218 matches found
ASB-A-158063095
In ReadLogicalParts of basicmbr.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
OSV-2020-2254 Stack-use-after-return in insert_pin
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28383 Crash type: Stack-use-after-return READ 1 Crash state: insertpin detectidkey scpkcs15emutcosinitex...
serenity:FuzzICOLoader: Stack-use-after-return in AK::Vector<unsigned char, 0ul>::clear_with_capacity
Project: https://github.com/SerenityOS/serenity.git Detailed Report: https://oss-fuzz.com/testcase?key=4888328016756736 Project: serenity Fuzzing Engine: libFuzzer Fuzz Target: FuzzICOLoader Job Type: libfuzzerasanserenity Platform Id: linux Crash Type: Stack-use-after-return READ 8 Crash Address...
OSV-2020-2131 Stack-use-after-return in solidity::smtutil::CHCSmtLib2Interface::querySolver
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26997 Crash type: Stack-use-after-return READ 8 Crash state: solidity::smtutil::CHCSmtLib2Interface::querySolver solidity::smtutil::CHCSmtLib2Interface::query solidity::frontend::CHC::query...
Amazon Linux 2 : tigervnc (ALAS-2020-1552)
The version of tigervnc installed on the remote host is prior to 1.8.0-21. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2020-1552 advisory. TigerVNC version prior to 1.10.1 is vulnerable to stack use-after-return, which occurs due to incorrect usage of stack...
Scientific Linux Security Update : tigervnc on SL7.x x86_64 (20201001)
Security Fixes : - tigervnc: Stack use-after-return due to incorrect usage of stack memory in ZRLEDecoder CVE-2019-15691 - tigervnc: Heap buffer overflow triggered from CopyRectDecoder due to incorrect value checks CVE-2019-15692 - tigervnc: Heap buffer overflow in TightDecoder::FilterGradient...
CentOS 7 : tigervnc (RHSA-2020:3875)
The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:3875 advisory. - TigerVNC version prior to 1.10.1 is vulnerable to stack use-after-return, which occurs due to incorrect usage of stack memory in ZRLEDecoder. If...
Stack Use-after-return
tigervnc is vulnerable to stack use-after-return. It is triggered due to incorrect usage of stack memory in ZRLEDecoder. If decoding routine would throw an exception, ZRLEDecoder may try to access stack variable, which has been already freed during the process of stack unwinding...
tigervnc: Stack use-after-return due to incorrect usage of stack memory in ZRLEDecoder
TigerVNC version prior to 1.10.1 is vulnerable to stack use-after-return, which occurs due to incorrect usage of stack memory in ZRLEDecoder. If decoding routine would throw an exception, ZRLEDecoder may try to access stack variable, which has been already freed during the process of stack...
RHEL 7 : tigervnc (RHSA-2020:3875)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:3875 advisory. Virtual Network Computing VNC is a remote display system which allows users to view a computing desktop environment not only on the machine...
OSV-2020-1749 Stack-use-after-return in ucl_include_file_single
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25622 Crash type: Stack-use-after-return READ 6 Crash state: uclincludefilesingle uclincludefile uclincludecommon...
EulerOS 2.0 SP8 : tigervnc (EulerOS-SA-2020-1885)
According to the versions of the tigervnc packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - TigerVNC version prior to 1.10.1 is vulnerable to stack use-after-return, which occurs due to incorrect usage of stack memory in ZRLEDecoder. ...
OSV-2020-1010 Stack-use-after-return in ihevcd_process_thread
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16912 Crash type: Stack-use-after-return READ 8 Crash state: ihevcdprocessthread startthread...
OSV-2020-885 Stack-use-after-scope in coolkey_apdu_io
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23979 Crash type: Stack-use-after-scope READ 8 Crash state: coolkeyapduio coolkeyrsaop coolkeycomputecrypt...
opensc:fuzz_pkcs15_reader: Stack-use-after-scope in coolkey_apdu_io
Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=6578720056541184 Project: opensc Fuzzing Engine: libFuzzer Fuzz Target: fuzzpkcs15reader Job Type: libfuzzerasanopensc Platform Id: linux Crash Type: Stack-use-after-scope READ 8 Crash Address:...
OSV-2020-642 Stack-use-after-return in sdb_itoa
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12751 Crash type: Stack-use-after-return WRITE 1 Crash state: sdbitoa parseresourcedirectory parseresourcedirectory...
OSV-2020-631 Stack-use-after-return in ihevcd_process_thread
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17500 Crash type: Stack-use-after-return READ 8 Crash state: ihevcdprocessthread startthread...
OSV-2020-430 Stack-use-after-return in OSSL_PARAM_get_int32
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15114 Crash type: Stack-use-after-return READ 4 Crash state: OSSLPARAMgetint32 md5sha1setparams ssl3finalfinishmac...
OSV-2020-388 Stack-use-after-return in bool OT::Coverage::serialize<hb_map_iter_t<hb_map_iter_t<hb_filter_iter_t<OT::Co
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14786 Crash type: Stack-use-after-return READ 4 Crash state: bool OT::Coverage::serializehbmapiterthbmapiterthbfilteritertOT::Co bool OT::SingleSubstFormat1::serializehbmapiterthbmapiterthbfilterite bool...