CVE-2020-23877: Out-of-bounds Write

pdf2xml v2.0 was discovered to contain a stack buffer overflow in the component getObjectStream...

PT-2021-10958

Name of the Vulnerable Software and Affected Versions: pdf2xml version 2.0 Description: A stack buffer overflow was discovered in the getObjectStream component of pdf2xml. Recommendations: For pdf2xml version 2.0, at the moment, there is no information about a newer version that contains a fix fo...

Advantech WebAccess Buffer Overflow

The vulnerability of Advantech WebAccess remote monitoring software arises due to buffer overflow in the stack. Exploiting this vulnerability allows a malicious actor operating remotely to execute arbitrary code...

openSUSE 15 Security Update : binutils (openSUSE-SU-2021:3643-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2021:3643-1 advisory. - A flaw was found in binutils readelf 2.35 program. An attacker who is able to convince a victim using readelf to read a crafted file could trigger...

SUSE SLED15: binutils / binutils-devel / binutils-devel-32bit / binutils-gold / etc (SUSE-SU-2021:3643-1)

The remote SUSE Linux SLED15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2021:3643-1 advisory. - For compatibility on old code stream that expect 'brcl 0,label' to not be disassembled as 'jgnop label' on s390x. bsc1192267 This...

PT-2021-10959

Name of the Vulnerable Software and Affected Versions: pdf2json version 0.71 Description: A stack buffer overflow was discovered in the XRef::fetch component of pdf2json. Recommendations: For pdf2json version 0.71, update to a newer version that contains a fix for this issue...

opus:opus_projection_encoder_fuzzer_fixed: Dynamic-stack-buffer-overflow in xcorr_kernel_sse4_1

Project: https://gitlab.xiph.org/xiph/opus.git Detailed Report: https://oss-fuzz.com/testcase?key=4547738700742656 Project: opus Fuzzing Engine: libFuzzer Fuzz Target: opusprojectionencoderfuzzerfixed Job Type: libfuzzerasanopus Platform Id: linux Crash Type: Dynamic-stack-buffer-overflow READ 8...

binutils:fuzz_disassemble: Dynamic-stack-buffer-overflow in extract_fields

Detailed Report: https://oss-fuzz.com/testcase?key=6235185935417344 Project: binutils Fuzzing Engine: afl Fuzz Target: fuzzdisassemble Job Type: aflasanbinutils Platform Id: linux Crash Type: Dynamic-stack-buffer-overflow READ 4 Crash Address: 0x7fff4cef82e0 Crash State: extractfields...

Siemens Nucleus ReadyStart buffer error vulnerability

Nucleus NET modules integrate a range of standards-compliant networking and communications protocols, drivers and utilities to provide full-featured networking support in any embedded device. A security vulnerability exists in several Siemens products, which stems from a stack buffer overflow...

PT-2021-5126

Name of the Vulnerable Software and Affected Versions NETGEAR routers versions EX3700, EX3800, EX6120, EX6130, R6400, R6400v2, R6700v3, R6900P, R7000, R7000P, R7100LG, R7850, R7900P, R7960P, R8000, R8000P, R8300, R8500, RAX15, RAX20, RAX200, RAX35v2, RAX38v2, RAX40v2, RAX42, RAX43, RAX45, RAX48,...

binutils:fuzz_addr2line: Dynamic-stack-buffer-overflow in error_handler_internal

Detailed Report: https://oss-fuzz.com/testcase?key=5075151692103680 Project: binutils Fuzzing Engine: afl Fuzz Target: fuzzaddr2line Job Type: aflasanbinutils Platform Id: linux Crash Type: Dynamic-stack-buffer-overflow READ 4 Crash Address: 0x7ffee37c1a00 Crash State: errorhandlerinternal...

binutils:fuzz_disas_ext-bfd_arch_i386: Dynamic-stack-buffer-overflow in fetch_data

Detailed Report: https://oss-fuzz.com/testcase?key=6362794363060224 Project: binutils Fuzzing Engine: afl Fuzz Target: fuzzdisasext-bfdarchi386 Job Type: aflasanbinutils Platform Id: linux Crash Type: Dynamic-stack-buffer-overflow WRITE Crash Address: 0x7ffc2595b480 Crash State: fetchdata printin...

zlog 1.2.15 Buffer Overflow

Exploit Title: zlog 1.2.15 - Buffer Overflow Date: 10/23/2021 Exploit Author: LIWEI Vendor Homepage: https://github.com/HardySimpson/zlog Software Link: https://github.com/HardySimpson/zlog Version: v1.2.15 Tested on: ubuntu 18.04.2 1.- compile the zlogv1.2.15 code to a library. 2.- Use the...

zlog 1.2.15 - Buffer Overflow Exploit

Exploit Title: zlog 1.2.15 - Buffer Overflow Exploit Author: LIWEI Vendor Homepage: https://github.com/HardySimpson/zlog Software Link: https://github.com/HardySimpson/zlog Version: v1.2.15 Tested on: ubuntu 18.04.2 1.- compile the zlogv1.2.15 code to a library. 2.- Use the "zloginit" API to pars...

Security update for transfig (important)

openSUSE Security Update: Security update for transfig Announcement ID: openSUSE-SU-2021:1458-1 Rating: important References: 1189325 1189343 1189345 1189346 1190607 1190611 1190612 1190615 1190616 1190617 1190618 1192019 Cross-References: CVE-2020-21529 CVE-2020-21530 CVE-2020-21531 CVE-2020-215...

binutils:fuzz_disassemble: Dynamic-stack-buffer-overflow in extract_fields

Detailed Report: https://oss-fuzz.com/testcase?key=6365786025885696 Project: binutils Fuzzing Engine: afl Fuzz Target: fuzzdisassemble Job Type: aflasanbinutils Platform Id: linux Crash Type: Dynamic-stack-buffer-overflow READ 4 Crash Address: 0x7ffcec49d060 Crash State: extractfields...

net-snmp:snmp_mib_fuzzer: Stack-buffer-overflow in parse_objecttype

Project: git://git.code.sf.net/p/net-snmp/code https://github.com/net-snmp/net-snmp.git Detailed Report: https://oss-fuzz.com/testcase?key=4658956098732032 Project: net-snmp Fuzzing Engine: afl Fuzz Target: snmpmibfuzzer Job Type: aflasannet-snmp Platform Id: linux Crash Type: Stack-buffer-overfl...

Check Point Response to CVE-2021-36299, CVE-2021-36300, CVE-2021-36301, CVE-2021-20235 - Dell iDRAC9 Vulnerabilities

Cause CVE-2021-36299 - An SQL injection vulnerability. A remote authenticated malicious user with low privileges may potentially exploit this vulnerability to cause information disclosure or denial of service by supplying specially crafted input data to the affected application. CVE-2021-36300 -...

SUSE SLES11 Security Update : transfig (SUSE-SU-2021:14836-1)

The remote SUSE Linux SLES11 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:14836-1 advisory. Update to fig2dev version 3.2.8 Patchlevel 8b Aug 2021 - bsc1190618, CVE-2020-21529: stack buffer overflow in the bezierspline function in...

openSUSE 15 Security Update : transfig (openSUSE-SU-2021:1439-1)

The remote SUSE Linux SUSE15 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:1439-1 advisory. - fig2dev 3.2.7b contains a stack buffer overflow in the bezierspline function in genepic.c. CVE-2020-21529 - fig2dev 3.2.7b contains a...