CVE-2019-14363

A stack-based buffer overflow in the upnpd binary running on NETGEAR WNDR3400v3 routers with firmware version 1.0.1.181.0.63 allows an attacker to remotely execute arbitrary code via a crafted UPnP SSDP packet...

CVE-2019-14363

CVE-2019-14363 affects NETGEAR WNDR3400v3 routers, where the upnpd binary is vulnerable to a stack-based buffer overflow in firmware 1.0.1.18_1.0.63. A crafted UPnP SSDP packet can cause remote code execution. The vulnerability is documented with high/critical severity (CVSS v3.0: 9.8, NETWORK, L...

Stack overflow

SSDP Responder 1.x through 1.5 mishandles incoming network messages, leading to a stack-based buffer overflow by 1 byte. This results in a crash of the server, but only when strict stack checking is enabled. This is caused by an off-by-one error in ssdprecv in ssdpd.c...

CVE-2019-14323

The CVE-2019-14323 entry describes a stack-based buffer overflow in SSDP Responder 1.x–1.5 due to an off-by-one error in ssdp_recv(ssdpd.c). This can crash the server when strict stack checking is enabled. The issue is confirmed across multiple outlets (Red Hat, SUSE, CNVD, CNVD-like entries) and...

CVE-2019-14323

SSDP Responder 1.x through 1.5 mishandles incoming network messages, leading to a stack-based buffer overflow by 1 byte. This results in a crash of the server, but only when strict stack checking is enabled. This is caused by an off-by-one error in ssdprecv in ssdpd.c...

CVE-2019-14323: Off-by-one Error

SSDP Responder 1.x through 1.5 mishandles incoming network messages, leading to a stack-based buffer overflow by 1 byte. This results in a crash of the server, but only when strict stack checking is enabled. This is caused by an off-by-one error in ssdprecv in ssdpd.c...

CVE-2019-14275

CVE-2019-14275 affects Xfig’s fig2dev, specifically a stack-based buffer overflow in the calc_arrow function of bound.c (v3.2.7a). This leads to potential denial-of-service conditions as noted in multiple advisories. The issue is addressed in newer fig2dev releases (fixed in 3.2.8; OpenVAS/Ubuntu...

CVE-2019-14275: Out-of-bounds Write

Xfig fig2dev 3.2.7a has a stack-based buffer overflow in the calcarrow function in bound.c...

CVE-2019-10974: Stack-based Buffer Overflow

NREL EnergyPlus, Versions 8.6.0 and possibly prior versions, The application fails to prevent an exception handler from being overwritten with arbitrary code...

CVE-2019-13989

dpic 2019.06.20 has a Stack-based Buffer Overflow in the wfloat function in main.c...

CVE-2019-13989

dpic 2019.06.20 has a Stack-based Buffer Overflow in the wfloat function in main.c...

CVE-2019-13989

CVE-2019-13989 affects dpic 2019.06.20, with a Stack-based Buffer Overflow in the wfloat() function of main.c. The vulnerability can impact C/I/A (per CVSS) and has public advisories indicating fixes in newer dpic packages (e.g., Mageia MGASA-2020-0460) and vendor/OS advisories; patching/upgradin...

CVE-2019-13989: Out-of-bounds Write

dpic 2019.06.20 has a Stack-based Buffer Overflow in the wfloat function in main.c...

CVE-2019-13951

The setipv4 function in zscanrfc1035.rl in gdnsd 3.x before 3.2.1 has a stack-based buffer overflow via a long and malformed IPv4 address in zone data...

CVE-2019-13952

The setipv6 function in zscanrfc1035.rl in gdnsd before 2.4.3 and 3.x before 3.2.1 has a stack-based buffer overflow via a long and malformed IPv6 address in zone data...

CVE-2019-13952

The setipv6 function in zscanrfc1035.rl in gdnsd before 2.4.3 and 3.x before 3.2.1 has a stack-based buffer overflow via a long and malformed IPv6 address in zone data...

CVE-2019-13952

Summary of CVE-2019-13952 (gdnsd) : The vulnerability is a stack-based buffer overflow in the set_ipv6() function of zscan_rfc1035.rl within gdnsd prior to 2.4.3 and in 3.x prior to 3.2.1, triggered by a long, malformed IPv6 address in zone data. Affected products: gdnsd DNS server (C code). Root...

CVE-2019-13952

The setipv6 function in zscanrfc1035.rl in gdnsd before 2.4.3 and 3.x before 3.2.1 has a stack-based buffer overflow via a long and malformed IPv6 address in zone data...

CVE-2019-13952

The setipv6 function in zscanrfc1035.rl in gdnsd before 2.4.3 and 3.x before 3.2.1 has a stack-based buffer overflow via a long and malformed IPv6 address in zone data...

CVE-2019-13952: Out-of-bounds Write

The setipv6 function in zscanrfc1035.rl in gdnsd before 2.4.3 and 3.x before 3.2.1 has a stack-based buffer overflow via a long and malformed IPv6 address in zone data...