SUSE CVE-2022-0194

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authentication is not required to exploit this vulnerability. The specific flaw exists within the adaddcomment function. The issue results from the lack of proper validation of the length o...

SUSE CVE-2022-35260

curl can be told to parse a .netrc file for credentials. If that file endsin a line with 4095 consecutive non-white space letters and no newline, curlwould first read past the end of the stack-based buffer, and if the readworks, write a zero byte beyond its boundary.This will in most cases cause ...

Adobe Animate buffer error vulnerability

Adobe Animate is a Flash animation software from Adobe. Adobe Animate is vulnerable to a stack buffer overflow vulnerability that could be exploited to execute arbitrary code in the context of the current user...

freeradius:fuzzer_tacacs: Stack-buffer-overflow in fr_tacacs_decode

Detailed Report: https://oss-fuzz.com/testcase?key=5221593162055680 Project: freeradius Fuzzing Engine: libFuzzer Fuzz Target: fuzzertacacs Job Type: libfuzzerasanfreeradius Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Address: 0x7ffd84c698d2 Crash State: frtacacsdecode...

Advisory ROSA-SA-2023-2113

Software: kernel 3.10.0-1160.83.1.el7 OS: rosa-server79 packageevrstring: kernel-3.10.0-1160.83.1.el7 CVE-ID: CVE-2023-0179 BDU-ID: 2023-00383 CVE-Crit: HIGH CVE-DESC: A vulnerability in the netfilter component of the Linux operating system kernel is related to a stack buffer overflow in nftables...

samba:fuzz_parse_lpq_entry: Stack-buffer-overflow in __wrap_strlcpy

Project: https://gitlab.com/samba-team/samba.git Detailed Report: https://oss-fuzz.com/testcase?key=5864352197771264 Project: samba Fuzzing Engine: honggfuzz Fuzz Target: fuzzparselpqentry Job Type: honggfuzzasansamba Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Address:...

Siemens Solid Edge Stack Buffer Overflow Vulnerability

Siemens Solid Edge is a 3D CAD software from Siemens, a German company. The software can be used for part design, assembly design, sheet metal design, welding design, etc. Siemens Solid Edge is vulnerable to a stack buffer overflow vulnerability, which can be exploited by attackers to execute cod...

Wago PFC200 iocheckd service 'I/O-Check' cache Code Execution (CVE-2019-5176)

An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service I/O-Check' functionality of WAGO PFC 200 Firmware version 03.02.0214. An attacker can send a specially crafted packet to trigger the parsing of this cache file.The destination buffer sp+0x40 is...

Wago PFC200 iocheckd service 'I/O-Check' cache Code Execution (CVE-2019-5177)

An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service I/O-Check' functionality of WAGO PFC 200 Firmware version 03.02.0214. The destination buffer sp+0x440 is overflowed with the call to sprintf for any domainname values that are greater than...

Wago PFC200 iocheckd service 'I/O-Check' cache Code Execution (CVE-2019-5179)

An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service I/O-Check' functionality of WAGO PFC 200 Firmware version 03.02.0214. An attacker can send a specially crafted packet to trigger the parsing of this cache file. This plugin only works with Tenable.ot...

Wago PFC200 iocheckd service 'I/O-Check' cache DNS code execution vulnerability (CVE-2019-5166)

An exploitable stack buffer overflow vulnerability exists in the iocheckd service I/O-Check' functionality of WAGO PFC 200 version 03.02.0214. A specially crafted XML cache file written to a specific location on the device can cause a stack buffer overflow, resulting in code execution. An attacke...

Wago PFC200 iocheckd service 'I/O-Check' cache Code Execution (CVE-2019-5178)

An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service I/O-Check' functionality of WAGO PFC 200 Firmware version 03.02.0214. An attacker can send a specially crafted packet to trigger the parsing of this cache file. The destination buffer sp+0x440 is...

WAGO I/O-CHECK Buffer Access with Incorrect Length Value (CVE-2019-5074)

An exploitable stack buffer overflow vulnerability exists in the iocheckd service ''I/O-Check'' functionality of WAGO PFC200 Firmware version 03.01.0713, WAGO PFC200 Firmware version 03.00.3912 and WAGO PFC100 Firmware version 03.00.3912. A specially crafted set of packets can cause a stack buffe...

Wago PFC200 iocheckd service 'I/O-Check' cache Code Execution (CVE-2019-5181)

An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service I/O-Check' functionality of WAGO PFC 200 Firmware version 03.02.0214. A specially crafted XML cache file written to a specific location on the device can cause a stack buffer overflow, resulting in cod...

Siemens JT Open Toolkit security vulnerabilities

Siemens JT Open Toolkit Siemens JTTK is a C++ application programming interface API from Siemens, Germany. It provides support for 64-bit application development on Microsoft Windows, Linux and MacOS. Siemens JT Open Toolkit suffers from a stack buffer overflow vulnerability that can be exploited...

mosquitto:broker_fuzz_test_config: Stack-buffer-overflow in mosquitto__hex2bin

Project: https://github.com/eclipse/mosquitto.git Detailed Report: https://oss-fuzz.com/testcase?key=4940854638018560 Project: mosquitto Fuzzing Engine: honggfuzz Fuzz Target: brokerfuzztestconfig Job Type: honggfuzzasanmosquitto Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 1 Crash...

suricata:fuzz_siginit: Stack-buffer-overflow in strlcpy

Project: https://github.com/OISF/suricata.git Detailed Report: https://oss-fuzz.com/testcase?key=6303734667018240 Project: suricata Fuzzing Engine: honggfuzz Fuzz Target: fuzzsiginit Job Type: honggfuzzasansuricata Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Address:...

Denial Of Service (DoS)

libde265 is vulnerable to Denial Of Service DoS. The vulnerability exists due to the stack buffer overflow in the putqpelfallback function, allowing an attacker to cause an application crash through the maliciously crafted file...

net-snmp:snmp_config_fuzzer: Stack-buffer-overflow in __wrap_strlcpy

Project: git://git.code.sf.net/p/net-snmp/code https://github.com/net-snmp/net-snmp.git Detailed Report: https://oss-fuzz.com/testcase?key=5420875685167104 Project: net-snmp Fuzzing Engine: honggfuzz Fuzz Target: snmpconfigfuzzer Job Type: honggfuzzasannet-snmp Platform Id: linux Crash Type:...

opensc:fuzz_pkcs15init: Stack-buffer-overflow in __wrap_strlcpy

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=4691271135657984 Project: opensc Fuzzing Engine: honggfuzz Fuzz Target: fuzzpkcs15init Job Type: honggfuzzasanopensc Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Address:...