D-Link DI-8003 Arbitrary Command Execution

The vulnerability of the dbsrvasp function in the /dbsrv.asp file of the D-Link DI-8003 device’s microprogramming system is related to buffer overflow in the stack. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely by injecting a specially crafted comma...

file:magic_fuzzer_fd: Stack-buffer-overflow in dophn_exec

Project: https://github.com/file/file.git Detailed Report: https://oss-fuzz.com/testcase?key=6501920811843584 Project: file Fuzzing Engine: afl Fuzz Target: magicfuzzerfd Job Type: aflasanfile Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Address: 0x7a6e8ae4c300 Crash State:...

OESA-2024-2363 dcraw security update

This package contains dcraw, a command line tool to decode raw image data downloaded from digital cameras. Security Fixes: CVE-2017-13735 CVE-2017-14608 A stack-based buffer overflow in the findgreen function of dcraw through 9.28, as used in ufraw-batch and many other products, may allow a remot...

SQLite3 generate_series Stack Buffer Underflow Vulnerability

SQLite3 suffers from a stack buffer underflow condition in seriesBestIndex in the generateseries extension. Vulnerability details static int seriesBestIndex sqlite3vtab pVTab, sqlite3indexinfo pIdxInfo int i, j; / Loop over constraints / int idxNum = 0; / The query plan bitmask / ifndef...

OSV-2022-1288 Stack-buffer-overflow in bool SmilesParseOps::parser::parse_atom_props<std::__1::__wrap_iter<char const*>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=376787368 Crash type: Stack-buffer-overflow READ 1 Crash state: bool SmilesParseOps::parser::parseatomprops bool SmilesParseOps::parser::parseit SmilesParseOps::parseCXExtensions...

SQLite3 generate_series Stack Buffer Underflow

Vulnerability details static int seriesBestIndex sqlite3vtab pVTab, sqlite3indexinfo pIdxInfo int i, j; / Loop over constraints / int idxNum = 0; / The query plan bitmask / ifndef ZEROARGUMENTGENERATESERIES int bStartSeen = 0; / EQ constraint seen on the START column / endif int unusableMask = 0;...

PT-2024-40551

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided input. Description: The issue is related to a stack-buffer-overflow read, which occurs in the SmilesParseOps parser. Specifically, the crash happens in the parse atom props and...

rdkit:smiles_string_to_mol_fuzzer: Stack-buffer-overflow in bool SmilesParseOps::parser::parse_atom_props<std::__1::__wrap_iter<char const*>

Project: https://github.com/rdkit/rdkit.git Detailed Report: https://oss-fuzz.com/testcase?key=6503465377988608 Project: rdkit Fuzzing Engine: libFuzzer Fuzz Target: smilesstringtomolfuzzer Job Type: libfuzzerasanrdkit Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address:...

OSV-2024-1261 Stack-buffer-overflow in _pcre2_compile_class_not_nested_16

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=376515526 Crash type: Stack-buffer-overflow WRITE 2 Crash state: pcre2compileclassnotnested16 compileclassoperand pcre2compileclassnested16...

pcre2:pcre2_fuzzer_16: Stack-buffer-overflow in _pcre2_compile_class_not_nested_16

Project: svn://vcs.exim.org/pcre2/code/trunk https://github.com/PCRE2Project/pcre2.git Detailed Report: https://oss-fuzz.com/testcase?key=5774225949917184 Project: pcre2 Fuzzing Engine: libFuzzer Fuzz Target: pcre2fuzzer16 Job Type: libfuzzerasanpcre2 Platform Id: linux Crash Type:...

Tenda AC8 Router formSetRebootTimer Buffer Overflow

The vulnerability of the compareparentcontroltime function /goform/saveParentControlInfo in the Tenda AC8 router’s microprogramming system is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

DrayTek Vigor CGI Code Execution

The vulnerability of the /cgi-bin/ipfedr.cgi web interface of the DrayTek Vigor router software lies in buffer overflow in the stack. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause a service failure by sending a specially crafted HTTP request...

Fortinet Fortigate Stack-based buffer overflows in diagnostic CLI commands (FG-IR-21-179)

The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-21-179 advisory. - A stack-based buffer overflow vulnerability CWE-121 in the command line interpreter of FortiOS before 7.0.4 and FortiProxy...

Fortinet FortiWeb Multiple stack-based buffer overflow vulnerabilities in CLI command (FG-IR-20-206)

The version of FortiWeb installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-20-206 advisory. - A stack-based buffer overflow in Fortinet FortiWeb version 6.3.14 and below, 6.2.4 and below allows attacker to execute...

CVE-2024-40494

Buffer Overflow in coapmsg.c in FreeCoAP allows remote attackers to execute arbitrary code or cause a denial of service stack buffer overflow via a crafted packet...

PT-2024-28877 · Freecoap · Freecoap

Name of the Vulnerable Software and Affected Versions: FreeCoAP affected versions not specified Description: The issue allows remote attackers to execute arbitrary code or cause a denial of service via a crafted packet, resulting in a stack buffer overflow in the coap msg.c file. Recommendations:...

CVE-2024-40494

Buffer Overflow in coapmsg.c in FreeCoAP allows remote attackers to execute arbitrary code or cause a denial of service stack buffer overflow via a crafted packet...

hunspell: Stack-buffer-overflow in AffixMgr::compound_check_morph

Recording https://github.com/hunspell/hunspell/issues/996 here for historical purposes...

ndpi:fuzz_ndpi_reader_pl7m: Stack-buffer-overflow in ndpi_init_packet

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=6377181921476608 Project: ndpi Fuzzing Engine: honggfuzz Fuzz Target: fuzzndpireaderpl7m Job Type: honggfuzzasanndpi Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 3 Crash Address:...

CBL Mariner 2.0 Security Update: redis / valkey (CVE-2024-31449)

The version of redis / valkey installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-31449 advisory. - Redis is an open source, in-memory database that persists on disk. An authenticated user May use a...