SUSE SLES15: gstreamer-plugins-bad / gstreamer-plugins-bad-devel / etc (SUSE-SU-2021:1904-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2021:1904-1 advisory. - CVE-2021-3185: h264parser: guard against refpicmarkings overflow bsc1181255 Tenable has extracted the preceding description block directly...

SUSE SLES12 Security Update : gstreamer-plugins-bad (SUSE-SU-2021:1873-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2021:1873-1 advisory. - CVE-2021-3185: Fixed buffer overflow in gsth264sliceparsedecrefpicmarking bsc1181255. Tenable has extracted the preceding description bloc...

DEBIAN-CVE-2021-3185

A flaw was found in the gstreamer h264 component of gst-plugins-bad before v1.18.1 where when parsing a h264 header, an attacker could cause the stack to be smashed, memory corruption and possibly code execution...

CVE-2021-3185

A flaw was found in the gstreamer h264 component of gst-plugins-bad before v1.18.1 where when parsing a h264 header, an attacker could cause the stack to be smashed, memory corruption and possibly code execution...

CVE-2021-3185

A flaw was found in the gstreamer h264 component of gst-plugins-bad before v1.18.1 where when parsing a h264 header, an attacker could cause the stack to be smashed, memory corruption and possibly code execution...

CVE-2021-3185

A flaw was found in the gstreamer h264 component of gst-plugins-bad before v1.18.1 where when parsing a h264 header, an attacker could cause the stack to be smashed, memory corruption and possibly code execution...

UBUNTU-CVE-2021-3185

A flaw was found in the gstreamer h264 component of gst-plugins-bad before v1.18.1 where when parsing a h264 header, an attacker could cause the stack to be smashed, memory corruption and possibly code execution...

CVE-2021-3185

CVE-2021-3185 affects the gstreamer gst-plugins-bad before v1.18.1, where parsing an H.264 header can cause stack smashing, memory corruption, and potentially code execution. The connected documents show multiple vendor advisories (RHEL, Gentoo GLSA, EulerOS, Astra, Nessus) noting this vulnerabil...

CVE-2021-3185

A flaw was found in the gstreamer h264 component where when parsing a h264 header, an attacker could cause the stack to be smashed, memory corruption to occur, and possibly code execution...

MGASA-2021-0028 Updated cairo packages fix a security vulnerability

LibreOffice slideshow aborts with stack smashing in cairo’s compositeboxes CVE-2020-35492...

Debian: Security Advisory (DLA-2518-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DLA-2518-1 : cairo security update

LibreOffice slideshow aborts with stack smashing in cairos compositeboxes. For Debian 9 stretch, this problem has been fixed in version 1.14.8-1+deb9u1. We recommend that you upgrade your cairo packages. For the detailed security status of cairo please refer to its security tracker page at:...

CVE-2014-5439

Multiple Stack-based Buffer Overflow vulnerabilities exists in Sniffit prior to 0.3.7 via a crafted configuration file that will bypass Non-eXecutable bit NX, stack smashing protector SSP, and address space layout randomization ASLR protection mechanisms, which could let a malicious user execute...

CVE-2014-5439

Multiple Stack-based Buffer Overflow vulnerabilities exists in Sniffit prior to 0.3.7 via a crafted configuration file that will bypass Non-eXecutable bit NX, stack smashing protector SSP, and address space layout randomization ASLR protection mechanisms, which could let a malicious user execute...

Internet Bug Bounty: tcpdump: CVE-2018-14879 - buffer overflow in tcpdump.c:get_next_file()

The release of tcpdump 4.9.3 brought many bug fixes, including one I submitted, CVE-2018-14879. The command-line argument parser in tcpdump before 4.9.3 has a buffer overflow in tcpdump.c:getnextfile. ==2288==ERROR: AddressSanitizer: stack-buffer-overflow on address 0x7ffe363769bf at pc...

Design/Logic Flaw

An issue was discovered in the MQTT server in Contiki-NG before 4.2. The function parsepublishvhdr that parses MQTT PUBLISH messages with a variable length header uses memcpy to input data into a fixed size buffer. The allocated buffer can fit only MQTTMAXTOPICLENGTH default 64 bytes, and a lengt...

CVE-2018-19417

An issue was discovered in the MQTT server in Contiki-NG before 4.2. The function parsepublishvhdr that parses MQTT PUBLISH messages with a variable length header uses memcpy to input data into a fixed size buffer. The allocated buffer can fit only MQTTMAXTOPICLENGTH default 64 bytes, and a lengt...

CVE-2018-19417

An issue was discovered in the MQTT server in Contiki-NG before 4.2. The function parsepublishvhdr that parses MQTT PUBLISH messages with a variable length header uses memcpy to input data into a fixed size buffer. The allocated buffer can fit only MQTTMAXTOPICLENGTH default 64 bytes, and a lengt...

PT-2018-14953

Name of the Vulnerable Software and Affected Versions Contiki-NG versions prior to 4.2 Description A issue in the MQTT server allows for Remote Code Execution via a stack-smashing attack. The parse publish vhdr function uses memcpy to input data into a fixed-size buffer without a length check,...

CVE-2018-19417: Improper Restriction of Operations within the Bounds of a Memory Buffer

An issue was discovered in the MQTT server in Contiki-NG before 4.2. The function parsepublishvhdr that parses MQTT PUBLISH messages with a variable length header uses memcpy to input data into a fixed size buffer. The allocated buffer can fit only MQTTMAXTOPICLENGTH default 64 bytes, and a lengt...