OSV-2023-84 Stack-buffer-overflow in parse_regex

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56121 Crash type: Stack-buffer-overflow READ 1 Crash state: parseregex parseregex parseregex...

ghostscript:gs_device_pdfwrite_fuzzer: Stack-buffer-overflow in pdfi_read_cff_dict

Detailed Report: https://oss-fuzz.com/testcase?key=4713710527840256 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicepdfwritefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 1 Crash Address: 0x7f049e28fc60 Crash State:...

Siemens JT Open Toolkit Stack Buffer Overflow Vulnerability

Siemens JT Open Toolkit Siemens JTTK is a C++ application programming interface API from Siemens, Germany. It provides support for 64-bit application development on Microsoft Windows, Linux and MacOS. Siemens JT Open Toolkit suffers from a stack buffer overflow vulnerability that can be exploited...

PT-2023-36007

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a stack-buffer-overflow read crash. The crash state indicates repeated calls to the parse regex function, suggesting a potential...

clamav:clamav_dbload_PDB_fuzzer: Stack-buffer-overflow in parse_regex

Detailed Report: https://oss-fuzz.com/testcase?key=4735548289056768 Project: clamav Fuzzing Engine: libFuzzer Fuzz Target: clamavdbloadPDBfuzzer Job Type: libfuzzerasanclamav Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address: 0x7f1a35fd5860 Crash State: parseregex parsereg...

suricata:fuzz_confyamlloadstring: Stack-buffer-overflow in strlcpy

Project: https://github.com/OISF/suricata.git Detailed Report: https://oss-fuzz.com/testcase?key=6544605694001152 Project: suricata Fuzzing Engine: honggfuzz Fuzz Target: fuzzconfyamlloadstring Job Type: honggfuzzasansuricata Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Addres...

Adobe Bridge Stack Buffer Overflow Vulnerability (CNVD-2023-13735)

Adobe Bridge is a file viewer from Adobe. Adobe Bridge is vulnerable to a stack buffer overflow vulnerability that could be exploited to execute arbitrary code in the context of the current user...

Adobe Animate stack buffer overflow vulnerability

Adobe Animate is a Flash animation software from Adobe. Adobe Animate is vulnerable to a stack buffer overflow vulnerability that could be exploited to execute arbitrary code in the context of the current user...

opensc:fuzz_pkcs15init: Stack-buffer-overflow in __wrap_strlcpy

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=6738566215761920 Project: opensc Fuzzing Engine: honggfuzz Fuzz Target: fuzzpkcs15init Job Type: honggfuzzasanopensc Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Address:...

SUSE CVE-2019-11759

An attacker could have caused 4 bytes of HMAC output to be written past the end of a buffer stored on the stack. This could be used by an attacker to execute arbitrary code or more likely lead to a crash. This vulnerability affects Firefox 70, Thunderbird 68.2, and Firefox ESR 68.2...

SUSE CVE-2019-11760

A fixed-size stack buffer could overflow in nrappkit when doing WebRTC signaling. This resulted in a potentially exploitable crash in some instances. This vulnerability affects Firefox 70, Thunderbird 68.2, and Firefox ESR 68.2...

SUSE CVE-2020-36131

AOM v2.0.1 was discovered to contain a stack buffer overflow via the component stats/ratehist.c...

SUSE CVE-2021-20236

A flaw was found in the ZeroMQ server in versions before 4.3.3. This flaw allows a malicious client to cause a stack buffer overflow on the server by sending crafted topic subscription requests and then unsubscribing. The highest threat from this vulnerability is to confidentiality, integrity, as...

SUSE CVE-2022-35260

curl can be told to parse a .netrc file for credentials. If that file endsin a line with 4095 consecutive non-white space letters and no newline, curlwould first read past the end of the stack-based buffer, and if the readworks, write a zero byte beyond its boundary.This will in most cases cause ...

Adobe Animate 缓冲区错误漏洞

Adobe Animate is a Flash animation software from Adobe. Adobe Animate is vulnerable to a stack buffer overflow vulnerability that could be exploited to execute arbitrary code in the context of the current user...

freeradius:fuzzer_tacacs: Stack-buffer-overflow in fr_tacacs_decode

Detailed Report: https://oss-fuzz.com/testcase?key=5221593162055680 Project: freeradius Fuzzing Engine: libFuzzer Fuzz Target: fuzzertacacs Job Type: libfuzzerasanfreeradius Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Address: 0x7ffd84c698d2 Crash State: frtacacsdecode...

Advisory ROSA-SA-2023-2113

Software: kernel 3.10.0-1160.83.1.el7 OS: rosa-server79 packageevrstring: kernel-3.10.0-1160.83.1.el7 CVE-ID: CVE-2023-0179 BDU-ID: 2023-00383 CVE-Crit: HIGH CVE-DESC: A vulnerability in the netfilter component of the Linux operating system kernel is related to a stack buffer overflow in nftables...

samba:fuzz_parse_lpq_entry: Stack-buffer-overflow in __wrap_strlcpy

Project: https://gitlab.com/samba-team/samba.git Detailed Report: https://oss-fuzz.com/testcase?key=5864352197771264 Project: samba Fuzzing Engine: honggfuzz Fuzz Target: fuzzparselpqentry Job Type: honggfuzzasansamba Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Address:...

Siemens Solid Edge Stack Buffer Overflow Vulnerability

Siemens Solid Edge is a 3D CAD software from Siemens, a German company. The software can be used for part design, assembly design, sheet metal design, welding design, etc. Siemens Solid Edge is vulnerable to a stack buffer overflow vulnerability, which can be exploited by attackers to execute cod...

Siemens JT Open Toolkit 安全漏洞

Siemens JT Open Toolkit Siemens JTTK is a C++ application programming interface API from Siemens, Germany. It provides support for 64-bit application development on Microsoft Windows, Linux and MacOS. Siemens JT Open Toolkit suffers from a stack buffer overflow vulnerability that can be exploited...