Denial Of Service (DoS)

yaml is vulnerable to Denial of Service DoS attacks. According to the documentation, the parseDocument and parseAllDocuments functions should never raise an exception. However, an exception that comes from the prettifyError function is thrown when these functions are given erroneous input that...

Uncaught exception in document parsing functions

Description The parseDocument and parseAllDocuments functions should never throw according to the documentation. However, when these functions are fed an invalid input with a lot ≥80 of carriage return characters \r, an exception is thrown, which originates in the prettifyError function. Proof of...

Marcelo Roberto Jimenez pupnp 安全漏洞

Marcelo Roberto Jimenez pupnp is an open source application by Marcelo Roberto Jimenez, a portable SDK for UPnP devices. pupnp 1.16.1 contains a security vulnerability that stems from a stack overflow that can cause a denial of service via the parseDocument function of the parser. A security...

libreoffice/lwpfuzzer: Heap-use-after-free in LwpFrib::GetRevisionType

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5685654865313792 Project: libreoffice Fuzzer: afllibreofficelwpfuzzer Fuzz target binary: lwpfuzzer Job Type: aflasanlibreoffice Platform Id: linux Crash Type: Heap-use-after-free READ 1 Cra...