PT-2022-6223 · Oracle · Common Desktop Environment +1

Name of the Vulnerable Software and Affected Versions: Oracle Solaris version 10 1/13 Description: The issue is a privilege escalation vulnerability that can be exploited by a low-privileged user to gain root access. This is achieved by crafting a malicious printer and double-clicking on the...

OSV-2022-1104 Stack-buffer-overflow in LibRaw::xtrans_interpolate

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52775 Crash type: Stack-buffer-overflow WRITE 4 Crash state: LibRaw::xtransinterpolate LibRaw::dcrawprocess RAWHandler::read...

Huawei EulerOS: Security Advisory for libtiff (EulerOS-SA-2022-2621)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP3 : libtiff (EulerOS-SA-2022-2621)

According to the versions of the libtiff packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A stack buffer overflow flaw was found in Libtiffs' tiffcp.c in main function. This flaw allows an attacker to pass a crafted TIFF file to the...

CVE-2022-33183

A vulnerability in Brocade Fabric OS CLI before Brocade Fabric OS v9.1.0, 9.0.1e, 8.2.3c, 8.2.0cbn5, 7.4.2.j could allow a remote authenticated attacker to perform stack buffer overflow using in “firmwaredownload” and “diagshow” commands...

Stack overflow

A vulnerability in Brocade Fabric OS CLI before Brocade Fabric OS v9.1.0, 9.0.1e, 8.2.3c, 8.2.0cbn5, 7.4.2.j could allow a remote authenticated attacker to perform stack buffer overflow using in “firmwaredownload” and “diagshow” commands...

CVE-2022-32454

A stack-based buffer overflow vulnerability exists in the XCMD setIPCam functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9X and 6.9Z. A specially-crafted XCMD can lead to remote code execution. An attacker can send a malicious XML payload to trigger this vulnerability...

CVE-2022-33183

A vulnerability in Brocade Fabric OS CLI before Brocade Fabric OS v9.1.0, 9.0.1e, 8.2.3c, 8.2.0cbn5, 7.4.2.j could allow a remote authenticated attacker to perform stack buffer overflow using in “firmwaredownload” and “diagshow” commands...

CVE-2022-33183

CVE-2022-33183 describes a stack buffer overflow in the Brocade Fabric OS CLI. The vulnerability affects Brocade Fabric OS Command Line Interface prior to versions v9.1.0, v9.0.1e, v8.2.3c, v8.2.0cbn5, and v7.4.2.j, enabling a remote authenticated attacker to trigger a stack overflow via the firm...

CVE-2022-33183

A vulnerability in Brocade Fabric OS CLI before Brocade Fabric OS v9.1.0, 9.0.1e, 8.2.3c, 8.2.0cbn5, 7.4.2.j could allow a remote authenticated attacker to perform stack buffer overflow using in “firmwaredownload” and “diagshow” commands...

OSV-2022-1084 Stack-buffer-overflow in authentic_parse_size

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52662 Crash type: Stack-buffer-overflow READ 1 Crash state: authenticparsesize authenticgettaggeddata authenticparsecredentialdata...

Advantech R-SeeNet Stack Buffer Overflow Vulnerability

Advantech R-SeeNet is an industrial monitoring software from Advantech China. The software is based on the snmp protocol for monitoring platforms and is available for Linux and Windows platforms.Advantech R-SeeNet 2.4.17 and previous versions are vulnerable to a stack buffer overflow vulnerabilit...

The vulnerability of the monitoring software for the status and functions of Advantech R-SeeNet routers lies in buffer overflow in the stack, allowing a hacker to execute arbitrary code.

The vulnerability of the monitoring software for the functions and states of Advantech R-SeeNet routers is related to buffer overflow in the stack. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

OSV-2022-1079 Stack-buffer-overflow in add_ff_action

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52596 Crash type: Stack-buffer-overflow WRITE 9 Crash state: addffaction dissectieeeNUMBERpv0 dissectieeeNUMBERcommon...

CVE-2022-23462

IOWOW is a C utility library and persistent key/value storage engine. Versions 1.4.15 and prior contain a stack buffer overflow vulnerability that allows for Denial of Service DOS when it parses scientific notation numbers present in JSON. A patch for this issue is available at commit...

CVE-2022-23462 Stack Buffer Overflow in iowow

IOWOW is a C utility library and persistent key/value storage engine. Versions 1.4.15 and prior contain a stack buffer overflow vulnerability that allows for Denial of Service DOS when it parses scientific notation numbers present in JSON. A patch for this issue is available at commit...

CVE-2022-23462 Stack Buffer Overflow in iowow

IOWOW is a C utility library and persistent key/value storage engine. Versions 1.4.15 and prior contain a stack buffer overflow vulnerability that allows for Denial of Service DOS when it parses scientific notation numbers present in JSON. A patch for this issue is available at commit...

CVE-2022-23462

Vulnerability focus: IOWOW C utility library/persistent key/value store (versions ≤ 1.4.15) has a stack buffer overflow when parsing JSON numbers in scientific notation, enabling Denial of Service. The issue is addressed by the patch at commit a79d31e4cff1d5a08f665574b29fd885897a28fd in the maste...

OSV-2022-1065 Stack-buffer-overflow in Curl_output_aws_sigv4

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52517 Crash type: Stack-buffer-overflow WRITE Crash state: Curloutputawssigv4 outputauthheaders Curlhttpoutputauth...

Tenda AC10 Stack Buffer Overflow Vulnerability (CNVD-2023-50811)

The Tenda AC10 is a wireless router. The Tenda AC10 suffers from a stack buffer overflow vulnerability that is caused by incorrect boundary checking in the formSetClientState function. An attacker can exploit this vulnerability to cause a buffer overflow and execute arbitrary code on the system, ...