Heap Buffer Overflow

gst-plugins-bad GStreamer is vulnerable to Heap Buffer Overflow. The vulnerability is caused when handling malformed files with an uncompressed video. This could allow a malicious user to cause an integer overflow before allocating the buffer, triggering a crash or code execution via heap...

OSV-2023-1239 Heap-buffer-overflow in decToString

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64574 Crash type: Heap-buffer-overflow WRITE 1 Crash state: decToString decNumberToString jvnumbergetliteral...

SUSE-SU-2023:4619-1 Security update for sqlite3

This update for sqlite3 fixes the following issues: - CVE-2023-2137: Fixed heap buffer overflow bsc1210660...

Debian dla-3676 : horizon-doc - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3676 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3676-1 [email protected] https://www.debian.org/lts/security/...

PT-2023-35620 · Git +1 · Jq

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow WRITE 1 crash has been reported. The crash involves the functions decToString, decNumberToString, and jv number get literal. No...

Security Bulletin: IBM Cognos Analytics Cartridge for IBM Cloud Pak for Data 4.8.0 has addressed a security vulnerability (CVE-2023-4863)

Summary IBM Cognos Analytics Cartridge for IBM Cloud Pak for Data is affected but not considered vulnerable to a heap-buffer-overlfow in libwebp CVE-2023-4863. Vulnerability Details CVEID:CVE-2023-4863 DESCRIPTION: Google Chrome is vulnerable to a heap-based buffer overflow, caused by improper...

OSV-2023-1232 Heap-buffer-overflow in pcpp::TLSECPointFormatExtension::getECPointFormatList

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64543 Crash type: Heap-buffer-overflow READ 1 Crash state: pcpp::TLSECPointFormatExtension::getECPointFormatList pcpp::SSLClientHelloMessage::generateTLSFingerprint readParsedPacket...

PT-2023-35619 · Git +1 · Pcapplusplus

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 1 crash has been reported. The crash occurs in the pcpp::TLSECPointFormatExtension::getECPointFormatList function, which is...

SUSE SLES12: libsqlite3-0 / libsqlite3-0-32bit / sqlite3 / sqlite3-devel / etc (SUSE-SU-2023:4576-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:4576-1 advisory. - CVE-2023-2137: Fixed heap buffer overflow bsc1210660. Tenable has extracted the preceding description block directly from the SUSE securit...

ALPINE-CVE-2023-42366

A heap-buffer-overflow was discovered in BusyBox v.1.36.1 in the nexttoken function at awk.c:1159...

CVE-2023-42366

A heap-buffer-overflow was discovered in BusyBox v.1.36.1 in the nexttoken function at awk.c:1159...

OSV-2023-1223 Heap-buffer-overflow in H5O__shared_decode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64525 Crash type: Heap-buffer-overflow READ 1 Crash state: H5Oshareddecode H5Odtypeshareddecode H5Omsgreadoh...

SUSE-SU-2023:4576-1 Security update for sqlite3

This update for sqlite3 fixes the following issues: - CVE-2023-2137: Fixed heap buffer overflow bsc1210660...

CVE-2023-42366

A heap-buffer-overflow was discovered in BusyBox v.1.36.1 in the nexttoken function at awk.c:1159...

CVE-2023-42366

CVE-2023-42366 : BusyBox v1.36.1 contains a heap-buffer-overflow in the next_token path (awk.c:1159). This vulnerability could cause a crash/denial of service when processing crafted awk input. The issue is documented in multiple Nessus/EulerOS advisories tied to BusyBox 1.36.1; no vendor/product...

CVE-2023-42366

A heap-buffer-overflow was discovered in BusyBox v.1.36.1 in the nexttoken function at awk.c:1159...

CVE-2023-42366

A heap-buffer-overflow was discovered in BusyBox v.1.36.1 in the nexttoken function at awk.c:1159...

CVE-2023-42366

A heap-buffer-overflow was discovered in BusyBox v.1.36.1 in the nexttoken function at awk.c:1159...

PT-2023-7297

Name of the Vulnerable Software and Affected Versions BusyBox version 1.36.1 Description A heap-buffer-overflow issue was discovered in the next token function at awk.c:1159. This issue is related to writing beyond the buffer boundaries. Exploitation of this issue may allow an attacker to cause a...

OSV-2023-1214 Heap-buffer-overflow in NetworkInterface::dissectPacket

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64454 Crash type: Heap-buffer-overflow READ 2 Crash state: NetworkInterface::dissectPacket fuzzdissectpacket.cpp...