EulerOS 2.0 SP9 : unbound (EulerOS-SA-2024-2822)

According to the versions of the unbound packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A NULL pointer dereference flaw was found in the ubctxsetfwd function in Unbound. This issue could allow an attacker who can invoke specific...

EulerOS 2.0 SP10 : unbound (EulerOS-SA-2024-2897)

According to the versions of the unbound packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A heap-buffer-overflow flaw was found in the cfgmarkports function within Unbound's configfile.c, which can lead to memory corruption.This issue...

EulerOS 2.0 SP10 : unbound (EulerOS-SA-2024-2917)

According to the versions of the unbound packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A heap-buffer-overflow flaw was found in the cfgmarkports function within Unbound's configfile.c, which can lead to memory corruption.This issue...

CVE-2023-29125

A heap buffer overflow could be triggered by sending a specific packet to TCP port 7700...

CVE-2023-29125

CVE-2023-29125 describes a heap buffer overflow that can be triggered by sending a specific packet to TCP port 7700 in Enel X Waybox/ JuiceBox devices (Waybox family). The Red Hat and vendor-enrichment entries corroborate a heap overflow condition rooted in Enel X firmware (CM_main.exe in JuiceBo...

OSV-2024-1279 Heap-buffer-overflow in opj_j2k_read_tile_header

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42538309 Crash type: Heap-buffer-overflow WRITE 8 Crash state: opjj2kreadtileheader opjj2kdecodetiles opjj2kdecode...

RHEL 6 : postgresql92-postgresql (RHSA-2014:0221)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2014:0221 advisory. PostgreSQL is an advanced object-relational database management system DBMS. Multiple stack-based buffer overflow flaws were found in the...

RHEL 7 : qemu-kvm-rhev (RHSA-2016:1654)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2016:1654 advisory. KVM Kernel-based Virtual Machine is a full virtualization solution for Linux on AMD64 and Intel 64 systems. The qemu-kvm-rhev package provid...

RHEL 7 : qemu-kvm-rhev (RHSA-2017:0982)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2017:0982 advisory. KVM Kernel-based Virtual Machine is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm-rhev packages provi...

Heap-Based Buffer Overflow

MicroPython is vulnerable to a Heap-based buffer overflow. The vulnerability is due to improper string length comparison during the VFS unmount process in the mpvfsumount function, which allows a remote attacker to trigger a heap buffer overflow read by supplying a crafted unmount path...

PT-2024-35735 · Assimp +2 · Assimp +2

Name of the Vulnerable Software and Affected Versions: Assimp version 5.4.3 Description: A heap-buffer-overflow issue was discovered in the SkipSpacesAndLineEnd function. This occurs when processing certain malformed MD5 model files, leading to an out-of-bounds read and potential application cras...

CBL Mariner 2.0 Security Update: gdb (CVE-2023-39130)

The version of gdb installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-39130 advisory. - GNU gdb GDB 13.0.50.20220805-git was discovered to contain a heap buffer overflow via the function peas16 at...

OSV-2023-1398 Heap-buffer-overflow in load_1

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=376515517 Crash type: Heap-buffer-overflow READ 1 Crash state: load1 apprenticeload fileapprentice...

PT-2024-40554 · Git +1 · File

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read, as indicated by an OSS-Fuzz report. The crash state includes functions such as load 1, apprentice...

Low: gdb

Issue Overview: GNU gdb GDB 13.0.50.20220805-git was discovered to contain a stack overflow via the function adadecode at /gdb/ada-lang.c. CVE-2023-39128 GNU gdb GDB 13.0.50.20220805-git was discovered to contain a heap use after free via the function addpeexportedsym at /gdb/coff-pe-read.c...

Low: gdb

Issue Overview: GNU gdb GDB 13.0.50.20220805-git was discovered to contain a stack overflow via the function adadecode at /gdb/ada-lang.c. CVE-2023-39128 GNU gdb GDB 13.0.50.20220805-git was discovered to contain a heap use after free via the function addpeexportedsym at /gdb/coff-pe-read.c...

Autodesk AutoCAD Heap Buffer Overflow Vulnerability

Autodesk AutoCAD is a set of professional 3D drawing software from the American Autodesk Corporation. Autodesk AutoCAD suffers from a heap buffer overflow vulnerability that can be exploited by an attacker to cause a crash, read sensitive data, or execute arbitrary code in the context of the...

CVE-2024-10525 Eclipse Mosquito: Heap Buffer Overflow in my_subscribe_callback

In Eclipse Mosquitto, from version 1.3.2 through 2.0.18, if a malicious broker sends a crafted SUBACK packet with no reason codes, a client using libmosquitto may make out of bounds memory access when acting in its onsubscribe callback. This affects the mosquittosub and mosquittorr clients...

OSV-2024-1249 Heap-buffer-overflow in extract_ice_option

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=376100377 Crash type: Heap-buffer-overflow READ 1 Crash state: extracticeoption parsesdpsession parsesdp...

PT-2024-40618 · Git +1 · Kamailio

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 1 crash has been reported. The crash occurs in the following functions: extract ice option, parse sdp session, and parse sdp...