Huawei EulerOS: Security Advisory for libtiff (EulerOS-SA-2022-1971)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

imagemagick:ping_tiff64_fuzzer: Stack-buffer-overflow in _TIFFVGetField

Detailed Report: https://oss-fuzz.com/testcase?key=5330314666311680 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: pingtiff64fuzzer Job Type: libfuzzerasani386imagemagick Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 4 Crash Address: 0xffc69370 Crash State: TIFFVGetField...

Ransom Lockbit 3.0 MVID-2022-0620 Buffer Overflow

Discovery / credits: Malvuln John Page aka hyp3rlinx c 2022 Original source: https://malvuln.com/advisory/38745539b71cf201bb502437f891d799.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Ransom Lockbit 3.0 Vulnerability: Local Unicode Buffer Overflow SEH Description: The...

espeak-ng:ssml-fuzzer: Stack-buffer-overflow in LookupDict2

Detailed Report: https://oss-fuzz.com/testcase?key=5951744827326464 Project: espeak-ng Fuzzing Engine: libFuzzer Fuzz Target: ssml-fuzzer Job Type: libfuzzerasanespeak-ng Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Address: 0x7f84a5488288 Crash State: LookupDict2 LookupDictLi...

CVE-2022-34835

In Das U-Boot through 2022.07-rc5, an integer signedness error and resultant stack-based buffer overflow in the "i2c md" command enables the corruption of the return address pointer of the doi2cmd function...

OSV-2022-520 Stack-buffer-overflow in sc_asn1_read_tag

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48476 Crash type: Stack-buffer-overflow READ 1 Crash state: scasn1readtag scasn1findtag cardoslistfiles...

OSV-2022-519 Stack-buffer-overflow in LookupThousands

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48470 Crash type: Stack-buffer-overflow WRITE Crash state: LookupThousands LookupNum3 TranslateNumber...

PT-2022-37059

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a stack-buffer-overflow crash. Technical details about the crash include the functions LookupThousands, LookupNum3, and...

PT-2022-37060

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a stack-buffer-overflow read error. The crash state indicates involvement of functions such as sc asn1 read tag, sc asn1 find tag,...

U-Boot buffer error vulnerability

Das U-Boot is a boot loader program mainly for embedded systems. The program supports many different computer system architectures such as PPC, ARM, AVR32, MIPS, x86, 68k, Nios and MicroBlaze. A security vulnerability exists in Das U-Boot version 2022.07-rc5 and earlier versions, which stems from...

opensc:fuzz_card: Stack-buffer-overflow in sc_asn1_read_tag

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=6302608886726656 Project: opensc Fuzzing Engine: honggfuzz Fuzz Target: fuzzcard Job Type: honggfuzzasanopensc Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address: 0x7fffc05c78f3...

espeak-ng:ssml-fuzzer: Stack-buffer-overflow in LookupThousands

Project: https://github.com/espeak-ng/espeak-ng.git Detailed Report: https://oss-fuzz.com/testcase?key=4950865177346048 Project: espeak-ng Fuzzing Engine: libFuzzer Fuzz Target: ssml-fuzzer Job Type: libfuzzerasanespeak-ng Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Address:...

Denial Of Service (DoS)

gpac is vulnerable to denial of service DoS attacks. A stack buffer overflow in src/utils/error.c leads to a denial of service vulnerability...

Updated libtiff packages fix security vulnerability

Heap-buffer-overflow in TIFFReadRawDataStriped in tiffinfo.c. CVE-2022-1354 Stack-buffer-overflow in tiffcp.c in main. CVE-2022-1355 Out-of-bounds read in LZWDecode. CVE-2022-1622, CVE-2022-1623...

Huawei EulerOS: Security Advisory for libtiff (EulerOS-SA-2022-1937)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DLA-3054-1 : sleuthkit - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3054 advisory. - In The Sleuth Kit TSK 4.4.2, opening a crafted ISO 9660 image triggers an out-of-bounds read in iso9660procdir in tsk/fs/iso9660dent.c in libtskfs.a, as...

Debian: Security Advisory (DLA-3054-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GPAC MP4Box Denial of Service Vulnerability

GPAC is a multimedia framework. A denial of service vulnerability exists in GPAC MP4Box version 1.1.0, which originates from a stack buffer overflow at src/utils/error.c:1769 that can be exploited by an attacker to cause a denial of service...

duckdb:parse_fuzz_test: Stack-buffer-overflow in duckdb::utf8proc_next_grapheme

Project: https://github.com/duckdb/duckdb.git Detailed Report: https://oss-fuzz.com/testcase?key=5082369452802048 Project: duckdb Fuzzing Engine: honggfuzz Fuzz Target: parsefuzztest Job Type: honggfuzzasanduckdb Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address:...

EulerOS 2.0 SP5 : libtiff (EulerOS-SA-2022-1900)

According to the versions of the libtiff packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A heap buffer overflow in ExtractImageSection function in tiffcrop.c in libtiff library Version 4.3.0 allows attacker to trigger unsafe or out ...