CVE-2019-14200

CVE-2019-14200 affects Das U-Boot (up to version 2019.07) with a stack-based buffer overflow in the nfs_handler reply helper function rpc_lookup_reply. The issue is disclosed in 2019-07 and is listed alongside related CVEs (e.g., 2019-14192..14204) in multiple advisories; CVSS v3 shows a base sco...

CVE-2019-14200

An issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfshandler reply helper function: rpclookupreply...

CVE-2019-14202

An issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfshandler reply helper function: nfsreadlinkreply...

CVE-2019-14202

An issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfshandler reply helper function: nfsreadlinkreply...

CVE-2019-14203

An issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfshandler reply helper function: nfsmountreply...

CVE-2019-14204

An issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfshandler reply helper function: nfsumountallreply...

CVE-2019-14363

A stack-based buffer overflow in the upnpd binary running on NETGEAR WNDR3400v3 routers with firmware version 1.0.1.181.0.63 allows an attacker to remotely execute arbitrary code via a crafted UPnP SSDP packet...

CVE-2019-14363

CVE-2019-14363 affects NETGEAR WNDR3400v3 routers, where the upnpd binary is vulnerable to a stack-based buffer overflow in firmware 1.0.1.18_1.0.63. A crafted UPnP SSDP packet can cause remote code execution. The vulnerability is documented with high/critical severity (CVSS v3.0: 9.8, NETWORK, L...

Stack overflow

SSDP Responder 1.x through 1.5 mishandles incoming network messages, leading to a stack-based buffer overflow by 1 byte. This results in a crash of the server, but only when strict stack checking is enabled. This is caused by an off-by-one error in ssdprecv in ssdpd.c...

CVE-2019-14323

The CVE-2019-14323 entry describes a stack-based buffer overflow in SSDP Responder 1.x–1.5 due to an off-by-one error in ssdp_recv(ssdpd.c). This can crash the server when strict stack checking is enabled. The issue is confirmed across multiple outlets (Red Hat, SUSE, CNVD, CNVD-like entries) and...

CVE-2019-14323

SSDP Responder 1.x through 1.5 mishandles incoming network messages, leading to a stack-based buffer overflow by 1 byte. This results in a crash of the server, but only when strict stack checking is enabled. This is caused by an off-by-one error in ssdprecv in ssdpd.c...

CVE-2019-14275

CVE-2019-14275 affects Xfig’s fig2dev, specifically a stack-based buffer overflow in the calc_arrow function of bound.c (v3.2.7a). This leads to potential denial-of-service conditions as noted in multiple advisories. The issue is addressed in newer fig2dev releases (fixed in 3.2.8; OpenVAS/Ubuntu...

CVE-2019-13989

dpic 2019.06.20 has a Stack-based Buffer Overflow in the wfloat function in main.c...

CVE-2019-13989

dpic 2019.06.20 has a Stack-based Buffer Overflow in the wfloat function in main.c...

CVE-2019-13989

CVE-2019-13989 affects dpic 2019.06.20, with a Stack-based Buffer Overflow in the wfloat() function of main.c. The vulnerability can impact C/I/A (per CVSS) and has public advisories indicating fixes in newer dpic packages (e.g., Mageia MGASA-2020-0460) and vendor/OS advisories; patching/upgradin...

CVE-2019-13951

The setipv4 function in zscanrfc1035.rl in gdnsd 3.x before 3.2.1 has a stack-based buffer overflow via a long and malformed IPv4 address in zone data...

CVE-2019-13952

The setipv6 function in zscanrfc1035.rl in gdnsd before 2.4.3 and 3.x before 3.2.1 has a stack-based buffer overflow via a long and malformed IPv6 address in zone data...

CVE-2019-13952

The setipv6 function in zscanrfc1035.rl in gdnsd before 2.4.3 and 3.x before 3.2.1 has a stack-based buffer overflow via a long and malformed IPv6 address in zone data...

CVE-2019-13952

Summary of CVE-2019-13952 (gdnsd) : The vulnerability is a stack-based buffer overflow in the set_ipv6() function of zscan_rfc1035.rl within gdnsd prior to 2.4.3 and in 3.x prior to 3.2.1, triggered by a long, malformed IPv6 address in zone data. Affected products: gdnsd DNS server (C code). Root...

CVE-2019-13952

The setipv6 function in zscanrfc1035.rl in gdnsd before 2.4.3 and 3.x before 3.2.1 has a stack-based buffer overflow via a long and malformed IPv6 address in zone data...