Debian: Security Advisory (DLA-441-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-1217

Stack buffer overflow in Crash reporting in Google Chrome on Windows prior to 111.0.5563.64 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: High...

CVE-2023-1217

Stack buffer overflow in Crash reporting in Google Chrome on Windows prior to 111.0.5563.64 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: High...

CVE-2023-1217

Stack buffer overflow in Crash reporting in Google Chrome on Windows prior to 111.0.5563.64 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: High...

CVE-2023-1217

CVE-2023-1217 describes a stack buffer overflow in Chrome’s crash reporting on Windows prior to 111.0.5563.64. A remote attacker who already compromised a renderer process could read potentially sensitive data from the process memory via a crafted HTML page. The available connected data confirms ...

CVE-2023-1217

Stack buffer overflow in Crash reporting in Google Chrome on Windows prior to 111.0.5563.64 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: High...

CVE-2023-1217

Stack buffer overflow in Crash reporting in Google Chrome on Windows prior to 111.0.5563.64 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: High...

CVE-2023-1217

Stack buffer overflow in Crash reporting in Google Chrome on Windows prior to 111.0.5563.64 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: High...

PT-2023-1673

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 111.0.5563.64 Description The issue is related to a stack buffer overflow in the Crash reporting component of Google Chrome on Windows. This allows a remote attacker who has compromised the renderer process to...

Ubuntu: Security Advisory (USN-5903-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

libdwarf:fuzz_die_cu_offset: Stack-buffer-overflow in dwarf_get_version_of_die

Project: https://github.com/davea42/libdwarf-code.git Detailed Report: https://oss-fuzz.com/testcase?key=5171954224332800 Project: libdwarf Fuzzing Engine: honggfuzz Fuzz Target: fuzzdiecuoffset Job Type: honggfuzzasanlibdwarf Platform Id: linux Crash Type: Stack-buffer-overflow READ 8 Crash...

libdwarf:fuzz_die_cu_attrs: Stack-buffer-overflow in dwarf_dietype_offset

Project: https://github.com/davea42/libdwarf-code.git Detailed Report: https://oss-fuzz.com/testcase?key=4953133005799424 Project: libdwarf Fuzzing Engine: afl Fuzz Target: fuzzdiecuattrs Job Type: aflasanlibdwarf Platform Id: linux Crash Type: Stack-buffer-overflow READ 8 Crash Address:...

USN-5903-1: lighttpd vulnerabilities

It was discovered that lighttpd incorrectly handled certain inputs, which could result in a stack buffer overflow. A remote attacker could possibly use this issue to cause a denial of service DoS. CVE-2022-22707, CVE-2022-41556...

Ubuntu: Security Advisory (USN-5889-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-5889-1: ZoneMinder vulnerabilities

It was discovered that ZoneMinder was not properly sanitizing URL parameters for certain views. An attacker could possibly use this issue to perform a cross-site scripting XSS attack. This issue was only fixed in Ubuntu 16.04 ESM. CVE-2019-6777 It was discovered that ZoneMinder was not properly...

Tenda AX3 SetSysTimeCfg Stack Buffer Overflow Vulnerability

Tenda AX3 is a home dual-band Gigabit wireless router from Tenda Technology that supports Wi-Fi6 802.11ax standard and focuses on high-performance network coverage and stable connection. Tenda AX3 suffers from a stack buffer overflow vulnerability that originates from a stack overflow vulnerabili...

OSV-2023-113 Stack-buffer-overflow in dump_stats

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56339 Crash type: Stack-buffer-overflow READ 4 Crash state: dumpstats flacanalyzeframe writecallback...

glog:fuzz_demangle: Dynamic-stack-buffer-overflow in google::ParseUnqualifiedName

Project: https://github.com/google/glog.git Detailed Report: https://oss-fuzz.com/testcase?key=6301446183452672 Project: glog Fuzzing Engine: afl Fuzz Target: fuzzdemangle Job Type: aflasanglog Platform Id: linux Crash Type: Dynamic-stack-buffer-overflow READ 1 Crash Address: 0x7ffceae391bc Crash...

glog:fuzz_demangle: Dynamic-stack-buffer-overflow in google::ParseUnscopedName

Project: https://github.com/google/glog.git Detailed Report: https://oss-fuzz.com/testcase?key=4668696045158400 Project: glog Fuzzing Engine: afl Fuzz Target: fuzzdemangle Job Type: aflasanglog Platform Id: linux Crash Type: Dynamic-stack-buffer-overflow READ 1 Crash Address: 0x7ffe75fb14bb Crash...

flac:fuzzer_tool_flac: Stack-buffer-overflow in dump_stats

Project: https://github.com/xiph/flac.git Detailed Report: https://oss-fuzz.com/testcase?key=4839661043580928 Project: flac Fuzzing Engine: afl Fuzz Target: fuzzertoolflac Job Type: aflasanflac Platform Id: linux Crash Type: Stack-buffer-overflow READ 4 Crash Address: 0x7fffce05161c Crash State:...