SnakeYAML YAML Buffer Overflow DoS

The vulnerability of the YAML serialization and deserialization library SnakeYAML lies in buffer overflows in the stack. Exploiting this vulnerability can allow an attacker to cause a service failure...

serenity:FuzzShellPosix: Stack-buffer-overflow in ak_verification_failed

Project: https://github.com/SerenityOS/serenity.git Detailed Report: https://oss-fuzz.com/testcase?key=5838737525047296 Project: serenity Fuzzing Engine: libFuzzer Fuzz Target: FuzzShellPosix Job Type: libfuzzerasanserenity Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Address:...

Amazon Linux 2 : php (ALASPHP8.0-2023-009)

The version of php installed on the remote host is prior to 8.0.30-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2PHP8.0-2023-009 advisory. GHSA-76gg-c692-v2mw: Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP NOTE: Fixe...

Amazon Linux 2 : php (ALASPHP8.2-2023-002)

The version of php installed on the remote host is prior to 8.2.9-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2PHP8.2-2023-002 advisory. GHSA-76gg-c692-v2mw: Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP NOTE: Fixed...

Amazon Linux 2 : php (ALASPHP8.1-2023-004)

The version of php installed on the remote host is prior to 8.1.22-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2PHP8.1-2023-004 advisory. GHSA-76gg-c692-v2mw: Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP NOTE: Fixe...

D-Link DIR-868L Router Buffer Overflow

The vulnerability of the D-Link DIR-868L router’s microprogramming software arises from buffer overflow on the stack. Exploiting this vulnerability allows a remote attacker to trigger a buffer overflow...

CNCSoft-B Buffer Overflow Code Execution

The vulnerability of the CNCSoft-B numerical control software and the DOPSoft software is caused by buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Siemens JT2GO 安全漏洞

Siemens Teamcenter Visualization is a software that provides teamwork capabilities for designing 2D and 3D scenarios.Siemens JT2GO is a JT file viewer. A stack buffer overflow vulnerability exists in Siemens Teamcenter Visualization and JT2Go, which can be exploited by an attacker to execute code...

D-Link DAP-2622 Code Execution

The vulnerability of the DDP microprogramming software-based wireless access points from D-Link, such as the DAP-2622, is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker operating remotely to execute arbitrary code...

serenity:FuzzPDF: Stack-buffer-overflow in ak_verification_failed

Project: https://github.com/SerenityOS/serenity.git Detailed Report: https://oss-fuzz.com/testcase?key=6273785365659648 Project: serenity Fuzzing Engine: libFuzzer Fuzz Target: FuzzPDF Job Type: libfuzzerasanserenity Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Address:...

Amazon Linux 2023 : php8.2, php8.2-bcmath, php8.2-cli (ALAS2023-2023-324)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-324 advisory. In PHP versions 8.0. before 8.0.30, 8.1. before 8.1.22, and 8.2. before 8.2.8 various XML functions rely on libxml global state to track configuration variables, like whether external entities...

Oracle Linux 7 : qemu (ELSA-2018-4262)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-4262 advisory. - net: ignore packet size greater than INTMAX Jason Wang Orabug: 28762625 CVE-2018-17963 - pcnet: fix possible buffer overflow Jason Wang Orabug:...

LibTIFF rotateimage() DoS

The vulnerability of the rotateimage function in the LibTIFF library arises due to buffer overflow on the stack. Exploiting this vulnerability could allow an attacker to cause a service failure...

LibTIFF Fax3encode DoS

The vulnerability of the fax3encode function in the LibTIFF library arises from buffer overflows in the stack. Exploiting this vulnerability could allow a malicious actor to cause a service failure...

LibTIFF Buffer Overflow DoS

The vulnerability of the uvencode function in the LibTIFF library arises due to buffer overflow on the stack. Exploiting this vulnerability could allow an attacker to cause a service failure...

icu:locale_morph_fuzzer: Stack-buffer-overflow in icu_74::CheckedArrayByteSink::Append

Project: https://github.com/unicode-org/icu.git Detailed Report: https://oss-fuzz.com/testcase?key=6691907944972288 Project: icu Fuzzing Engine: libFuzzer Fuzz Target: localemorphfuzzer Job Type: libfuzzerasanicu Platform Id: linux Crash Type: Stack-buffer-overflow READ Crash Address:...

serenity:FuzzPDF: Stack-buffer-overflow in ak_verification_failed

Project: https://github.com/SerenityOS/serenity.git Detailed Report: https://oss-fuzz.com/testcase?key=5191499442421760 Project: serenity Fuzzing Engine: libFuzzer Fuzz Target: FuzzPDF Job Type: libfuzzerasanserenity Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Address:...

OSV-2023-797 Stack-buffer-overflow in QBuffer::readData

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62075 Crash type: Stack-buffer-overflow WRITE Crash state: QBuffer::readData QIODevicePrivate::read QDataStream::readRawData...

kimageformats:kimgio_xcf_fuzzer: Stack-buffer-overflow in QBuffer::readData

Project: git://anongit.kde.org/kimageformats Detailed Report: https://oss-fuzz.com/testcase?key=6420060724658176 Project: kimageformats Fuzzing Engine: afl Fuzz Target: kimgioxcffuzzer Job Type: aflasankimageformats Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Address:...

SUSE SLES15: apache2-mod_php8 / php8 / php8-bcmath / php8-bz2 / php8-calendar / etc (SUSE-SU-2023:3528-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:3528-1 advisory. - CVE-2023-3823: Fixed an issue with external entity loading in XML without enabling it. bsc1214106 - CVE-2023-3824:...