CVE-2021-36301

CVE-2021-36301 affects Dell EMC iDRAC8 and iDRAC9. The vulnerability is a Stack Buffer Overflow in Racadm that could allow an authenticated remote attacker to escalate control and execute code on the underlying OS. Affected versions are iDRAC9 < 4.40.40.00 and iDRAC8

CVE-2021-36301

Dell iDRAC 9 prior to version 4.40.40.00 and iDRAC 8 prior to version 2.80.80.80 contain a Stack Buffer Overflow in Racadm. An authenticated remote attacker may potentially exploit this vulnerability to control process execution and gain access to the underlying operating system...

CVE-2021-36301: Stack-based Buffer Overflow

Dell iDRAC 9 prior to version 4.40.40.00 and iDRAC 8 prior to version 2.80.80.80 contain a Stack Buffer Overflow in Racadm. An authenticated remote attacker may potentially exploit this vulnerability to control process execution and gain access to the underlying operating system...

GlobalProtect Portal/Gateway OS Exploit

The vulnerability of the GlobalProtect portal interface and the GlobalProtect Gateway server’s interface for the PAN-OS operating system is related to buffer overflow in the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ioLogik Web Server Buffer Overflow

The vulnerability of the web-server-based programmable logic controller ioLogik is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to cause service failures or execute arbitrary code using a specially crafted request...

binutils:fuzz_addr2line: Dynamic-stack-buffer-overflow in error_handler_internal

Detailed Report: https://oss-fuzz.com/testcase?key=4529864160444416 Project: binutils Fuzzing Engine: afl Fuzz Target: fuzzaddr2line Job Type: aflasanbinutils Platform Id: linux Crash Type: Dynamic-stack-buffer-overflow READ 8 Crash Address: 0x7fff95da1338 Crash State: errorhandlerinternal...

binutils:fuzz_disassemble: Dynamic-stack-buffer-overflow in extract_fields

Detailed Report: https://oss-fuzz.com/testcase?key=5150351905390592 Project: binutils Fuzzing Engine: afl Fuzz Target: fuzzdisassemble Job Type: aflasanbinutils Platform Id: linux Crash Type: Dynamic-stack-buffer-overflow READ 4 Crash Address: 0x7ffc0693c1c0 Crash State: extractfields...

Lantronix PremierWave 2050 Stack Buffer Overflow Vulnerability

The Lantronix PremierWave 2050 is an embedded enterprise Wi-Fi module from Lantronix, Inc. The Lantronix PremierWave 2050 has a security vulnerability that could be exploited by an attacker to execute remote code in a vulnerable portion of the branch deletedir...

Lantronix PremierWave 2050 Stack Buffer Overflow Vulnerability (CNVD-2022-01604)

The Lantronix PremierWave 2050 is an embedded enterprise Wi-Fi module from Lantronix, Inc. The Lantronix PremierWave 2050 in version 8.9.0.0R4 is vulnerable to a stack buffer overflow vulnerability that could be exploited by attackers to cause remote code execution...

openSUSE 15 Security Update : transfig (openSUSE-SU-2021:1481-1)

The remote SUSE Linux SUSE15 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:1481-1 advisory. - fig2dev 3.2.7b contains a stack buffer overflow in the bezierspline function in genepic.c. CVE-2020-21529 - fig2dev 3.2.7b contains a...

Updated opensc packages fix security vulnerability

CVE-2021-42780: Fixed use after return in insertpin bsc1192005. CVE-2021-42779: Fixed use after free in scfilevalid bsc1191992. CVE-2021-42781: Fixed multiple heap buffer overflows in pkcs15-oberthur.c bsc1192000. CVE-2021-42782: Stack buffer overflow issues in various places bsc1191957...

binutils:fuzz_disassemble: Dynamic-stack-buffer-overflow in extract_fields

Detailed Report: https://oss-fuzz.com/testcase?key=5956071865319424 Project: binutils Fuzzing Engine: afl Fuzz Target: fuzzdisassemble Job Type: aflasanbinutils Platform Id: linux Crash Type: Dynamic-stack-buffer-overflow READ 4 Crash Address: 0x7ffeba31a940 Crash State: extractfields aarch64extf...

binutils:fuzz_objdump_safe: Dynamic-stack-buffer-overflow in error_handler_internal

Detailed Report: https://oss-fuzz.com/testcase?key=5709208721424384 Project: binutils Fuzzing Engine: afl Fuzz Target: fuzzobjdumpsafe Job Type: aflasanbinutils Platform Id: linux Crash Type: Dynamic-stack-buffer-overflow READ 8 Crash Address: 0x7fffb6dca200 Crash State: errorhandlerinternal...

binutils:fuzz_disas_ext-bfd_arch_i386: Dynamic-stack-buffer-overflow in fetch_data

Detailed Report: https://oss-fuzz.com/testcase?key=4862202146848768 Project: binutils Fuzzing Engine: afl Fuzz Target: fuzzdisasext-bfdarchi386 Job Type: aflasanbinutils Platform Id: linux Crash Type: Dynamic-stack-buffer-overflow WRITE Crash Address: 0x7ffd9e0bcae0 Crash State: fetchdata printin...

GOCR Stack Buffer Overflow Vulnerability (CNVD-2021-101526)

GOCR is an open source OCR Optical Character Recognition program. trytodivideboxes in pgm2asc.c in GOCR 0.53-20200802 and earlier versions is vulnerable to a stack buffer overflow. No detailed vulnerability details are currently available...

GOCR Stack Buffer Overflow Vulnerability

GOCR is an open source OCR Optical Character Recognition program. A stack buffer overflow vulnerability exists in measurepitch in pgm2asc.c in GOCR 0.53-20200802 and earlier versions. No detailed vulnerability details are provided at this time...

CVE-2021-33479

A stack-based buffer overflow vulnerability was discovered in gocr through 0.53-20200802 in measurepitch in pgm2asc.c...

Oracle Linux 8 : GNOME (ELSA-2021-4381)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-4381 advisory. - CVE-2020-36241, CVE-2021-28650: Do not allow symlink in parents rhbz1928701 gnome-calculator - Backport fix for CVE-2020-24870 from upstream Resolves...

Adobe XMP-Toolkit-SDK Buffer Overflow

The vulnerability of the Adobe XMP-Toolkit-SDK software is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

frr:zebra: Stack-buffer-overflow in stream_get2

Project: https://github.com/FRRouting/frr.git Detailed Report: https://oss-fuzz.com/testcase?key=5455147614994432 Project: frr Fuzzing Engine: libFuzzer Fuzz Target: zebra Job Type: libfuzzerasanfrr Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Address: 0x7fffa5809860 Crash...