CVE-2019-8906

CVE-2019-8906 is a file vulnerability affecting the file utility, caused by an out-of-bounds read due to incorrect use of memcpy in do_core_note within libmagic.a (file version 5.35). Public write-ups in connected documents confirm this entry and associate it with the file parser/ELF handling pat...

CVE-2019-8906

docorenote in readelf.c in libmagic.a in file 5.35 has an out-of-bounds read because memcpy is misused...

UBUNTU-CVE-2019-8906

docorenote in readelf.c in libmagic.a in file 5.35 has an out-of-bounds read because memcpy is misused...

Buffer overflow

In elfutils 0.175, a negative-sized memcpy is attempted in elfcvtnote in libelf/notexlate.h because of an incorrect overflow check. Crafted elf input causes a segmentation fault, leading to denial of service program crash...

ALPINE-CVE-2019-7664

In elfutils 0.175, a negative-sized memcpy is attempted in elfcvtnote in libelf/notexlate.h because of an incorrect overflow check. Crafted elf input causes a segmentation fault, leading to denial of service program crash...

UBUNTU-CVE-2019-7664

In elfutils 0.175, a negative-sized memcpy is attempted in elfcvtnote in libelf/notexlate.h because of an incorrect overflow check. Crafted elf input causes a segmentation fault, leading to denial of service program crash...

DEBIAN-CVE-2019-7664

In elfutils 0.175, a negative-sized memcpy is attempted in elfcvtnote in libelf/notexlate.h because of an incorrect overflow check. Crafted elf input causes a segmentation fault, leading to denial of service program crash...

CVE-2019-7664

In elfutils 0.175, a negative-sized memcpy is attempted in elfcvtnote in libelf/notexlate.h because of an incorrect overflow check. Crafted elf input causes a segmentation fault, leading to denial of service program crash...

VLC (European Commission - DIGIT): VLC 4.0.0 - Stack Buffer Overflow (SEH)

Summary: Incorrect calculation of Buffer Size in rist module for VLC leading to Stack Overflow with SEH chain overwrite. The modules/access/rist module has an incorrect calculation of buffer size giving an attacker the possibility to set the buffer size of a local variable by sending a maliciousl...

openthread/cli-uart-received-fuzzer: Memcpy-param-overlap in ot::Cli::CoapSecure::Process

Project: https://github.com/openthread/openthread.git Detailed report: https://oss-fuzz.com/testcase?key=5745974335504384 Project: openthread Fuzzer: aflopenthreadcli-uart-received-fuzzer Fuzz target binary: cli-uart-received-fuzzer Job Type: aflasanopenthread Platform Id: linux Crash Type:...

CVE-2019-6488

The string component in the GNU C Library aka glibc or libc6 through 2.28, when running on the x32 architecture, incorrectly attempts to use a 64-bit register for sizet in assembly codes, which can lead to a segmentation fault or possibly unspecified other impact, as demonstrated by a crash in...

Linux Kernel 4.13 compat_get_timex() Kernel Pointer Leak

define GNUSOURCE define BSDSOURCE include include include include include include include include include include include include include include include include include include // Ubuntu 4.13.0-16-generic // gcc -o poc poc.c -m32 struct timex time; int mainint argc, char argv int r; unsigned lon...

CVE-2019-6488

The string component in the GNU C Library aka glibc or libc6 through 2.28, when running on the x32 architecture, incorrectly attempts to use a 64-bit register for sizet in assembly codes, which can lead to a segmentation fault or possibly unspecified other impact, as demonstrated by a crash in...

CVE-2019-6488

The string component in the GNU C Library aka glibc or libc6 through 2.28, when running on the x32 architecture, incorrectly attempts to use a 64-bit register for sizet in assembly codes, which can lead to a segmentation fault or possibly unspecified other impact, as demonstrated by a crash in...

The vulnerability of the memcpy function in the PowerSuite 2 software package, related to a buffer overflow error, allows an attacker to corrupt data and cause unstable operation of the program.

The vulnerability of the memcpy function in the PowerSuite 2 software package is related to a buffer overflow error. Exploiting this vulnerability can allow an attacker to trigger a buffer overflow, resulting in data corruption or unstable program behavior...

UBUNTU-CVE-2018-16885

A flaw was found in the Linux kernel that allows the userspace to call memcpyfromiovecend and similar functions with a zero offset and buffer length which causes the read beyond the buffer boundaries, in certain cases causing a memory access fault and a system halt by accessing invalid memory...

Buffer overflow

A Buffer Error vulnerability exists in PowerSuite 2, all released versions VW3A8104 & Patches, which could cause an overflow in the memcpy function, leading to corruption of data and program instability...

CVE-2018-7796

CVE-2018-7796 concerns Schneider Electric PowerSuite 2 (VW3A8104 and patches). The root cause is a buffer overflow in memcpy leading to data corruption and program instability across all released versions. No exploits or remediation details are provided in the connected documents.

CVE-2018-7796

A Buffer Error vulnerability exists in PowerSuite 2, all released versions VW3A8104 & Patches, which could cause an overflow in the memcpy function, leading to corruption of data and program instability...

CVE-2018-19320

The GDrv low-level driver in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08 exposes ring0 memcpy-like functionality that could allow a local attacker to take complete control of the affected system...