10630 matches found
CVE-2023-34325 Multiple vulnerabilities in libfsimage disk handling
This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. libfsimage contains parsing code for several filesystems, most of them based on grub-legacy code. libfsimage is used by pygrub to inspect guest disks. Pygrub runs as the...
CVE-2023-34325 Multiple vulnerabilities in libfsimage disk handling
This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. libfsimage contains parsing code for several filesystems, most of them based on grub-legacy code. libfsimage is used by pygrub to inspect guest disks. Pygrub runs as the...
CVE-2023-34325
This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. libfsimage contains parsing code for several filesystems, most of them based on grub-legacy code. libfsimage is used by pygrub to inspect guest disks. Pygrub runs as the...
CVE-2023-34325
CVE-2023-34325 concerns Xen’s copy of libfsimage (derived from grub) used by pygrub. A stack buffer overflow can be triggered by guest-controlled input when pygrub runs with superuser privileges in a privileged domain. Xen notes patches to run pygrub in deprivileged mode to avoid exploitation. CV...
CVE-2023-34325
This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. libfsimage contains parsing code for several filesystems, most of them based on grub-legacy code. libfsimage is used by pygrub to inspect guest disks. Pygrub runs as the...
CVE-2023-34325: Out-of-bounds Write
This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. libfsimage contains parsing code for several filesystems, most of them based on grub-legacy code. libfsimage is used by pygrub to inspect guest disks. Pygrub runs as the...
Pico HTTP Server in C Security Vulnerability
Pico HTTP Server in C is a very simple Unix HTTP server from the individual developer Aleksey Kurepin. A security vulnerability exists in Pico HTTP Server in C, which stems from a stack buffer overflow in the voidroute function in main.c, leading to remote code execution...
upx:test_packed_file_fuzzer: Stack-buffer-overflow in PackLinuxElf64::unpack
Project: https://github.com/upx/upx.git Detailed Report: https://oss-fuzz.com/testcase?key=5290502832324608 Project: upx Fuzzing Engine: afl Fuzz Target: testpackedfilefuzzer Job Type: aflasanupx Platform Id: linux Crash Type: Stack-buffer-overflow READ 4 Crash Address: 0x7ffc75eac2f0 Crash State...
OSV-2024-3 Stack-buffer-overflow in icu_75::TZDBTimeZoneNames::getMetaZoneNames
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65486 Crash type: Stack-buffer-overflow WRITE 1 Crash state: icu75::TZDBTimeZoneNames::getMetaZoneNames icu75::TZDBTimeZoneNames::getMetaZoneDisplayName TestNames...
icu:time_zone_names_fuzzer: Stack-buffer-overflow in icu_75::TZDBTimeZoneNames::getMetaZoneNames
Project: https://github.com/unicode-org/icu.git Detailed Report: https://oss-fuzz.com/testcase?key=5071816267726848 Project: icu Fuzzing Engine: afl Fuzz Target: timezonenamesfuzzer Job Type: aflasanicu Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 1 Crash Address: 0x7ffd791fa1c1 Cra...
Stack overflow
A stack based buffer overflow was found in the virtio-net device of QEMU. This issue occurs when flushing TX in the virtionetflushtx function if guest features VIRTIONETFHASHREPORT, VIRTIOFVERSION1 and VIRTIONETFMRGRXBUF are enabled. This could allow a malicious user to overwrite local variables...
CVE-2023-6693
A stack based buffer overflow was found in the virtio-net device of QEMU. This issue occurs when flushing TX in the virtionetflushtx function if guest features VIRTIONETFHASHREPORT, VIRTIOFVERSION1 and VIRTIONETFMRGRXBUF are enabled. This could allow a malicious user to overwrite local variables...
CVE-2023-6693 Qemu: virtio-net: stack buffer overflow in virtio_net_flush_tx()
A stack based buffer overflow was found in the virtio-net device of QEMU. This issue occurs when flushing TX in the virtionetflushtx function if guest features VIRTIONETFHASHREPORT, VIRTIOFVERSION1 and VIRTIONETFMRGRXBUF are enabled. This could allow a malicious user to overwrite local variables...
Stack Buffer Overflow
MP3Gain is vulnerable to Stack Buffer Overflow. The vulnerability is caused due to the WriteMP3GainAPETag function.This potentially leads to Denial of Service DoS Attack...
NewStart CGSL MAIN 6.06 : cairo Vulnerability (NS-SA-2023-0077)
The remote NewStart CGSL host, running version MAIN 6.06, has cairo packages installed that are affected by a vulnerability: - A flaw was found in cairo's image-compositor.c in all versions prior to 1.17.4. This flaw allows an attacker who can provide a crafted input file to cairo's...
The vulnerability of the dm_fillObjByStr function in TP-Link TL-WR902AC router software arises due to overflow of buffers on the stack, allowing an attacker to execute arbitrary code.
The vulnerability of the dmfillObjByStr function in the microprogramming software of TP-Link’s router TL-WR902AC is caused by an overflow in the buffer on the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
CVE-2023-49356
A stack buffer overflow vulnerability in MP3Gain v1.6.2 allows an attacker to cause a denial of service via the WriteMP3GainAPETag function at apetag.c:592...
Stack overflow
A stack buffer overflow vulnerability in MP3Gain v1.6.2 allows an attacker to cause a denial of service via the WriteMP3GainAPETag function at apetag.c:592...
