exploiting this vulnerability could allow an attacker, operating remotely, to enhance their privileges through a specially created application that...