894 matches found
gdal:fgb_fuzzer: Negative-size-param in OGRSimpleCurve::setPoints
Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=5664944388833280 Project: gdal Fuzzing Engine: libFuzzer Fuzz Target: fgbfuzzer Job Type: libfuzzerasani386gdal Platform Id: linux Crash Type: Negative-size-param Crash Address: Crash State:...
mysql-server:fuzz_real_query: Memcpy-param-overlap in read_ok_ex
Project: https://github.com/mysql/mysql-server.git Detailed Report: https://oss-fuzz.com/testcase?key=5745581829390336 Project: mysql-server Fuzzing Engine: libFuzzer Fuzz Target: fuzzrealquery Job Type: libfuzzerasanmysql-server Platform Id: linux Crash Type: Memcpy-param-overlap Crash Address:...
imagemagick:encoder_heic_fuzzer: Memcpy-param-overlap in NAL_unit::set_data
Detailed Report: https://oss-fuzz.com/testcase?key=5698815994101760 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzerasani386imagemagick Platform Id: linux Crash Type: Memcpy-param-overlap Crash Address: 0x00000000,0xffffffff and 0xf13034a5,...
CVE-2019-17546
tifgetimage.c in LibTIFF through 4.0.10, as used in GDAL through 3.0.1 and other products, has an integer overflow that potentially causes a heap-based buffer overflow via a crafted RGBA image, related to a "Negative-size-param" condition...
CVE-2019-17546
tifgetimage.c in LibTIFF through 4.0.10, as used in GDAL through 3.0.1 and other products, has an integer overflow that potentially causes a heap-based buffer overflow via a crafted RGBA image, related to a "Negative-size-param" condition...
Integer overflow
tifgetimage.c in LibTIFF through 4.0.10, as used in GDAL through 3.0.1 and other products, has an integer overflow that potentially causes a heap-based buffer overflow via a crafted RGBA image, related to a "Negative-size-param" condition...
CVE-2019-17546
tifgetimage.c in LibTIFF through 4.0.10, as used in GDAL through 3.0.1 and other products, has an integer overflow that potentially causes a heap-based buffer overflow via a crafted RGBA image, related to a "Negative-size-param" condition...
gdal:fgb_fuzzer: Negative-size-param in OGRSimpleCurve::setPoints
Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=5676931189571584 Project: gdal Fuzzing Engine: libFuzzer Fuzz Target: fgbfuzzer Job Type: libfuzzerasani386gdal Platform Id: linux Crash Type: Negative-size-param Crash Address: Crash State:...
DEBIAN-CVE-2016-7398
A type confusion vulnerability in the mergeparam function of phphttpparams.c in PHP's pecl-http extension 3.1.0beta2 PHP 7 and earlier as well as 2.6.0beta2 PHP 5 and earlier allows attackers to crash PHP and possibly execute arbitrary code via crafted HTTP requests...
PT-2019-7841
Name of the Vulnerable Software and Affected Versions pecl-http extension versions 3.1.0beta2 and earlier PHP 7 pecl-http extension versions 2.6.0beta2 and earlier PHP 5 Description A type confusion issue in the merge param function of php http params.c allows attackers to crash PHP and possibly...
curl:curl_fuzzer_rtmp: Negative-size-param in fuzz_tlv_to_string
Project: https://github.com/curl/curl.git Detailed Report: https://oss-fuzz.com/testcase?key=5639027763445760 Project: curl Fuzzing Engine: libFuzzer Fuzz Target: curlfuzzerrtmp Job Type: libfuzzerasani386curl Platform Id: linux Crash Type: Negative-size-param Crash Address: Crash State:...
gdal:gtiff_fuzzer: Negative-size-param in _TIFFmemcpy
Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=5720749825851392 Project: gdal Fuzzing Engine: libFuzzer Fuzz Target: gtifffuzzer Job Type: libfuzzerasani386gdal Platform Id: linux Crash Type: Negative-size-param Crash Address: Crash State: TIFFmemcpy...
PT-2019-5884 · Libtiff +8 · Libtiff +8
Name of the Vulnerable Software and Affected Versions: LibTIFF versions 4.0.10 and earlier GDAL versions 3.0.1 and earlier Description: The issue is related to an integer overflow in the tif getimage.c component of the LibTIFF library, potentially causing a heap-based buffer overflow via a crafte...
CVE-2019-14703: Cross-Site Request Forgery (CSRF)
A CSRF issue was discovered in webparam?user&action=set¶m=add in HTTPD on MicroDigital N-series cameras with firmware through 6400.0.8.5 to create an admin account...
CVE-2019-14698: Improper Restriction of Operations within the Bounds of a Memory Buffer
An issue was discovered on MicroDigital N-series cameras with firmware through 6400.0.8.5. In a CGI program running under the HTTPD web server, a buffer overflow in the param parameter leads to remote code execution in the context of the nobody account...
PT-2019-13796
Name of the Vulnerable Software and Affected Versions MicroDigital N-series cameras with firmware through 6400.0.8.5 Description A CSRF issue was discovered in the HTTPD service, specifically affecting the "webparam?user&action=set¶m=add" API endpoint. This issue can be exploited to create an...
PT-2019-13791
Name of the Vulnerable Software and Affected Versions MicroDigital N-series cameras versions through 6400.0.8.5 Description A buffer overflow issue exists in a CGI program running under the HTTPD web server, specifically in the param parameter, which can lead to remote code execution in the conte...
SUSE-SU-2019:2046-1 Security update for ardana packages
This update for ardana package fixes the following issues: - Update to version 9.0+git.1560211997.7ac9792: Adds repository list parameter bsc1122825 - Update to version 9.0+git.1557219331.457b6e7: Update gerrit location SCRD-9140 - Switch to new Gerrit Server - Update to version...
CVE-2019-5586: Improper Neutralization of Input During Web Page Generation
A reflected Cross-Site-Scripting XSS vulnerability in Fortinet FortiOS 5.2.0 to 5.6.10, 6.0.0 to 6.0.4 under SSL VPN web portal may allow an attacker to execute unauthorized malicious script code via the "param" parameter of the error process HTTP requests...
radare2/ia_fuzz: Negative-size-param in r_buf_read
Project: https://github.com/radare/radare2.git Detailed report: https://oss-fuzz.com/testcase?key=5691797705064448 Project: radare2 Fuzzer: libFuzzerradare2iafuzz Fuzz target binary: iafuzz Job Type: libfuzzerasanradare2 Platform Id: linux Crash Type: Negative-size-param Crash Address: Crash Stat...