CVE-2020-36402

CVE-2020-36402 affects Solidity 0.7.5 with a stack-use-after-return in smtutil::CHCSmtLib2Interface::querySolver. Multiple sources describe the issue; OSV notes a so‑called fix field but states there is no corresponding code change. CVSSv3.1 base score 7.8 (HIGH) with LOCAL attack vector, no priv...

CVE-2020-36402: Out-of-bounds Write

Solidity 0.7.5 has a stack-use-after-return issue in smtutil::CHCSmtLib2Interface::querySolver. NOTE: c39a5e2b7a3fabbf687f53a2823fc087be6c1a7e is cited in the OSV "fixed" field but does not have a code change...

Solidity 缓冲区错误漏洞

Solidity is a high-level programming language. A security vulnerability exists in Solidity version 0.7.5 due to a stack-use-after-return in "smtutil::CHCSmtLib2Interface::querySolver".No details of the vulnerability are available at this time...

OSV-2021-901 Stack-use-after-return in __readlink

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35565 Crash type: Stack-use-after-return WRITE 8 Crash state: readlink v9fscoreadlink v9fsreadlink...

OSV-2021-736 Stack-use-after-return in zend_fiber_suspend_context

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34013 Crash type: Stack-use-after-return READ 4 Crash state: zendfibersuspendcontext zendfibersuspend zimFibersuspend...

OSV-2021-668 Stack-use-after-return in pdf14_initialize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33529 Crash type: Stack-use-after-return WRITE 8 Crash state: pdf14initialize pdf14procsinitialize pdf14RGBinitialize...

Ubuntu 16.04 LTS / 18.04 LTS : Linux kernel vulnerabilities (USN-4907-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4907-1 advisory. Wen Xu discovered that the xfs file system implementation in the Linux kernel did not properly validate the number of extents in an inode. An...

OSV-2021-617 Stack-use-after-return in v9fs_setattr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32995 Crash type: Stack-use-after-return READ 4 Crash state: v9fssetattr coroutinetrampoline...

OSV-2021-578 Stack-use-after-return in v9fs_string_free

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32624 Crash type: Stack-use-after-return READ 8 Crash state: v9fsstringfree v9fsxattrwalk coroutinetrampoline...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel-container (ELSA-2021-9086)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-9086 advisory. - xen-blkback: fix error handling in xenblkbkmap Jan Beulich Orabug: 32492109 CVE-2021-26930 - xen-scsiback: dont 'handle' error by BUG Jan Beulich...

Oracle Linux 7 : Unbreakable Enterprise kernel-container (ELSA-2021-9087)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2021-9087 advisory. - ovl: verify permissions in ovlpathopen Miklos Szeredi Orabug: 32435220 CVE-2020-16120 - ovl: switch to mounter creds in readdir Miklos Szeredi Orabug...

Huawei EulerOS: Security Advisory for tigervnc (EulerOS-SA-2021-1369)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP2 : tigervnc (EulerOS-SA-2021-1369)

According to the versions of the tigervnc packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - TigerVNC version prior to 1.10.1 is vulnerable to stack use-after-return, which occurs due to incorrect usage of stack memory in ZRLEDecoder. ...

OSV-2021-269 Stack-use-after-return in sta_prop_equal_fn

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30192 Crash type: Stack-use-after-return READ 6 Crash state: stapropequalfn wmemmapinsert dissectieeeNUMBERcommon...

CentOS 8 : tigervnc (CESA-2020:1497)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:1497 advisory. - tigervnc: Stack use-after-return due to incorrect usage of stack memory in ZRLEDecoder CVE-2019-15691 - tigervnc: Heap buffer overflow triggered from...

Updated kernel packages fix security vulnerabilities

This kernel update is based on upstream 5.10.12 and fixes at least the following security issues: fs/nfsd/nfs3xdr.c in the Linux kernel through 5.10.8, when there is an NFS export of a subdirectory of a filesystem, allows remote attackers to traverse to other parts of the filesystem via READDIRPL...

CVE-2021-3347

An issue was discovered in the Linux kernel through 5.10.11. PI futexes have a kernel stack use-after-free during fault handling, allowing local users to execute code in the kernel, aka CID-34b1a1ce1458...

CVE-2021-3347

CVE-2021-3347 is a Linux kernel use-after-free in PI futex fault handling that could allow a local user to crash the kernel or escalate privileges. Multiple connected advisories confirm the issue and indicate fixes have been released across distributions (e.g., generic kernel updates and kernel l...

CVE-2021-3347

An issue was discovered in the Linux kernel through 5.10.11. PI futexes have a kernel stack use-after-free during fault handling, allowing local users to execute code in the kernel, aka CID-34b1a1ce1458...

OSV-2018-106 Stack-use-after-return in BEInt<unsigned short, 2>::operator unsigned short

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=10082 Crash type: Stack-use-after-return READ 1 Crash state: BEInt::operator unsigned short OT::CoverageFormat2::Iter::more OT::SingleSubstFormat2::closure...