Debian dla-3463 : opensc - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3463 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3463-1 [email protected]...

OSV-2023-497 Stack-buffer-overflow in parse_regex

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59907 Crash type: Stack-buffer-overflow READ 1 Crash state: parseregex parseregex parseregex...

PT-2023-35874 · Git +1 · Clamav

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a stack-buffer-overflow read error. The crash state indicates repeated calls to the parse regex function, suggesting a potential...

clamav:clamav_dbload_WDB_fuzzer: Stack-buffer-overflow in parse_regex

Detailed Report: https://oss-fuzz.com/testcase?key=6157029266554880 Project: clamav Fuzzing Engine: libFuzzer Fuzz Target: clamavdbloadWDBfuzzer Job Type: libfuzzerasanclamav Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address: 0x7fff3890d260 Crash State: parseregex parsereg...

OSV-2022-1276 Stack-buffer-overflow in ntlm_phase_3

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59818 Crash type: Stack-buffer-overflow WRITE 1 Crash state: ntlmphase3 establishhttpproxypassthru fuzzproxy.c...

PT-2023-35519

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A stack-buffer-overflow crash was reported, specifically a WRITE 1 crash type, occurring in the ntlm phase 3 and establish http proxy passthru functions...

ffmpeg:ffmpeg_dem_JPEGXL_ANIM_fuzzer: Stack-buffer-overflow in ff_jpegxl_verify_codestream_header

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5029813220671488 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegdemJPEGXLANIMfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address: 0x7ffdc73a47...

openvpn:fuzz_proxy: Stack-buffer-overflow in ntlm_phase_3

Project: https://github.com/OpenVPN/openvpn.git Detailed Report: https://oss-fuzz.com/testcase?key=5849850292076544 Project: openvpn Fuzzing Engine: libFuzzer Fuzz Target: fuzzproxy Job Type: libfuzzerasanopenvpn Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 1 Crash Address:...

AutoDesk: CVE-2023-27910 stack buffer overflow vulnerability in Autodesk® FBX® SDK 2020 or prior

...

CVE-2022-28550

CVE-2022-28550 affects JHead 3.06. The vulnerability is a stack buffer overflow caused by copying into a fixed-size stack buffer when processing shellescape(), specifically when handling multiple &i or &o values; boundary checks on the stack buffer are missing. Reports across OSV, NVD, and Nessus...

CVE-2022-28550: Out-of-bounds Write

Matthias-Wandel/jhead jhead 3.06 is vulnerable to Buffer Overflow via shellescape, jhead.c, jhead. jhead copies strings to a stack buffer when it detects a &i or &o. However, jhead does not check the boundary of the stack buffer. As a result, there will be a stack buffer overflow problem when...

CVE-2022-28550

Matthias-Wandel/jhead jhead 3.06 is vulnerable to Buffer Overflow via shellescape, jhead.c, jhead. jhead copies strings to a stack buffer when it detects a &i or &o. However, jhead does not check the boundary of the stack buffer. As a result, there will be a stack buffer overflow problem when...

OSV-2023-467 Stack-buffer-overflow in SetPitchGradient

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59636 Crash type: Stack-buffer-overflow WRITE 1 Crash state: SetPitchGradient calcpitches CalcPitches...

PT-2023-35863 · Git +1 · Espeak-Ng

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a stack-buffer-overflow crash. Technical details include a crash type of Stack-buffer-overflow WRITE 1, and the crash state...

ffmpeg:ffmpeg_dem_JPEGXL_ANIM_fuzzer: Stack-buffer-overflow in ff_jpegxl_verify_codestream_header

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6584117345779712 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegdemJPEGXLANIMfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Stack-buffer-overflow READ 4 Crash Address: 0x7a3142e929...

espeak-ng:ssml-fuzzer: Stack-buffer-overflow in SetPitchGradient

Detailed Report: https://oss-fuzz.com/testcase?key=5542902395437056 Project: espeak-ng Fuzzing Engine: libFuzzer Fuzz Target: ssml-fuzzer Job Type: libfuzzerasanespeak-ng Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 1 Crash Address: 0x784b7b4ccf94 Crash State: SetPitchGradient...

CVE-2023-22652 Stack buffer overflow in "read_file" function

A Buffer Copy without Checking Size of Input 'Classic Buffer Overflow' vulnerability in openSUSE libeconf leads to DoS via malformed config files. This issue affects libeconf: before 0.5.2...

net-snmp:snmp_print_var_fuzzer: Stack-buffer-overflow in sprint_realloc_hinted_integer

Project: git://git.code.sf.net/p/net-snmp/code https://github.com/net-snmp/net-snmp.git Detailed Report: https://oss-fuzz.com/testcase?key=5185505302806528 Project: net-snmp Fuzzing Engine: honggfuzz Fuzz Target: snmpprintvarfuzzer Job Type: honggfuzzasannet-snmp Platform Id: linux Crash Type:...

CVE-2023-32181 Stack buffer overflow in "econf_writeFile" function

A Buffer Copy without Checking Size of Input 'Classic Buffer Overflow' vulnerability in openSUSE libeconf allows for DoS via malformed configuration files This issue affects libeconf: before 0.5.2...

Fedora 37 : editorconfig (2023-6e5d4757df)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-6e5d4757df advisory. Security fix for CVE-2023-0341: update to 0.12.6 close RHBZ2162811 Tenable has extracted the preceding description block directly from the Fedora...