graphicsmagick:coder_TXT_fuzzer: Stack-buffer-overflow in ReadBlobString

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=6346635882135552 Project: graphicsmagick Fuzzing Engine: honggfuzz Fuzz Target: coderTXTfuzzer Job Type: honggfuzzasangraphicsmagick Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 1...

PT-2022-6223 · Oracle · Common Desktop Environment +1

Name of the Vulnerable Software and Affected Versions: Oracle Solaris version 10 1/13 Description: The issue is a privilege escalation vulnerability that can be exploited by a low-privileged user to gain root access. This is achieved by crafting a malicious printer and double-clicking on the...

OSV-2022-1104 Stack-buffer-overflow in LibRaw::xtrans_interpolate

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52775 Crash type: Stack-buffer-overflow WRITE 4 Crash state: LibRaw::xtransinterpolate LibRaw::dcrawprocess RAWHandler::read...

Huawei EulerOS: Security Advisory for libtiff (EulerOS-SA-2022-2621)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

kimageformats:kimgio_raw_fuzzer: Stack-buffer-overflow in LibRaw::xtrans_interpolate

Project: git://anongit.kde.org/kimageformats Detailed Report: https://oss-fuzz.com/testcase?key=6272444856139776 Project: kimageformats Fuzzing Engine: afl Fuzz Target: kimgiorawfuzzer Job Type: aflasankimageformats Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 4 Crash Address:...

EulerOS 2.0 SP3 : libtiff (EulerOS-SA-2022-2621)

According to the versions of the libtiff packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A stack buffer overflow flaw was found in Libtiffs' tiffcp.c in main function. This flaw allows an attacker to pass a crafted TIFF file to the...

curl 缓冲区错误漏洞

Curl is a tool used to transfer data from or to a server. A security vulnerability exists in curl that stems from the fact that curl can read more than the end of a stack-based buffer, resulting in a denial of service...

CVE-2022-33183

A vulnerability in Brocade Fabric OS CLI before Brocade Fabric OS v9.1.0, 9.0.1e, 8.2.3c, 8.2.0cbn5, 7.4.2.j could allow a remote authenticated attacker to perform stack buffer overflow using in “firmwaredownload” and “diagshow” commands...

Stack overflow

A vulnerability in Brocade Fabric OS CLI before Brocade Fabric OS v9.1.0, 9.0.1e, 8.2.3c, 8.2.0cbn5, 7.4.2.j could allow a remote authenticated attacker to perform stack buffer overflow using in “firmwaredownload” and “diagshow” commands...

CVE-2022-32454

A stack-based buffer overflow vulnerability exists in the XCMD setIPCam functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9X and 6.9Z. A specially-crafted XCMD can lead to remote code execution. An attacker can send a malicious XML payload to trigger this vulnerability...

kernel: x86/speculation: Fill RSB on vmexit for IBRS

In the Linux kernel, the following vulnerability has been resolved: x86/speculation: Fill RSB on vmexit for IBRS Prevent RSB underflow/poisoning attacks with RSB. While at it, add a bunch of comments to attempt to document the current state of tribal knowledge about RSB attacks and what exactly i...

CVE-2022-33183

A vulnerability in Brocade Fabric OS CLI before Brocade Fabric OS v9.1.0, 9.0.1e, 8.2.3c, 8.2.0cbn5, 7.4.2.j could allow a remote authenticated attacker to perform stack buffer overflow using in “firmwaredownload” and “diagshow” commands...

CVE-2022-33183: Out-of-bounds Write

A vulnerability in Brocade Fabric OS CLI before Brocade Fabric OS v9.1.0, 9.0.1e, 8.2.3c, 8.2.0cbn5, 7.4.2.j could allow a remote authenticated attacker to perform stack buffer overflow using in “firmwaredownload” and “diagshow” commands...

CVE-2022-33183

A vulnerability in Brocade Fabric OS CLI before Brocade Fabric OS v9.1.0, 9.0.1e, 8.2.3c, 8.2.0cbn5, 7.4.2.j could allow a remote authenticated attacker to perform stack buffer overflow using in “firmwaredownload” and “diagshow” commands...

CVE-2022-33183

CVE-2022-33183 describes a stack buffer overflow in the Brocade Fabric OS CLI. The vulnerability affects Brocade Fabric OS Command Line Interface prior to versions v9.1.0, v9.0.1e, v8.2.3c, v8.2.0cbn5, and v7.4.2.j, enabling a remote authenticated attacker to trigger a stack overflow via the firm...

OSV-2022-1084 Stack-buffer-overflow in authentic_parse_size

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52662 Crash type: Stack-buffer-overflow READ 1 Crash state: authenticparsesize authenticgettaggeddata authenticparsecredentialdata...

PT-2022-36702

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a stack-buffer-overflow read error. The crash state involves several functions: authentic parse size, authentic get tagged data, an...

Advantech R-SeeNet Stack Buffer Overflow Vulnerability

Advantech R-SeeNet is an industrial monitoring software from Advantech China. The software is based on the snmp protocol for monitoring platforms and is available for Linux and Windows platforms.Advantech R-SeeNet 2.4.17 and previous versions are vulnerable to a stack buffer overflow vulnerabilit...

Advantech R-SeeNet Buffer Overflow

The vulnerability of the monitoring software for the functions and states of Advantech R-SeeNet routers is related to buffer overflow in the stack. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

opensc:fuzz_pkcs15_encode: Stack-buffer-overflow in authentic_parse_size

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=5410859619057664 Project: opensc Fuzzing Engine: libFuzzer Fuzz Target: fuzzpkcs15encode Job Type: libfuzzerasanopensc Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address:...