frr:zebra: Stack-buffer-overflow in stream_get2

Project: https://github.com/FRRouting/frr.git Detailed Report: https://oss-fuzz.com/testcase?key=5267954627903488 Project: frr Fuzzing Engine: libFuzzer Fuzz Target: zebra Job Type: libfuzzerasanfrr Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Address: 0x7ffc28598fe0 Crash...

libpsl:libpsl_load_fuzzer: Stack-buffer-overflow in psl_idna_toASCII

Project: https://github.com/rockdaboot/libpsl.git Detailed Report: https://oss-fuzz.com/testcase?key=6483346205573120 Project: libpsl Fuzzing Engine: libFuzzer Fuzz Target: libpslloadfuzzer Job Type: libfuzzerasanlibpsl Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 1 Crash Address:...

Huawei EulerOS: Security Advisory for glibc (EulerOS-SA-2021-2496)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

LibreSSL Stack Buffer Overflow Vulnerability

LibreSSL is an open source implementation of the Secure Sockets Layer SSL and Transport Layer Security TLS protocols. x509constraintsparsemailbox in lib/libcrypto/x509/x509constraints.c in LibreSSL 3.4.0 and earlier versions has a stack buffer overflow vulnerability. No detailed vulnerability...

OSV-2021-1368 Stack-buffer-overflow in dispatch_print_error

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39196 Crash type: Stack-buffer-overflow READ Crash state: dispatchprinterror internalexrparseheader exrstartread...

PT-2021-27812

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a stack-buffer-overflow read crash. The crash occurs in the following functions: dispatch print error, internal exr parse header, a...

libpsl:libpsl_load_fuzzer: Stack-buffer-overflow in domain_to_punycode

Project: https://github.com/rockdaboot/libpsl.git Detailed Report: https://oss-fuzz.com/testcase?key=6483136742031360 Project: libpsl Fuzzing Engine: afl Fuzz Target: libpslloadfuzzer Job Type: aflasanlibpsl Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 1 Crash Address: 0x7fddc41669a...

openexr:openexr_exrcheck_fuzzer: Stack-buffer-overflow in dispatch_print_error

Project: https://github.com/AcademySoftwareFoundation/openexr.git Detailed Report: https://oss-fuzz.com/testcase?key=4953232749756416 Project: openexr Fuzzing Engine: honggfuzz Fuzz Target: openexrexrcheckfuzzer Job Type: honggfuzzasanopenexr Platform Id: linux Crash Type: Stack-buffer-overflow...

gdal:ogr_fuzzer: Stack-buffer-overflow in ncindexlookup

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=6381498756890624 Project: gdal Fuzzing Engine: libFuzzer Fuzz Target: ogrfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Stack-buffer-overflow READ Crash Address: 0x7f2033ed7d81 Crash...

Microsoft Windows cmd.exe - Stack Buffer Overflow Vulnerability

Title: Microsoft Windows cmd.exe - Stack Buffer Overflow Author: John Page aka hyp3rlinx Source: http://hyp3rlinx.altervista.org/advisories/MICROSOFT-WINDOWS-CMD.EXE-STACK-BUFFER-OVERFLOW.txt ISR: ApparitionSec Vendor www.microsoft.com Product cmd.exe is the default command-line interpreter for t...

Microsoft Windows cmd.exe - Stack Buffer Overflow

Title: Microsoft Windows cmd.exe - Stack Buffer Overflow Author: John Page aka hyp3rlinx Date: 15/09/2021 Source: http://hyp3rlinx.altervista.org/advisories/MICROSOFT-WINDOWS-CMD.EXE-STACK-BUFFER-OVERFLOW.txt ISR: ApparitionSec Vendor www.microsoft.com Product cmd.exe is the default command-line...

Denial Of Service (DoS)

gpac:bullseye is vulnerable to denial of service. A stack-buffer-overflow exists in the function DumpRawUIConfig located in odfdump.c, allowing an attacker to cause code Execution...

GPAC Stack Buffer Overflow Vulnerability (CNVD-2021-82977)

GPAC is a multimedia framework for rich media and is distributed under the LGPL license. a stack buffer overflow vulnerability exists in the DumpRawUIConfig function in odfdump.c in GPAC 20200801 and earlier versions. An attacker could exploit this vulnerability to execute code...

FAAD2 Stack Buffer Overflow Vulnerability (CNVD-2021-89950)

Freeware Advanced Audio Decoder 2 FAAD2 is an open source MPEG-4 and MPEG-2 AAC decoder licensed under the GPLv2 license. a stack buffer overflow vulnerability exists in the ftypin function in mp4read.c in FAAD2 2.10.0 and earlier versions. An attacker could exploit this vulnerability to execute...

SWFTools Stack Buffer Overflow Vulnerability (CNVD-2021-73197)

SWFTools is a collection of utilities that work with Adobe Flash files SWF files. SWFTools has a stack buffer overflow vulnerability that can be exploited by attackers to cause code execution...

openSUSE 15 Security Update : chromium (openSUSE-SU-2021:1303-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:1303-1 advisory. - Chromium: CVE-2021-30606 Use after free in Blink CVE-2021-30606 - Chromium: CVE-2021-30607 Use after free in Permissions CVE-2021-30607 -...

Security Bulletin: Vulnerability in kernel affects Power Hardware Management Console (CVE-2018-14633)

Summary Power Hardware Management Console is affected by security vulnerabilities in the Linux Kernel. Power Hardware Management Console has addressed the applicable CVE. Vulnerability Details CVEID: CVE-2018-14633 DESCRIPTION: A security flaw was found in the chapservercomputemd5 function in the...

PDFTools stack buffer overflow vulnerability

PDFTools is a tool for converting PDF files to ePUB format. A stack buffer overflow vulnerability exists in the Analyze::AnalyzePages function in analyze.cpp in PDFTools 20200714 and earlier versions. An attacker could exploit this vulnerability to execute code...

openSUSE 15 Security Update : chromium (openSUSE-SU-2021:1300-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:1300-1 advisory. - Chromium: CVE-2021-30606 Use after free in Blink CVE-2021-30606 - Chromium: CVE-2021-30607 Use after free in Permissions CVE-2021-30607 -...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2021:1303-1 Rating: important References: 1190096 1190476 Cross-References: CVE-2021-30606 CVE-2021-30607 CVE-2021-30608 CVE-2021-30609 CVE-2021-30610 CVE-2021-30611 CVE-2021-30612 CVE-2021-30613 CVE-2021-30614...