CVE-2021-3156-Heap-Based-Buffer-Overflow-in-Sudo-Baron-Samedit-

Aviso de seguridad de Qualys Baron Samedit: Desbordamiento de búfer basado en montón en Sudo CVE-2021-3156 ======================================================================== Contenido Resumen Análisis Explotación Agradecimientos Cronología...

CVE-2021-3156

CVE-2021-3156 Rol de Ansible que parchea CVE-2021-3156 para CentOS Introducción Sudo anterior a 1.9.5p2 tiene un desbordamiento de búfer basado en montón, que permite la escalada de privilegios a root mediante "sudoedit -s" y un argumento de línea de comandos que termina con un único carácter de...

CVE-2026-55200

安全报告：CVE-2026-55200 📝 概述 CVE-2026-55200 是一个基于 堆 的严重内存溢出漏洞（动态内存损坏），影响版本至 1.11.1 的 libssh2 库。 它允许恶意 SSH 服务器攻击连接到它的脆弱客户端。 ⚡ 技术细节 漏洞类型： 内存溢出（ 基于堆的缓冲区溢出 ）。 主要影响： 远程代码执行 RCE 和拒绝服务 DoS。 攻击阶段： 发生在密码学身份验证之前 。 攻击向量： 恶意或被拦截的 SSH 服务器发送一个长度过长的数据包，溢出客户端分配的缓冲区。 🏗️ 供应链影响 该漏洞影响范围极广，因为 libssh2 被多种流行工具和语言使用： curl...

cve-2024-49113-ldap_nightmare_reproduction

CVE-2024-49113 — LDAP Nightmare Windows LDAP Client Remote Code Execution Heap-Based Buffer Overflow...

UBUNTU-CVE-2026-82820

A vulnerability was found in FLVMeta up to 1.2.2. Affected is the function amfstringnew of the file src/amf.c of the component AMF String Processing. The manipulation of the argument length results in heap-based buffer overflow. The attack can be launched remotely. The exploit has been made publi...

CVE-2021-3156

CVE-2021-3156 https://www.qualys.com/2021/01/26/cve-2021-3156/baron-samedit-heap-based-overflow-sudo.txt https://blog.qualys.com/vulnerabilities-research/2021/01/26/cve-2021-3156-heap-based-buffer-overflow-in-sudo-baron-samedit https://access.redhat.com/security/vulnerabilities/RHSB-2021-002...

CVE-2026-82820 FLVMeta AMF String Processing amf.c amf_string_new heap-based overflow

A vulnerability was found in FLVMeta up to 1.2.2. Affected is the function amfstringnew of the file src/amf.c of the component AMF String Processing. The manipulation of the argument length results in heap-based buffer overflow. The attack can be launched remotely. The exploit has been made publi...

gimp: GIMP: Remote code execution via TIF file parsing heap-based buffer overflow

A flaw was found in GIMP. This heap-based buffer overflow vulnerability in the TIF file parsing component allows remote attackers to execute arbitrary code. Successful exploitation requires user interaction, where a target must open a malicious TIF file. An attacker can leverage this to execute...

Important: Red Hat Security Advisory: compat-libtiff3 security update

An update for compat-libtiff3 is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

EUVD-2026-68294

A security vulnerability has been detected in Open Asset Import Library Assimp up to 6.0.2. The impacted element is the function MD5Importer::MakeDataUnique of the file code/AssetLib/MD5/MD5Loader.cpp. The manipulation of the argument iNewIndex leads to heap-based buffer overflow. The attack can...

RHEL 7 : compat-libtiff3 (RHSA-2026:61657)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:61657 advisory. The libtiff3 package provides libtiff 3, an older version of libtiff library for manipulating TIFF Tagged Image File Format image format files. This...

CVE-2026-82591

Open Asset Import Library Assimp versions up to 6.0.2 contain a heap-based buffer overflow in the function MD5Importer::MakeDataUnique within the file code/AssetLib/MD5/MD5Loader.cpp. The root cause is improper handling of the argument iNewIndex, which can lead to memory corruption. The vulnerabi...

CVE-2025-47987

CVE-2025-47987: Windows CredSSP Elevation of Privilege 📌 Este repositorio contiene documentación y recursos de análisis sobre la vulnerabilidad CVE-2025-47987, un fallo de desbordamiento de búfer en la región heap Heap-based Buffer Overflow que afecta al protocolo Windows Credential Security...

MiracleLinux 9 : sqlite-3.34.1-11.el9_8 (AXSA:2026-1681:03)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1681:03 advisory. sqlite: SQLite: Arbitrary code execution via crafted FTS5 full-text search data CVE-2026-11822 sqlite: SQLite: Arbitrary code execution and crash vi...

UBUNTU-CVE-2026-77652

A heap-based buffer overflow vulnerability exists in the Dia diagram editor WPG file format importer. In plug-ins/wpg/wpg-import.c, the WPG import renderer allocates a fixed palette with: ren-pPal = gnew0WPGColorRGB, 256; When handling a WPGCOLORMAP record, the parser reads a start index i16 and...

CVE-2026-75767

Substance3D - Painter is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-75766

Substance3D - Painter is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-48432

Substance3D - Designer is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-48423

Substance3D - Sampler is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

EUVD-2026-65688

Substance3D - Painter is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...