Gifsicle 缓冲区错误漏洞

gifsicle is Gifsicle handles GIF image files. A security vulnerability exists in Gifsicle version 1.9.3, which stems from the component ambiguityerror containing a heap buffer overflow vulnerability...

CVE-2023-36274

LibreDWG v0.11 to v0.12.5 was discovered to contain a heap buffer overflow via the function bitwriteTF at bits.c...

CVE-2023-36272

LibreDWG v0.10 to v0.12.5 was discovered to contain a heap buffer overflow via the function bitutf8toTU at bits.c...

CVE-2023-36192

Sngrep v1.6.0 was discovered to contain a heap buffer overflow via the function capturewscheckpacket at /src/capture.c...

CVE-2023-36272

LibreDWG v0.10 to v0.12.5 was discovered to contain a heap buffer overflow via the function bitutf8toTU at bits.c...

CVE-2023-36272

LibreDWG v0.10 to v0.12.5 was discovered to contain a heap buffer overflow via the function bitutf8toTU at bits.c...

CVE-2023-36192

Sngrep v1.6.0 was discovered to contain a heap buffer overflow via the function capturewscheckpacket at /src/capture.c...

CVE-2023-36193

Gifsicle v1.9.3 was discovered to contain a heap buffer overflow via the ambiguityerror component at /src/clp.c...

CVE-2023-36192

Sngrep v1.6.0 was discovered to contain a heap buffer overflow via the function capturewscheckpacket at /src/capture.c...

CVE-2023-36193

Gifsicle v1.9.3 was discovered to contain a heap buffer overflow via the ambiguityerror component at /src/clp.c...

CVE-2023-36271

LibreDWG v0.10 to v0.12.5 was discovered to contain a heap buffer overflow via the function bitwcs2nlen at bits.c...

Irontec Sngrep 缓冲区错误漏洞

Irontec Sngrep is a tool from Irontec for displaying SIP call message streams from endpoints. A security vulnerability exists in Irontec Sngrep version 1.6.0, which stems from the function capturewscheckpacket containing a heap buffer overflow vulnerability...

CVE-2023-36192

CVE-2023-36192 affects Sngrep v1.6.0, containing a heap buffer overflow in the function capture_ws_check_packet (source: /src/capture.c). The issue is documented across multiple feeds (NVD, Red Hat, SUSE, OSV, etc.), with the associated CVSSv3 base score of 7.8 (HIGH) and a LOCAL attack vector, r...

CVE-2023-36273

CVE-2023-36273 affects LibreDWG in version 0.12.5, where a heap buffer overflow is triggered by the function bit_calc_CRC in bits.c. This is confirmed across multiple sources (NVD entry and OSS/openSUSE advisories) and is addressed by updating to LibreDWG v0.12.5.5907, which fixes the heap buffer...

CVE-2023-36193

Gifsicle v1.9.3 was discovered to contain a heap buffer overflow via the ambiguityerror component at /src/clp.c...

CVE-2023-36193

Gifsicle v1.9.3 was discovered to contain a heap buffer overflow via the ambiguityerror component at /src/clp.c...

CVE-2023-36274

LibreDWG v0.11 to v0.12.5 was discovered to contain a heap buffer overflow via the function bitwriteTF at bits.c...

CVE-2023-36271

LibreDWG v0.10 to v0.12.5 was discovered to contain a heap buffer overflow via the function bitwcs2nlen at bits.c...

OSV-2023-504 Heap-buffer-overflow in ndpi_search_line

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60003 Crash type: Heap-buffer-overflow READ 1 Crash state: ndpisearchline checkndpidetectionfunc ndpicheckflowfunc...

ROS-20230621-02

A vulnerability in the LZWDecode function of the LibTIFF library is related to a null pointer dereferencing error in the libtiff/tiflzw.c file. Exploitation of the vulnerability could allow an attacker to create certain input data that could cause a program to dereference a NULL pointer when...