CVE-2023-48298

ClickHouse® is an open-source column-oriented database management system that allows generating analytical data reports in real-time. This vulnerability is an integer underflow resulting in crash due to stack buffer overflow in decompression of FPC codec. It can be triggered and exploited by an...

CVE-2023-48298

CVE-2023-48298 affects ClickHouse, specifically the FPC codec decompression path. The issue is an integer underflow that can crash the server via a stack buffer overflow, exploitable by an unauthenticated attacker. The vulnerability is described as similar to CVE-2023-47118; no explicit remediati...

CVE-2023-48298 Integer underflow leading to stack overflow in FPC codec decompression

ClickHouse® is an open-source column-oriented database management system that allows generating analytical data reports in real-time. This vulnerability is an integer underflow resulting in crash due to stack buffer overflow in decompression of FPC codec. It can be triggered and exploited by an...

CVE-2023-48298 Integer underflow leading to stack overflow in FPC codec decompression

ClickHouse® is an open-source column-oriented database management system that allows generating analytical data reports in real-time. This vulnerability is an integer underflow resulting in crash due to stack buffer overflow in decompression of FPC codec. It can be triggered and exploited by an...

CVE-2023-48298

ClickHouse® is an open-source column-oriented database management system that allows generating analytical data reports in real-time. This vulnerability is an integer underflow resulting in crash due to stack buffer overflow in decompression of FPC codec. It can be triggered and exploited by an...

CVE-2023-48298

ClickHouse® is an open-source column-oriented database management system that allows generating analytical data reports in real-time. This vulnerability is an integer underflow resulting in crash due to stack buffer overflow in decompression of FPC codec. It can be triggered and exploited by an...

gpac:fuzz_probe_analyze: Stack-buffer-overflow in gf_strdup

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=6154989789380608 Project: gpac Fuzzing Engine: afl Fuzz Target: fuzzprobeanalyze Job Type: aflasangpac Platform Id: linux Crash Type: Stack-buffer-overflow READ Crash Address: 0x7941193b0020 Crash State:...

CVE-2023-48298: Integer Underflow (Wrap or Wraparound)

ClickHouse® is an open-source column-oriented database management system that allows generating analytical data reports in real-time. This vulnerability is an integer underflow resulting in crash due to stack buffer overflow in decompression of FPC codec. It can be triggered and exploited by an...

libreoffice:svmfuzzer: Stack-buffer-overflow in BigInt::DivLong

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=4560846004813824 Project: libreoffice Fuzzing Engine: honggfuzz Fuzz Target: svmfuzzer Job Type: honggfuzzasanlibreoffice Platform Id: linux Crash Type: Stack-buffer-overflow READ 4 Crash...

OSV-2023-1329 Stack-buffer-overflow in decNaNs

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65130 Crash type: Stack-buffer-overflow WRITE 2 Crash state: decNaNs decCompareOp decNumberCompare...

OSV-2023-1328 Stack-buffer-overflow in icu_75::TZDBTimeZoneNames::getMetaZoneNames

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65128 Crash type: Stack-buffer-overflow WRITE 1 Crash state: icu75::TZDBTimeZoneNames::getMetaZoneNames icu75::TZDBTimeZoneNames::getMetaZoneDisplayName TestNames...

PT-2023-35657

Name of the Vulnerable Software and Affected Versions icu versions affected versions not specified Description The issue is related to a stack-buffer-overflow crash in the icu 75 library, specifically in the TZDBTimeZoneNames class. The crash occurs when calling the getMetaZoneNames and...

jq:jq_fuzz_fixed: Stack-buffer-overflow in decNaNs

Project: https://github.com/jqlang/jq.git Detailed Report: https://oss-fuzz.com/testcase?key=6610410589257728 Project: jq Fuzzing Engine: libFuzzer Fuzz Target: jqfuzzfixed Job Type: libfuzzerasanjq Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 2 Crash Address: 0x7ffd1e3e2b30 Crash...

icu:time_zone_names_fuzzer: Stack-buffer-overflow in icu_75::TZDBTimeZoneNames::getMetaZoneNames

Detailed Report: https://oss-fuzz.com/testcase?key=6453645256032256 Project: icu Fuzzing Engine: libFuzzer Fuzz Target: timezonenamesfuzzer Job Type: libfuzzerasanicu Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 1 Crash Address: 0x7ffd0bb59201 Crash State:...

CVE-2023-33218

The Parameter Zone Read and Parameter Zone Write command handlers allow performing a Stack buffer overflow. This could potentially lead to a Remote Code execution on the targeted device...

Stack overflow

The Parameter Zone Read and Parameter Zone Write command handlers allow performing a Stack buffer overflow. This could potentially lead to a Remote Code execution on the targeted device...

CVE-2023-33219 Stack Buffer Overflow when checking retrofit package

The handler of the retrofit validation command doesn't properly check the boundaries when performing certain validation operations. This allows a stack-based buffer overflow that could lead to a potential Remote Code Execution on the targeted device...

CVE-2023-33218

CVE-2023-33218 involves a stack buffer overflow in the Parameter Zone Read/Write command handlers, potentially enabling Remote Code Execution on affected devices. The primary sources (NVD, Red Hat, CVE lists) describe a network-accessible vulnerability with high/severe impact (Confidentiality/Int...

CVE-2023-33218: Stack-based Buffer Overflow

The Parameter Zone Read and Parameter Zone Write command handlers allow performing a Stack buffer overflow. This could potentially lead to a Remote Code execution on the targeted device...

Huawei EulerOS: Security Advisory for php (EulerOS-SA-2023-3445)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...