984 matches found
CVE-2023-28320
A denial of service vulnerability exists in curl v8.1.0 in the way libcurl provides several different backends for resolving host names, selected at build time. If it is built to use the synchronous resolver, it allows name resolves to time-out slow operations using alarm and siglongjmp. When doi...
AZL-26790 CVE-2023-28320 affecting package cmake for versions less than 3.21.4-11
A denial of service vulnerability exists in curl v8.1.0 in the way libcurl provides several different backends for resolving host names, selected at build time. If it is built to use the synchronous resolver, it allows name resolves to time-out slow operations using alarm and siglongjmp. When doi...
CVE-2023-28320
A denial of service vulnerability exists in curl v8.1.0 in the way libcurl provides several different backends for resolving host names, selected at build time. If it is built to use the synchronous resolver, it allows name resolves to time-out slow operations using "alarm" and "siglongjmp". When...
CVE-2023-28320
A denial of service vulnerability exists in curl v8.1.0 in the way libcurl provides several different backends for resolving host names, selected at build time. If it is built to use the synchronous resolver, it allows name resolves to time-out slow operations using alarm and siglongjmp. When doi...
CVE-2023-28320
A denial of service vulnerability exists in curl v8.1.0 in the way libcurl provides several different backends for resolving host names, selected at build time. If it is built to use the synchronous resolver, it allows name resolves to time-out slow operations using alarm and siglongjmp. When doi...
PT-2023-35843
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type identified as Global-buffer-overflow READ 4. The crash state involves several functions: hf adjustment, sbr process...
faad2:fuzz_decode_fixed: Global-buffer-overflow in hf_adjustment
Project: https://github.com/knik0/faad2.git Detailed Report: https://oss-fuzz.com/testcase?key=5610396510453760 Project: faad2 Fuzzing Engine: honggfuzz Fuzz Target: fuzzdecodefixed Job Type: honggfuzzasanfaad2 Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Address:...
SUSE CVE-2023-28320
A denial of service vulnerability exists in curl v8.1.0 in the way libcurl provides several different backends for resolving host names, selected at build time. If it is built to use the synchronous resolver, it allows name resolves to time-out slow operations using alarm and siglongjmp. When doi...
siglongjmp race condition
libcurl provides several different backends for resolving hostnames, selected at build time. If it is built to use the synchronous resolver, it allows name resolves to time-out slow operations using alarm and siglongjmp. When doing this, libcurl used a global buffer that was not mutex protected a...
DEBIAN-CVE-2023-31979
Catdoc v0.95 was discovered to contain a global buffer overflow via the function processfile at /src/reader.c...
CVE-2023-31979
Catdoc v0.95 was discovered to contain a global buffer overflow via the function processfile at /src/reader.c...
UBUNTU-CVE-2023-31979
Catdoc v0.95 was discovered to contain a global buffer overflow via the function processfile at /src/reader.c...
CVE-2023-31979
Catdoc v0.95 was discovered to contain a global buffer overflow via the function processfile at /src/reader.c...
OSV-2023-284 Global-buffer-overflow in dwg_codepage_dxfstr
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57723 Crash type: Global-buffer-overflow READ 8 Crash state: dwgcodepagedxfstr dxfheaderwrite dwgwritedxf...
PT-2023-35758 · Git +1 · Libredwg
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type identified as Global-buffer-overflow READ 8. The crash state involves several functions: dwg codepage dxfstr, dxf...
PT-2023-35742 · Git +1 · Kimageformats
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type identified as Global-buffer-overflow READ 1. The crash state involves functions such as read coding unit, read codin...
kimageformats:kimgio_heif_fuzzer: Global-buffer-overflow in read_coding_unit
Project: git://anongit.kde.org/kimageformats Detailed Report: https://oss-fuzz.com/testcase?key=5445885667704832 Project: kimageformats Fuzzing Engine: afl Fuzz Target: kimgioheiffuzzer Job Type: aflasankimageformats Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash Address:...
PT-2023-35738 · Git +1 · Libxml2
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash caused by a global buffer overflow read. The crash state involves functions such as xmlStrndup, htmlParseSystemLiteral, a...
libxml2:html: Global-buffer-overflow in xmlStrndup
Project: https://gitlab.gnome.org/GNOME/libxml2.git Detailed Report: https://oss-fuzz.com/testcase?key=4953329095802880 Project: libxml2 Fuzzing Engine: libFuzzer Fuzz Target: html Job Type: libfuzzerasanlibxml2 Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash Address:...
libxslt:xslt: Global-buffer-overflow in xmlParseNotationDecl
Project: https://gitlab.gnome.org/GNOME/libxslt.git Detailed Report: https://oss-fuzz.com/testcase?key=6649340411379712 Project: libxslt Fuzzing Engine: libFuzzer Fuzz Target: xslt Job Type: libfuzzerasanlibxslt Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash Address:...