Debian DLA-3054-1 : sleuthkit - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3054 advisory. - In The Sleuth Kit TSK 4.4.2, opening a crafted ISO 9660 image triggers an out-of-bounds read in iso9660procdir in tsk/fs/iso9660dent.c in libtskfs.a, as...

Debian: Security Advisory (DLA-3054-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GPAC MP4Box Denial of Service Vulnerability

GPAC is a multimedia framework. A denial of service vulnerability exists in GPAC MP4Box version 1.1.0, which originates from a stack buffer overflow at src/utils/error.c:1769 that can be exploited by an attacker to cause a denial of service...

duckdb:parse_fuzz_test: Stack-buffer-overflow in duckdb::utf8proc_next_grapheme

Project: https://github.com/duckdb/duckdb.git Detailed Report: https://oss-fuzz.com/testcase?key=5082369452802048 Project: duckdb Fuzzing Engine: honggfuzz Fuzz Target: parsefuzztest Job Type: honggfuzzasanduckdb Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address:...

EulerOS 2.0 SP5 : libtiff (EulerOS-SA-2022-1900)

According to the versions of the libtiff packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A heap buffer overflow in ExtractImageSection function in tiffcrop.c in libtiff library Version 4.3.0 allows attacker to trigger unsafe or out ...

PT-2022-37044

Name of the Vulnerable Software and Affected Versions spvtools affected versions not specified Description The issue is related to a stack-buffer-overflow read crash. Technical details about the crash include the spvtools::opt::CompositeInsertToCompositeConstruct and std:: 1:: function:: funcbool...

Huawei EulerOS: Security Advisory for libtiff (EulerOS-SA-2022-1900)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DEBIAN-CVE-2021-41458

In GPAC MP4Box v1.1.0, there is a stack buffer overflow at src/utils/error.c:1769 which leads to a denial of service vulnerability...

CVE-2021-41458

In GPAC MP4Box v1.1.0, there is a stack buffer overflow at src/utils/error.c:1769 which leads to a denial of service vulnerability...

CVE-2021-41458

In GPAC MP4Box v1.1.0, there is a stack buffer overflow at src/utils/error.c:1769 which leads to a denial of service vulnerability...

CVE-2021-41458

In GPAC MP4Box v1.1.0, there is a stack buffer overflow at src/utils/error.c:1769 which leads to a denial of service vulnerability...

CVE-2021-41458

In GPAC MP4Box v1.1.0, there is a stack buffer overflow at src/utils/error.c:1769 which leads to a denial of service vulnerability...

CVE-2021-41458

In GPAC MP4Box v1.1.0, there is a stack buffer overflow at src/utils/error.c:1769 which leads to a denial of service vulnerability...

CVE-2021-41458

CVE-2021-41458 affects GPAC MP4Box v1.1.0. Root cause is a stack buffer overflow at src/utils/error.c:1769, leading to a denial of service. Impact is stated as availability loss (Partial/High in some metrics; local or network vectors per sources). Remediation: upgrade GPAC to a version addressed ...

CVE-2021-41458: Out-of-bounds Write

In GPAC MP4Box v1.1.0, there is a stack buffer overflow at src/utils/error.c:1769 which leads to a denial of service vulnerability...

spirv-tools:spvtools_opt_performance_fuzzer: Stack-buffer-overflow in spvtools::opt::CompositeInsertToCompositeConstruct

Project: https://github.com/KhronosGroup/SPIRV-Tools.git Detailed Report: https://oss-fuzz.com/testcase?key=5652264460615680 Project: spirv-tools Fuzzing Engine: libFuzzer Fuzz Target: spvtoolsoptperformancefuzzer Job Type: libfuzzerasani386spirv-tools Platform Id: linux Crash Type:...

OSV-2022-476 Stack-buffer-overflow in simple_str_to_doublestr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47986 Crash type: Stack-buffer-overflow WRITE 1 Crash state: simplestrtodoublestr icalvaluenewfromstring icalparseraddline...

OSV-2022-473 Stack-buffer-overflow in input_osc_52

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47964 Crash type: Stack-buffer-overflow READ 9 Crash state: inputosc52 inputexitosc inputparse...

PT-2022-37034

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a stack-buffer-overflow crash. Technical details about the crash include the simple str to double function, icalvalue new from stri...

PT-2022-37031

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a stack-buffer-overflow read error. The crash state indicates the involvement of functions such as input osc 52, input exit osc, an...