espeak-ng:ssml-fuzzer: Stack-buffer-overflow in LoadVoice

Project: https://github.com/espeak-ng/espeak-ng.git Detailed Report: https://oss-fuzz.com/testcase?key=6259546849411072 Project: espeak-ng Fuzzing Engine: afl Fuzz Target: ssml-fuzzer Job Type: aflasanespeak-ng Platform Id: linux Crash Type: Stack-buffer-overflow READ Crash Address: 0x7ff8ca08e99...

Siemens Simcenter Femap 缓冲区错误漏洞

Siemens Simcenter Femap is a cutting-edge engineering simulation application from Siemens, Germany. Siemens Simcenter Femap is vulnerable to a stack buffer overflow when parsing NEU files, which could be exploited to execute code in the context of the current process...

Siemens Simcenter Femap 缓冲区错误漏洞

Siemens Simcenter Femap is a cutting-edge engineering simulation application from Siemens, Germany. Siemens Simcenter Femap is vulnerable to a stack buffer overflow when parsing NEU files, which could be exploited to execute code in the context of the current process...

AlmaLinux 8 : fwupd (ALSA-2021:2566)

The remote AlmaLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2021:2566 advisory. - A flaw was found in grub2 in versions prior to 2.06, where it incorrectly enables the usage of the ACPI command when Secure Boot is enabled. This flaw...

AlmaLinux 8 : grub2 (ALSA-2021:0696)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2021:0696 advisory. - A flaw was found in grub2 in versions prior to 2.06, where it incorrectly enables the usage of the ACPI command when Secure Boot is enabled. This flaw...

Siemens Simcenter Femap Stack Buffer Overflow Vulnerability (CNVD-2022-10011)

Siemens Simcenter Femap is a cutting-edge engineering simulation application from Siemens, Germany. Siemens Simcenter Femap is vulnerable to a stack buffer overflow when parsing NEU files, which could be exploited to execute code in the context of the current process...

OSV-2022-128 Stack-buffer-overflow in decompress_rNUMBER

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44432 Crash type: Stack-buffer-overflow WRITE 1 Crash state: decompressrNUMBER readrNUMBERmetadata dwgdecode...

PT-2022-36818

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description The issue is related to a stack-buffer-overflow crash, specifically a WRITE 1 type. The crash occurs in the decompress rNUMBER, read rNUMBER meta data, an...

libredwg:llvmfuzz: Stack-buffer-overflow in decompress_rNUMBER

Project: https://github.com/LibreDWG/libredwg.git Detailed Report: https://oss-fuzz.com/testcase?key=5393679093727232 Project: libredwg Fuzzing Engine: libFuzzer Fuzz Target: llvmfuzz Job Type: libfuzzerasanlibredwg Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 1 Crash Address:...

PT-2022-11538

Name of the Vulnerable Software and Affected Versions Insyde InsydeH2O Kernel 5.0 before 05.08.41 Insyde InsydeH2O Kernel 5.1 before 05.16.41 Insyde InsydeH2O Kernel 5.2 before 05.26.41 Insyde InsydeH2O Kernel 5.3 before 05.35.41 Insyde InsydeH2O Kernel 5.4 before 05.42.20 Description A stack-bas...

Cisco RV340 SSL VPN Unauthenticated Remote Code Execution

This module exploits a stack buffer overflow in the Cisco RV series routers SSL VPN functionality. The default SSL VPN configuration is exploitable, with no authentication required and works over the Internet! The stack is executable and no ASLR is in place, which makes exploitation easier...

GLSA-202201-02 : Chromium, Google Chrome: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202201-02 Chromium, Google Chrome: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Chromium and Google Chrome. Please review the CVE identifiers referenced below for details. Tenable has extracted the...

gpac:fuzz_parse: Stack-buffer-overflow in diST_box_read

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=5894476586418176 Project: gpac Fuzzing Engine: libFuzzer Fuzz Target: fuzzparse Job Type: libfuzzerasangpac Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 1 Crash Address: 0x7ffea6531fa0 Crash...

OSV-2022-100 Stack-buffer-overflow in sgets

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44160 Crash type: Stack-buffer-overflow WRITE 1 Crash state: sgets pdfireadbytes readxrefentryslow...

PT-2022-36653

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a stack-buffer-overflow crash. Technical details about the crash include the functions sgets, pdfi read bytes, and read xref entry...

ghostscript:gstoraster_fuzzer: Stack-buffer-overflow in sgets

Detailed Report: https://oss-fuzz.com/testcase?key=4587919828975616 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 1 Crash Address: 0x7f35fbb15554 Crash State: sgets...

Mageia: Security Advisory (MGASA-2018-0418)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2020-0148)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2016-0390)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2019-0325)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...