Wago PFC200 iocheckd service 'I/O-Check' cache Code Execution (CVE-2019-5176)

An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service I/O-Check' functionality of WAGO PFC 200 Firmware version 03.02.0214. An attacker can send a specially crafted packet to trigger the parsing of this cache file.The destination buffer sp+0x40 is...

WAGO I/O-CHECK Buffer Access with Incorrect Length Value (CVE-2019-5074)

An exploitable stack buffer overflow vulnerability exists in the iocheckd service ''I/O-Check'' functionality of WAGO PFC200 Firmware version 03.01.0713, WAGO PFC200 Firmware version 03.00.3912 and WAGO PFC100 Firmware version 03.00.3912. A specially crafted set of packets can cause a stack buffe...

Wago PFC200 iocheckd service 'I/O-Check' cache Code Execution (CVE-2019-5181)

An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service I/O-Check' functionality of WAGO PFC 200 Firmware version 03.02.0214. A specially crafted XML cache file written to a specific location on the device can cause a stack buffer overflow, resulting in cod...

mosquitto:broker_fuzz_test_config: Stack-buffer-overflow in mosquitto__hex2bin

Project: https://github.com/eclipse/mosquitto.git Detailed Report: https://oss-fuzz.com/testcase?key=4940854638018560 Project: mosquitto Fuzzing Engine: honggfuzz Fuzz Target: brokerfuzztestconfig Job Type: honggfuzzasanmosquitto Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 1 Crash...

suricata:fuzz_siginit: Stack-buffer-overflow in strlcpy

Project: https://github.com/OISF/suricata.git Detailed Report: https://oss-fuzz.com/testcase?key=6303734667018240 Project: suricata Fuzzing Engine: honggfuzz Fuzz Target: fuzzsiginit Job Type: honggfuzzasansuricata Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Address:...

Denial Of Service (DoS)

libde265 is vulnerable to Denial Of Service DoS. The vulnerability exists due to the stack buffer overflow in the putqpelfallback function, allowing an attacker to cause an application crash through the maliciously crafted file...

net-snmp:snmp_config_fuzzer: Stack-buffer-overflow in __wrap_strlcpy

Project: git://git.code.sf.net/p/net-snmp/code https://github.com/net-snmp/net-snmp.git Detailed Report: https://oss-fuzz.com/testcase?key=5420875685167104 Project: net-snmp Fuzzing Engine: honggfuzz Fuzz Target: snmpconfigfuzzer Job Type: honggfuzzasannet-snmp Platform Id: linux Crash Type:...

opensc:fuzz_pkcs15init: Stack-buffer-overflow in __wrap_strlcpy

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=4691271135657984 Project: opensc Fuzzing Engine: honggfuzz Fuzz Target: fuzzpkcs15init Job Type: honggfuzzasanopensc Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Address:...

net-snmp:snmp_transport_fuzzer: Stack-buffer-overflow in __wrap_strlcpy

Project: git://git.code.sf.net/p/net-snmp/code https://github.com/net-snmp/net-snmp.git Detailed Report: https://oss-fuzz.com/testcase?key=6316417839661056 Project: net-snmp Fuzzing Engine: honggfuzz Fuzz Target: snmptransportfuzzer Job Type: honggfuzzasannet-snmp Platform Id: linux Crash Type:...

hunspell:affdicfuzzer: Stack-buffer-underflow in AffixMgr::compound_check

Project: https://github.com/hunspell/hunspell.git Detailed Report: https://oss-fuzz.com/testcase?key=5092342362406912 Project: hunspell Fuzzing Engine: libFuzzer Fuzz Target: affdicfuzzer Job Type: libfuzzerasanhunspell Platform Id: linux Crash Type: Stack-buffer-underflow READ 1 Crash Address:...

SOUND4 LinkAndShare Transmitter 1.1.2 Format String Stack Buffer Overflow

Summary The SOUND4 Link&Share L&S is a simple and open protocol that allow users to remotely control SOUND4 processors through a network connection. SOUND4 offers a tool that manage sending L&S commands to your processors: the Link&Share Transmitter. Description The application suffers from a...

CVE-2021-31578

In Boa, there is a possible escalation of privilege due to a stack buffer overflow. This could lead to remote escalation of privilege from a proximal attacker with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: A20210008; Issue ID:...

CVE-2021-31578

In Boa, there is a possible escalation of privilege due to a stack buffer overflow. This could lead to remote escalation of privilege from a proximal attacker with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: A20210008; Issue ID:...

Stack overflow

In Boa, there is a possible escalation of privilege due to a stack buffer overflow. This could lead to remote escalation of privilege from a proximal attacker with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: A20210008; Issue ID:...

D-Link DAP-2020 Code Execution

The vulnerability of D-Link DAP-2020 and DAP-1360 wireless access points’ microprogramming software is related to buffer overflow attacks on the stack. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

CVE-2021-31578

CVE-2021-31578 affects Boa and involves a stack buffer overflow. The consequence is remote escalation of privilege from a nearby attacker with no required privileges and no user interaction. The issue is attributed to Boa’s handling of stack buffers, enabling a proximal attacker to elevate privil...

CVE-2021-31578

In Boa, there is a possible escalation of privilege due to a stack buffer overflow. This could lead to remote escalation of privilege from a proximal attacker with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: A20210008; Issue ID:...

CVE-2021-31578: Out-of-bounds Write

In Boa, there is a possible escalation of privilege due to a stack buffer overflow. This could lead to remote escalation of privilege from a proximal attacker with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: A20210008; Issue ID:...

Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM / 22.04 ESM : EditorConfig Core C vulnerability (USN-5842-1)

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM / 22.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-5842-1 advisory. Mark Esler and David Fernandez Gonzalez discovered that EditorConfig Core C incorrectly handled memory when handling certain...

zstd:simple_decompress: Stack-buffer-overflow in ZSTD_decompressBlock

Project: https://github.com/facebook/zstd.git Detailed Report: https://oss-fuzz.com/testcase?key=4705446499057664 Project: zstd Fuzzing Engine: libFuzzer Fuzz Target: simpledecompress Job Type: libfuzzerasani386zstd Platform Id: linux Crash Type: Stack-buffer-overflow READ 8 Crash Address:...