sfop

Segmentation Fault-Oriented Programming SFOP This is the artifacts repository for the Segmentation Fault-Oriented Programming exploitation technique. Artifacts Collection Here we briefly describe the artifacts in this repository. In total, there are eight different artifacts, composed of six PoC...

CVE-2022-34913

Descripción de CVE-2022-34913 md2roff 1.7 sufre un desbordamiento de búfer basado en pila mediante un archivo Markdown que contiene una gran cantidad de caracteres consecutivos por procesar. Reproducción Para reproducir la vulnerabilidad, debemos descargar una versión vulnerable de md2roff versió...

CVE-2022-34556

Description of CVE-2022-34556 PicoC v3.2.2 was discovered to contain a NULL pointer dereference at variable.c. Any project or library that uses Picoc also suffers from this issue. An example of this would be picoc-js. Setting up our environment To replicate the null pointer dereference...

bigdecimal-segfault-fix

h1. Corrección de Segfault en BigDecimal Hay un bug de segfault en la librería BigDecimal de Ruby que puede ser desencadenado por usuarios que proporcionen valores conocidos maliciosos. Si desea probar si su aplicación es segura, ejecute +example.rb+. Este script debería finalizar normalmente, no...

Rocky Linux 9 [CIQ] Security Update: ncurses / ncurses-base / ncurses-c++-libs / etc (crlsa-2025_12876)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202512876 advisory. ncurses: segfaulting OOB read CVE-2022-29458 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note that Nessus has no...

Rocky Linux 8 [CIQ] Security Update: gcc-toolset-12-binutils / gcc-toolset-12-binutils-debuginfo / etc (crlsa-2023_2873)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20232873 advisory. binutils: NULL pointer dereference in bfdelfgetsymbolversionstring leads to segfault CVE-2022-4285 Tenable has extracted the preceding description block directly fr...

Rocky Linux 8 [CIQ] Security Update: binutils / binutils-debuginfo / binutils-debugsource / etc (crlsa-2023_6236)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20236236 advisory. binutils: NULL pointer dereference in bfdelfgetsymbolversionstring leads to segfault CVE-2022-4285 Tenable has extracted the preceding description block directly fr...

Rocky Linux 8 [CIQ] Security Update: perl-JSON-XS / perl-JSON-XS-debuginfo / perl-JSON-XS-debugsource (crlsa-2025_17163)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202517163 advisory. JSON-XS: integer buffer overflow causing a segfault when parsing crafted JSON CVE-2025-40928 Tenable has extracted the preceding description block directly from th...

Rocky Linux 8 [CIQ] Security Update: raptor2 / raptor2-debuginfo / raptor2-debugsource / raptor2-devel Multiple Vulnerabilities (crlsa-2021_1842)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20211842 advisory. raptor: heap-based buffer overflows due to an error in calculating the maximum nspace declarations for the XML writer CVE-2017-18926 raptor2: malformed inp...

Rocky Linux 10.0 [CIQ] Security Update: perl-JSON-XS / perl-JSON-XS-debuginfo / perl-JSON-XS-debugsource (crlsa-2025_17119)

The Rocky Linux 10.0 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202517119 advisory. JSON-XS: integer buffer overflow causing a segfault when parsing crafted JSON CVE-2025-40928 Tenable has extracted the preceding description block directly from...

Rocky Linux 9 [CIQ] Security Update: perl-JSON-XS / perl-JSON-XS-debuginfo / perl-JSON-XS-debugsource (crlsa-2025_17162)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202517162 advisory. JSON-XS: integer buffer overflow causing a segfault when parsing crafted JSON CVE-2025-40928 Tenable has extracted the preceding description block directly from th...

TencentOS Server 4: expat (TSSA-2026:1058)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1058 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

SUSE-SU-2026:4348-1 Security update for glib2

This update for glib2 fixes the following issue: - CVE-2026-15588: GDBusServer pre-authentication DoS via unbounded SASL line buffering bsc1272206. Changes for glib2: - Fix segfault when monitoring hard links bsc1281419...

rsyslog security update

8.2510.0-2.0.1.el98.2 - Fixes rsyslog segfault during shutdown when relp is configured with TLS Orabug: 37588023 8.2510.0-2.2 - Fix CVE-2026-78002: heap buffer overflow in RainerScript replace function Resolves: RHEL-246641 8.2510.0-2.1 - Backport: imptcp: guard regex-framing match against...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libxml2 (UTSA-2023-001598)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-001598 advisory. In libxml2 before 2.10.4, parsing of certain invalid XSD schemas can lead to a NULL pointer dereference and subsequently a segfault. This occurs in...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: raptor2 (UTSA-2026-054035)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-054035 advisory. A malformed input file can lead to a segfault due to an out of bounds array access in raptorxmlwriterstartelementcommon. Tenable has extracted the preceding...

DEBIAN-CVE-2026-93894

In Vinyl Cache before 9.0,2, workspace buffer overflow vulnerability was found in the .upper and .lower string type methods of VCL. This can be used as a remote denial of service DoS vector to make the child process segfault or assert, and then restart. Effectively exploiting this vulnerability...

Oracle Linux 9 : rsyslog (ELSA-2026-67583)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-67583 advisory. 8.2510.0-2.0.1.el98.1 - Fixes rsyslog segfault during shutdown when relp is configured with TLS Orabug: 37588023 8.2510.0-2.1 - Backport: imptcp: guard...

rsyslog security update

8.2510.0-2.0.1.el98.1 - Fixes rsyslog segfault during shutdown when relp is configured with TLS Orabug: 37588023 8.2510.0-2.1 - Backport: imptcp: guard regex-framing match against iCurrLine == 0 Resolves: RHEL-212699...

SUSE SLES12: java-1_8_0-ibm / java-1_8_0-ibm-alsa / java-1_8_0-ibm-devel / etc (SUSE-SU-2026:4107-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4107-1 advisory. Update to Java 8.0 Service Refresh 8 Fix Pack 71 bsc1277833: - CVE-2026-8400: flaw in the ORB component may allow a malicious IIOP...