CVE-2022-44011

An issue was discovered in ClickHouse before 22.9.1.2603. An authenticated user with the ability to load data could cause a heap buffer overflow and crash the server by inserting a malformed CapnProto object. The fixed versions are 22.9.1.2603, 22.8.2.11, 22.7.4.16, 22.6.6.16, and 22.3.12.19...

CVE-2022-44011

Summary (CVE-2022-44011) : An issue in ClickHouse allows an authenticated user (with the ability to load data) to trigger a heap buffer overflow and crash the server by inserting a malformed CapnProto object. This affects multiple branches/versions prior to the fixes and is mitigated by upgrading...

CVE-2022-44011

An issue was discovered in ClickHouse before 22.9.1.2603. An authenticated user with the ability to load data could cause a heap buffer overflow and crash the server by inserting a malformed CapnProto object. The fixed versions are 22.9.1.2603, 22.8.2.11, 22.7.4.16, 22.6.6.16, and 22.3.12.19...

CVE-2022-44011

An issue was discovered in ClickHouse before 22.9.1.2603. An authenticated user with the ability to load data could cause a heap buffer overflow and crash the server by inserting a malformed CapnProto object. The fixed versions are 22.9.1.2603, 22.8.2.11, 22.7.4.16, 22.6.6.16, and 22.3.12.19...

SUSE CVE-2023-6228

An issue was found in the tiffcp utility distributed by the libtiff package where a crafted TIFF file on processing may cause a heap-based buffer overflow leads to an application crash...

c-ares security update

1.13.0-9.1 - Resolves: RHEL-11931 - Buffer Underwrite in aresinetnetpton rhel-8.9.0.z 1.13.0-9 - Resolves: rhbz2238293 - CVE-2020-22217 c-ares: read-heap-buffer-overflow in aresparsesoareply rhel-8 rhel-8.9.0.z...

ROS-20231115-02

Vulnerability of the GetPacket function of VideoLAN VLC media player program is related to incorrect reading of the offset, which leads to heap buffer overflow in GetPacket function. Exploitation of the vulnerability could allow an attacker acting remotely to corrupt memory A vulnerability in the...

Oracle Linux 8 : cups (ELSA-2023-7165)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-7165 advisory. - CVE-2023-32360 cups: Information leak through Cups-Get-Document operation - CVE-2023-34241 cups: use-after-free in cupsdAcceptClient in...

OSV-2023-1180 Heap-buffer-overflow in ih264d_sev

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64286 Crash type: Heap-buffer-overflow READ 4 Crash state: ih264dsev ih264dparsefgc ih264dparseseipayload...

OSV-2023-1177 Heap-buffer-overflow in Gfx::ICC::TextDescriptionTagData::from_bytes

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64219 Crash type: Heap-buffer-overflow READ 1 Crash state: Gfx::ICC::TextDescriptionTagData::frombytes Gfx::ICC::Profile::tryloadfromexternallyownedmemory FuzzICCProfile.cpp...

OSV-2023-1173 Heap-buffer-overflow in fill_lines

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64218 Crash type: Heap-buffer-overflow READ 1 Crash state: filllines rbdumpbacktracewithlines rbvmbugreport...

PT-2023-35596 · Git +1 · Ruby

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: A heap-buffer-overflow READ 1 crash type has been reported, with a crash state involving functions such as fill lines, rb dump backtrace with lines, and...

cups security and bug fix update

1:2.2.6-54 - RHEL-2612 - cups pulls an unneeded dependency on python3 1:2.2.6-53 - CVE-2023-32360 cups: Information leak through Cups-Get-Document operation 1:2.2.6-52 - 2217178 - Delays printing to lpd when reserved ports are exhausted - 2217283 - The command 'cancel -x ' does not remove job fil...

CVE-2023-47056

Adobe Premiere Pro version 24.0 and earlier and 23.6 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious...

OSV-2023-1172 Heap-buffer-overflow in pcpp::TLVRecordReader<pcpp::TcpOption>::getTLVRecord

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64205 Crash type: Heap-buffer-overflow READ 1 Crash state: pcpp::TLVRecordReader::getTLVRecord pcpp::TcpLayer::addTcpOptionAfter readParsedPacket...

OSV-2023-1171 Heap-buffer-overflow in pcpp::SomeIpSdLayer::SomeIpSdLayer

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64190 Crash type: Heap-buffer-overflow READ 2 Crash state: pcpp::SomeIpSdLayer::SomeIpSdLayer pcpp::SomeIpLayer::parseSomeIpLayer pcpp::SomeIpLayer::parseNextLayer...

OSV-2023-1169 Heap-buffer-overflow in epassNUMBER_pkcs15_generate_key

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64215 Crash type: Heap-buffer-overflow READ Crash state: epassNUMBERpkcs15generatekey scpkcs15initgeneratekey dogeneratekey...

OSV-2023-1168 Heap-buffer-overflow in pcpp::PPP_PPTPLayer::computeCalculateFields

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64196 Crash type: Heap-buffer-overflow WRITE 2 Crash state: pcpp::PPPPPTPLayer::computeCalculateFields pcpp::Packet::computeCalculateFields FuzzTarget.cpp...

PT-2023-35595 · Git +1 · Pcapplusplus

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow read issue is reported, which occurs in the getTLVRecord function of pcpp::TLVRecordReader, and is also related to the...

PT-2023-35594 · Git +1 · Pcapplusplus

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read error. Technical details about the crash include the involvement of pcpp::SomeIpSdLayer::SomeIpSdLaye...