SUSE SLED15 / SLES15 Security Update : zziplib (SUSE-SU-2024:2925-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:2925-1 advisory. - CVE-2024-39134: Fixed a stack buffer overflow via the zzipfetchdisktrailer bsc1227178 Tenable has extracted the...

SUSE SLED12 / SLES12 Security Update : zziplib (SUSE-SU-2024:2926-1)

The remote SUSE Linux SLED12 / SLEDSAP12 / SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:2926-1 advisory. - CVE-2024-39134: Fixed a stack buffer overflow via the zzipfetchdisktrailer bsc1227178 Tenable has extracted the...

gpac:fuzz_probe_analyze: Stack-buffer-overflow in gf_hevc_parse_nalu_bs

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=6203059915522048 Project: gpac Fuzzing Engine: libFuzzer Fuzz Target: fuzzprobeanalyze Job Type: libfuzzerasangpac Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 4 Crash Address: 0x7eb7a122186...

SUSE-SU-2024:2926-1 Security update for zziplib

This update for zziplib fixes the following issues: - CVE-2024-39134: Fixed a stack buffer overflow via the zzipfetchdisktrailer bsc1227178...

SUSE-SU-2024:2925-1 Security update for zziplib

This update for zziplib fixes the following issues: - CVE-2024-39134: Fixed a stack buffer overflow via the zzipfetchdisktrailer bsc1227178...

inchi:inchi_input_fuzzer: Stack-buffer-overflow in set_stereo_parity

Project: https://github.com/IUPAC-InChI/InChI.git Detailed Report: https://oss-fuzz.com/testcase?key=4638498798239744 Project: inchi Fuzzing Engine: afl Fuzz Target: inchiinputfuzzer Job Type: aflasaninchi Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 2 Crash Address: 0x7d7fcdb01e78...

Espeak RemoveEnding Function DoS

The vulnerability of the RemoveEnding function in the Espeak speech synthesizer is related to stack buffer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2023-50809

A stack buffer overflow vulnerability exists in the mt_7615.ko wireless driver of certain Sonos smart speakers, including Amp, Arc, Arc SL, Beam, Beam Gen 2, Beam SL, and Five . The flaw stems from the driver's failure to properly validate an information element during a WPA2 four-way handshake n...

json-c: Buffer Overflow

Background json-c is a JSON implementation in C. Description Please review the CVE identifier referenced below for details. Impact A stack-buffer-overflow exists in the auxiliary sample program jsonparse which is located in the function parseit. Workaround There is no known workaround at this tim...

DEBIAN-CVE-2024-7538

oFono CUSD AT Command Stack-based Buffer Overflow Code Execution Vulnerability. This vulnerability allows local attackers to execute arbitrary code on affected installations of oFono. An attacker must first obtain the ability to execute code on the target modem in order to exploit this...

gdal:gdal_vector_translate_fuzzer: Stack-buffer-overflow in OGRMiraMonLayer::TranslateFieldsValuesToMM

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=6479142315425792 Project: gdal Fuzzing Engine: libFuzzer Fuzz Target: gdalvectortranslatefuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Address:...

OSV-2024-695 Stack-buffer-overflow in gf_vvc_parse_nalu_bs

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=70549 Crash type: Stack-buffer-overflow WRITE 4 Crash state: gfvvcparsenalubs gfinspectdumpnaluinternal inspectprocess...

SUSE SLED15: espeak-ng / espeak-ng-compat / espeak-ng-compat-devel / etc (SUSE-SU-2024:2632-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:2632-1 advisory. - CVE-2023-49990: Fixed buffer overflow in SetUpPhonemeTable function at synthdata.c bsc1218010 ...

edk2:TestPeiUsb: Stack-buffer-overflow in PeiUsbGetAllConfiguration

Project: https://github.com/tianocore/edk2.git Detailed Report: https://oss-fuzz.com/testcase?key=6213046417555456 Project: edk2 Fuzzing Engine: libFuzzer Fuzz Target: TestPeiUsb Job Type: libfuzzerasanedk2 Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 8 Crash Address: 0x78ace72009d8...

SUSE-SU-2024:2632-1 Security update for espeak-ng

This update for espeak-ng fixes the following issues: - CVE-2023-49990: Fixed buffer overflow in SetUpPhonemeTable function at synthdata.c bsc1218010 - CVE-2023-49991: Fixed stack-buffer-underflow exists in the function CountVowelPosition in synthdata.c bsc1218006 - CVE-2023-49992: Fixed...

tarantool:luaL_loadbuffer_fuzzer: Stack-buffer-overflow in narrow_conv_backprop

Project: https://github.com/tarantool/tarantool.git Detailed Report: https://oss-fuzz.com/testcase?key=6250635821907968 Project: tarantool Fuzzing Engine: libFuzzer Fuzz Target: luaLloadbufferfuzzer Job Type: libfuzzerasantarantool Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 4 Cras...

flac:fuzzer_tool_flac: Stack-buffer-overflow in FLAC__stream_encoder_init_ogg_file

Project: https://github.com/xiph/flac.git Detailed Report: https://oss-fuzz.com/testcase?key=6171877295325184 Project: flac Fuzzing Engine: libFuzzer Fuzz Target: fuzzertoolflac Job Type: libfuzzerasani386flac Platform Id: linux Crash Type: Stack-buffer-overflow READ 13 Crash Address: 0xf661281c...

ffmpeg:ffmpeg_AV_CODEC_ID_HEVC_fuzzer: Stack-buffer-overflow in ff_hevc_luma_mv_merge_mode

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6529417518579712 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDHEVCfuzzer Job Type: libfuzzerasani386ffmpeg Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 1 Crash...

CVE-2024-6874

libcurl's URL API function curlurlget offers punycode conversions, to and from IDN. Asking to convert a name that is exactly 256 bytes, libcurl ends up reading outside of a stack based buffer when built to use the macidn IDN backend. The conversion function then fills up the provided buffer exact...

CVE-2024-6874

libcurl's URL API function curlurlget offers punycode conversions, to and from IDN. Asking to convert a name that is exactly 256 bytes, libcurl ends up reading outside of a stack based buffer when built to use the macidn IDN backend. The conversion function then fills up the provided buffer exact...