CVE-2018-19417

CVE-2018-19417 affects Contiki-NG MQTT server prior to 4.2. The parse_publish_vhdr() handling of MQTT PUBLISH messages copies input into a fixed-size buffer (MQTT_MAX_TOPIC_LENGTH = 64) without a length check, enabling a stack-smashing attack that could overwrite the return address and allow Remo...

[SECURITY] Fedora 28 Update: suricata-4.0.6-1.fc28

The Suricata Engine is an Open Source Next Generation Intrusion Detection and Prevention Engine. This engine is not intended to just replace or emulate the existing tools in the industry, but will bring new ideas and technologies to the field. This new Engine supports Multi-threading, Automatic...

OCS Inventory NG ocsreports Shell Upload Vulnerability

OCS Inventory NG suffers from an ocsreports authenticated remote code execution vulnerability via a shell upload. OCS Inventory NG ocsreports Shell Upload Request 1 This request creates a temporary file containing PHP code in the /usr/share/ocsinventory-reports/ocsreports/a.php.a/ directory. POST...

OCS Inventory NG ocsreports Shell Upload

Request 1 This request creates a temporary file containing PHP code in the /usr/share/ocsinventory-reports/ocsreports/a.php.a/ directory. POST /ocsreports/index.php?function=telepackage HTTP/1.1 Host: 192.168.5.135 User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; x64; rv:61.0 Gecko/20100101...

Wallarm now available on Azure

Wallarm is excited to announce the native availability of Wallarm node on Azure. While in the past Wallarm customers in Azure environment had to install Wallarm nodes as dynamic modules manually into their Azure instances with NGINX, the new release allows deployment from a pre-configured image...

EulerOS Virtualization 2.5.0 : procps-ng (EulerOS-SA-2018-1340)

According to the versions of the procps-ng package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - If the HOME environment variable is unset or empty, top will read its configuration file from the current working directory...

EulerOS Virtualization 2.5.1 : procps-ng (EulerOS-SA-2018-1326)

According to the versions of the procps-ng package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - If the HOME environment variable is unset or empty, top will read its configuration file from the current working directory...

Buffer overflow

contiki-ng version 4 contains a Buffer Overflow vulnerability in AQL Antelope Query Language database engine that can result in Attacker can perform Remote Code Execution on device using Contiki-NG operating system. This attack appear to be exploitable via Attacker must be able to run malicious A...

CVE-2018-1000804

contiki-ng version 4 contains a Buffer Overflow vulnerability in AQL Antelope Query Language database engine that can result in Attacker can perform Remote Code Execution on device using Contiki-NG operating system. This attack appear to be exploitable via Attacker must be able to run malicious A...

CVE-2018-1000804

contiki-ng version 4 contains a Buffer Overflow vulnerability in AQL Antelope Query Language database engine that can result in Attacker can perform Remote Code Execution on device using Contiki-NG operating system. This attack appear to be exploitable via Attacker must be able to run malicious A...

CVE-2018-1000804

contiki-ng version 4 contains a Buffer Overflow vulnerability in AQL Antelope Query Language database engine that can result in Attacker can perform Remote Code Execution on device using Contiki-NG operating system. This attack appear to be exploitable via Attacker must be able to run malicious A...

CVE-2018-1000804

The CVE-2018-1000804 entry concerns contiki-ng version 4 with a Buffer Overflow in the AQL (Antelope Query Language) database engine that can enable Remote Code Execution on a Contiki-NG device. Attack requires the ability to run malicious AQL code (e.g., via SQL-like injection); no explicit expl...

zlib-ng/minigzip_fuzzer: Use-of-uninitialized-value in gz_open

Project: https://github.com/sebpop/zlib-ng.git https://github.com/zlib-ng/zlib-ng.git Detailed report: https://oss-fuzz.com/testcase?key=5751241414541312 Project: zlib-ng Fuzzer: libFuzzerzlib-ngminigzipfuzzer Fuzz target binary: minigzipfuzzer Job Type: libfuzzermsanzlib-ng Platform Id: linux...

EulerOS Virtualization 2.5.1 : procps-ng (EulerOS-SA-2018-1274)

According to the versions of the procps-ng package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - procps-ng, procps: Integer overflows leading to heap overflow in file2strvec.CVE-2018-1124 - procps-ng, procps: incorrect integ...

Contiki-NG Buffer Overflow Vulnerability

Contiki-NG is an open source, cross-platform operating system for next-generation IoT devices. A stack buffer overflow vulnerability exists in the 'parserelations' function in the os/storage/antelope/aql-parser.c file in Contiki-NG 4.1 and earlier versions, which can be exploited by remote...

Contiki-NG buffer overflow vulnerability (CNVD-2019-09780)

Contiki-NG is an open source cross-platform operating system for next-generation IoT devices. A stack buffer overflow vulnerability exists in nextstring in os/storage/antelope/aql-lexer.c in Contiki-NG 4.1 and earlier versions when parsing AQL, which can be exploited by an attacker to execute cod...

Contiki-NG buffer overflow vulnerability (CNVD-2019-09778)

Contiki-NG is an open source cross-platform operating system for next-generation IoT devices. A buffer overflow vulnerability exists in lvmsettype in os/storage/antelope/lvm.c in Contiki-NG 4.1 and earlier versions when parsing AQL, which can be exploited by an attacker to execute code...

Stack overflow

An issue was discovered in Contiki-NG through 4.1. There is a stack-based buffer overflow in parserelations in os/storage/antelope/aql-parser.c while parsing AQL storage of relations...

CVE-2018-16666

An issue was discovered in Contiki-NG through 4.1. There is a stack-based buffer overflow in nextstring in os/storage/antelope/aql-lexer.c while parsing AQL parsing next string...

Stack overflow

An issue was discovered in Contiki-NG through 4.1. There is a stack-based buffer overflow in nextstring in os/storage/antelope/aql-lexer.c while parsing AQL parsing next string...