OSV-2023-269 Heap-buffer-overflow in bit_utf8_to_TU

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57586 Crash type: Heap-buffer-overflow READ 1 Crash state: bitutf8toTU dynapisethelper dwgdynapientitysetvalue...

PT-2023-35748 · Git +1 · Libredwg

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 1 crash has been reported. The crash involves the functions bit utf8 to TU, dxf header read, and dwg read dxf. No information...

Fedora 38 : mingw-binutils (2023-15c6e4be28)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-15c6e4be28 advisory. Backport fix for CVE-2023-1579. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus h...

PT-2023-35745 · Git +1 · Libredwg

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 1 crash has been reported. The crash involves the functions bit utf8 to TU, dynapi set helper, and dwg dynapi entity set valu...

PT-2023-35747 · Git +1 · Libredwg

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow WRITE 2 crash has been reported, involving functions such as bit utf8 to TU, json wstring, and json AppInfo. No information is...

OSV-2023-261 Heap-buffer-overflow in HtpRequestBodyHandleMultipart

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57578 Crash type: Heap-buffer-overflow READ 1 Crash state: HtpRequestBodyHandleMultipart HTPCallbackRequestBodyData htphookrunall...

OSV-2023-260 Heap-buffer-overflow in ucl_object_dtor_unref_single

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57569 Crash type: Heap-buffer-overflow READ 8 Crash state: uclobjectdtorunrefsingle uclobjectdtorunref uclhashdestroy...

PT-2023-16087 · Nvidia · Nvidia Dcgm

Name of the Vulnerable Software and Affected Versions: NVIDIA DCGM for Linux affected versions not specified Description: The issue is related to a heap-based buffer overflow in the HostEngine component of NVIDIA DCGM for Linux. This can be triggered by a user through the bound socket, potentiall...

ASB-A-242544249

In inflate of inflate.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PUB-A-269656722

In TBD of TBD, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

PUB-A-269656636

In TBD of TBD, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

PUB-A-269656642

In TBD of TBD, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2023-35743 · Git +1 · Suricata

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read, which was identified through an OSS-Fuzz report. The crash state indicates the involvement of...

PUB-A-269655871

In TBD of TBD, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

PUB-A-269656813

In TBD of TBD, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2023-14277 · Bentley · Bentley View

Name of the Vulnerable Software and Affected Versions: Bentley View affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Bentley View. It requires user interaction, where the target must visit a malicious page or op...

CVE-2022-44370

NASM v2.16 was discovered to contain a heap buffer overflow in the component quoteforpmake asm/nasm.c:856...

DEBIAN-CVE-2022-44370

NASM v2.16 was discovered to contain a heap buffer overflow in the component quoteforpmake asm/nasm.c:856...

CVE-2022-44370

NASM v2.16 was discovered to contain a heap buffer overflow in the component quoteforpmake asm/nasm.c:856...

CVE-2023-28501 Heap buffer overflow in unirpcd

Rocket Software UniData versions prior to 8.2.4 build 3003 and UniVerse versions prior to 11.3.5 build 1001 or 12.2.1 build 2002 suffer from a heap-based buffer overflow in the unirpcd daemon that, if successfully exploited, can lead to remote code execution as the root user...