CVE-2024-38576

In the Linux kernel, the following vulnerability has been resolved: rcu: Fix buffer overflow in printcpustallinfo The rcuc-starvation output from printcpustallinfo might overflow the buffer if there is a huge difference in jiffies difference. The situation might seem improbable, but computers...

CVE-2024-38577: Buffer Copy without Checking Size of Input

In the Linux kernel, the following vulnerability has been resolved: rcu-tasks: Fix showrcutaskstracegpkthread buffer overflow There is a possibility of buffer overflow in showrcutaskstracegpkthread if counters, passed to sprintf are huge. Counter numbers, needed for this are unrealistically high,...

CVE-2024-38576: Buffer Copy without Checking Size of Input

In the Linux kernel, the following vulnerability has been resolved: rcu: Fix buffer overflow in printcpustallinfo The rcuc-starvation output from printcpustallinfo might overflow the buffer if there is a huge difference in jiffies difference. The situation might seem improbable, but computers...

CVE-2023-52868 thermal: core: prevent potential string overflow

In the Linux kernel, the following vulnerability has been resolved: thermal: core: prevent potential string overflow The dev-id value comes from idaalloc so it's a number between zero and INTMAX. If it's too high then these sprintfs will overflow...

CVE-2023-52868 thermal: core: prevent potential string overflow

In the Linux kernel, the following vulnerability has been resolved: thermal: core: prevent potential string overflow The dev-id value comes from idaalloc so it's a number between zero and INTMAX. If it's too high then these sprintfs will overflow...

CVE-2023-52868

In the Linux kernel, the following vulnerability has been resolved: thermal: core: prevent potential string overflow The dev-id value comes from idaalloc so it's a number between zero and INTMAX. If it's too high then these sprintfs will overflow...

CVE-2023-52868: Out-of-bounds Write

In the Linux kernel, the following vulnerability has been resolved: thermal: core: prevent potential string overflow The dev-id value comes from idaalloc so it's a number between zero and INTMAX. If it's too high then these sprintfs will overflow...

CVE-2023-52748: Out-of-bounds Write

In the Linux kernel, the following vulnerability has been resolved: f2fs: avoid format-overflow warning With gcc and W=1 option, there's a warning like this: fs/f2fs/compress.c: In function ‘f2fsinitpagearraycache’: fs/f2fs/compress.c:1984:47: error: ‘%u’ directive writing between 1 and 7 bytes...

PT-2024-10499

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The vulnerability is related to the scsi: qedi component in the Linux kernel. It is caused by the qedi dbg do not recover cmd read function invoking sprintf directly on a user pointer,...

The vulnerability of the Did_set_langmap() function in the Vim text editor allows a hacker to execute arbitrary code.

The vulnerability of the Didsetlangmap function in the Vim text editor is related to the use of sprintf to write to the error buffer, which is passed to functions that handle option renames. Exploiting this vulnerability allows an attacker to execute arbitrary code...

ROS-20240410-15

A vulnerability in the vim text editor is related to the call to sprintf to write to an error buffer, which is passed to the option callback functions. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

DEBIAN-CVE-2023-45927

S-Lang 2.3.2 was discovered to contain an arithmetic exception via the function ttsprintf...

CVE-2024-25394

A buffer overflow occurs in utilities/ymodem/rysy.c in RT-Thread through 5.0.2 because of an incorrect sprintf call or a missing '\0' character...

CVE-2024-25394

A buffer overflow vulnerability exists in the RT-Thread open-source IoT real-time operating system (RTOS) versions through 5.0.2 . The flaw is located in the utilities/ymodem/ry_sy.c component and is caused by an incorrect sprintf call or a missing character . This vulnerability allows for a buff...

RT-Thread 安全漏洞

RT-Thread is an open source IoT real-time operating system RTOS from RT-Thread Open Source. A security vulnerability exists in RT-Thread version 5.0.2, which stems from an incorrect sprintf call or a missing "" character, resulting in a buffer overflow...

CVE-2024-25394

A buffer overflow occurs in utilities/ymodem/rysy.c in RT-Thread through 5.0.2 because of an incorrect sprintf call or a missing '\0' character...

CVE-2024-25394: Buffer Copy without Checking Size of Input

A buffer overflow occurs in utilities/ymodem/rysy.c in RT-Thread through 5.0.2 because of an incorrect sprintf call or a missing '\0' character...

Ubuntu 16.04 LTS : Libspf2 vulnerabilities (USN-6584-2)

The remote Ubuntu 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6584-2 advisory. USN-6584-1 fixed several vulnerabilities in Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. This update provides the corresponding updates for CVE-2021-33912 and...

Vim before 9.0.2142 has a stack-based buffer overflow because did_set_langmap in map.c calls sprintf to write to the error buffer that is passed down to the option callback functions.

...

Stack-Buffer-Overflow

Vim is vulnerable of stack-buffer-overflow. The vulnerability due to use sprintfbuf to write into the error buffer using function didsetlangmap in map.c. It leads to call passed down to the option callback functions...