21 matches found
tcpdump
TCPDUMP 4.x.y by The Tcpdump Group To report a security issue please send an e-mail to [email protected]. To report bugs and other problems, contribute patches, request a feature, provide generic feedback etc please see the guidelines for contributing in the tcpdump source tree root. Anonymo...
CVE-2026-45685
OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard. From version 0.1.0 to before version 0.9.0, malformed MongoDB wire messages can trigger uncaught panics in the MongoDB TCP parser, allowing a remote unauthenticated attacker to crash the telemetr...
SUSE CVE-2017-5202
The ISO CLNS parser in tcpdump before 4.9.0 has a buffer overflow in print-isoclns.c:clnpprint...
SUSE CVE-2018-16227
The IEEE 802.11 parser in tcpdump before 4.9.3 has a buffer over-read in print-80211.c for the Mesh Flags subfield...
systemd:fuzz-network-parser: Use-of-uninitialized-value in rename_process
Detailed Report: https://oss-fuzz.com/testcase?key=6404885946171392 Project: systemd Fuzzing Engine: libFuzzer Fuzz Target: fuzz-network-parser Job Type: libfuzzermsansystemd Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: renameprocess safeforkfull...
systemd:fuzz-network-parser: Use-of-uninitialized-value in rename_process
Detailed Report: https://oss-fuzz.com/testcase?key=5462328743428096 Project: systemd Fuzzing Engine: libFuzzer Fuzz Target: fuzz-network-parser Job Type: libfuzzermsansystemd Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: renameprocess safeforkfull...
systemd:fuzz-network-parser: Use-of-uninitialized-value in rename_process
Detailed Report: https://oss-fuzz.com/testcase?key=5791896251531264 Project: systemd Fuzzing Engine: libFuzzer Fuzz Target: fuzz-network-parser Job Type: libfuzzermsansystemd Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: renameprocess safeforkfull...
systemd:fuzz-network-parser: Heap-double-free in config_parse_nft_set_context
Detailed Report: https://oss-fuzz.com/testcase?key=5385039841460224 Project: systemd Fuzzing Engine: afl Fuzz Target: fuzz-network-parser Job Type: aflasansystemd Platform Id: linux Crash Type: Heap-double-free Crash Address: 0x6030000001c0 Crash State: configparsenftsetcontext...
systemd:fuzz-network-parser: Heap-double-free in nft_set_context_free_many
Detailed Report: https://oss-fuzz.com/testcase?key=6326353730863104 Project: systemd Fuzzing Engine: afl Fuzz Target: fuzz-network-parser Job Type: aflasansystemd Platform Id: linux Crash Type: Heap-double-free Crash Address: 0x6040000002a0 Crash State: nftsetcontextfreemany networkunref...
systemd:fuzz-network-parser: Heap-double-free in nft_set_context_free_many
Project: https://github.com/systemd/systemd.git Detailed Report: https://oss-fuzz.com/testcase?key=6592078156529664 Project: systemd Fuzzing Engine: honggfuzz Fuzz Target: fuzz-network-parser Job Type: honggfuzzasansystemd Platform Id: linux Crash Type: Heap-double-free Crash Address:...
Rust parser Data Compromise
The vulnerability in the library/std/src/net/parser.rs component of the Rust programming language is related to incorrect handling of zeros at the beginning of an IP address. Exploiting this vulnerability allows a remote attacker to compromise data integrity and cause service failures...
ALPINE-CVE-2021-29922
library/std/src/net/parser.rs in Rust before 1.53.0 does not properly consider extraneous zero characters at the beginning of an IP address string, which in some situations allows attackers to bypass access control that is based on IP addresses, because of unexpected octal interpretation...
systemd:fuzz-network-parser: Index-out-of-bounds in config_parse_ets_prio
Project: https://github.com/systemd/systemd.git Detailed Report: https://oss-fuzz.com/testcase?key=5756666201767936 Project: systemd Fuzzing Engine: libFuzzer Fuzz Target: fuzz-network-parser Job Type: libfuzzerubsansystemd Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash...
systemd:fuzz-network-parser: Heap-buffer-overflow in config_parse_ets_prio
Project: https://github.com/systemd/systemd.git Detailed Report: https://oss-fuzz.com/testcase?key=6247961001197568 Project: systemd Fuzzing Engine: honggfuzz Fuzz Target: fuzz-network-parser Job Type: honggfuzzasansystemd Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address:...
systemd/fuzz-network-parser: Use-of-uninitialized-value in internal_hashmap_free_free
Project: https://github.com/systemd/systemd.git Detailed report: https://oss-fuzz.com/testcase?key=5649975879401472 Project: systemd Fuzzer: libFuzzersystemdfuzz-network-parser Fuzz target binary: fuzz-network-parser Job Type: libfuzzermsansystemd Platform Id: linux Crash Type:...
systemd/fuzz-network-parser: Crash in netdev_get
Detailed report: https://oss-fuzz.com/testcase?key=5695165612687360 Project: systemd Fuzzer: aflsystemdfuzz-network-parser Fuzz target binary: fuzz-network-parser Job Type: aflasansystemd Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x613000600058 Crash State: netdevget...
systemd/fuzz-network-parser: Heap-buffer-overflow in network_free
Project: https://github.com/systemd/systemd.git Detailed report: https://oss-fuzz.com/testcase?key=5759063753752576 Project: systemd Fuzzer: libFuzzersystemdfuzz-network-parser Fuzz target binary: fuzz-network-parser Job Type: libfuzzerasansystemd Platform Id: linux Crash Type: Heap-buffer-overfl...
DEBIAN-CVE-2016-6254
Heap-based buffer overflow in the parsepacket function in network.c in collectd before 5.4.3 and 5.x before 5.5.2 allows remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code via a crafted network packet...
Wireshark NLM Parser Double Release Vulnerability
Wireshark is the most popular network protocol parser. A double-release vulnerability exists in epan/dissectors/packet-nlm.c in the Wireshark NLM parser, which can be exploited by a remote attacker to cause a denial of service application crash via a constructed packet with the "Match MSG/RES...
Wireshark IPMI Parser Denial of Service Vulnerability
Wireshark is the most popular network protocol parser. The ipmifmtudpport function in epan/dissectors/packet-ipmi.c in the IPMI parser version 2.0.x prior to Wireshark 2.0.1 fails to properly access packet ranges, allowing remote attackers to launch a denial-of-service attack via crafted packets...