CVE-2021-34344: Out-of-bounds Write

A stack buffer overflow vulnerability has been reported to affect QNAP device running QUSBCam2. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this vulnerability in the following versions of QUSBCam2: QTS 4.5.4: QUSBCam2 1.1.4 2021/07/30 and lat...

CVE-2021-28816: Out-of-bounds Write

A stack buffer overflow vulnerability has been reported to affect QNAP device running QTS, QuTScloud, QuTS hero. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this vulnerability in the following versions of QTS, QuTScloud, QuTS hero: QTS...

CVE-2021-34343: Out-of-bounds Write

A stack buffer overflow vulnerability has been reported to affect QNAP device running QTS, QuTScloud, QuTS hero. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this vulnerability in the following versions of QTS, QuTScloud, QuTS hero: QTS...

PT-2021-20465

Name of the Vulnerable Software and Affected Versions: NVR Storage Expansion versions prior to 1.0.6 Description: A stack buffer overflow issue has been reported, allowing attackers to execute arbitrary code if exploited. Recommendations: For versions prior to 1.0.6, update to NVR Storage Expansi...

PT-2021-20466

Name of the Vulnerable Software and Affected Versions: NVR Storage Expansion versions prior to 1.0.6 Description: A stack buffer overflow issue has been reported, allowing attackers to execute arbitrary code if exploited. Recommendations: For versions prior to 1.0.6, update to NVR Storage Expansi...

PT-2021-4459

Name of the Vulnerable Software and Affected Versions QTS versions prior to 4.5.4.1715 build 20210630 QTS versions prior to 5.0.0.1716 build 20210701 QuTScloud versions prior to c4.5.6.1755 QuTS hero versions prior to h4.5.4.1771 build 20210825 Description A stack buffer overflow issue has been...

PT-2021-21208

Name of the Vulnerable Software and Affected Versions Dell iDRAC 9 versions prior to 4.40.40.00 Dell iDRAC 8 versions prior to 2.80.80.80 Check Point GAiA affected versions not specified Description The issue is a Stack Buffer Overflow in Racadm, which can be exploited by an authenticated remote...

PT-2021-4460

Name of the Vulnerable Software and Affected Versions QTS versions prior to 4.3.3.1693 build 20210624 QTS versions prior to 4.3.6.1750 build 20210730 QTS versions prior to 4.5.4.1715 build 20210630 QTS versions prior to 5.0.0.1716 build 20210701 QuTScloud versions prior to c4.5.6.1755 QuTS hero...

freeimage:load_from_memory_fuzzer: Stack-buffer-overflow in LibRaw::parseCR3

Detailed Report: https://oss-fuzz.com/testcase?key=4544475016331264 Project: freeimage Fuzzing Engine: libFuzzer Fuzz Target: loadfrommemoryfuzzer Job Type: libfuzzerasanfreeimage Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 1 Crash Address: 0x7f3655ab27e0 Crash State:...

ROS-2-1225

2.1225 Vulnerability in PPPD CVE-2020-8597 1. Vulnerability Description: The issue CVE-2020-8597 is a stack buffer overflow vulnerability resulting from a logic error in the EAP Extensible Authentication Protocol packet parser in PPPD eaprequest and eapresponse functions in eap.c. The...

ROS-2-807

2.807 Vulnerability in PPPD CVE-2020-8597 1. Vulnerability Description: The issue CVE-2020-8597 is a stack buffer overflow vulnerability resulting from a logic error in the EAP Extensible Authentication Protocol packet parser in PPPD eaprequest and eapresponse functions in eap.c. The vulnerabilit...

ROS-2-1177

2.1177 Vulnerability in PPPD CVE-2020-8597 1. Vulnerability Description: The issue CVE-2020-8597 is a stack buffer overflow vulnerability resulting from a logic error in the EAP Extensible Authentication Protocol packet parser in PPPD eaprequest and eapresponse functions in eap.c. The...

Remote Code Execution (RCE)

ntfs-3g is vulnerable to Remote Code Execution RCE. The vulnerability exists due to a stack buffer overflow...

CVE-2021-35267

NTFS-3G versions 2021.8.22, a stack buffer overflow can occur when correcting differences in the MFT and MFTMirror allowing for code execution or escalation of privileges when setuid-root...

CVE-2021-35267

NTFS-3G versions 2021.8.22, a stack buffer overflow can occur when correcting differences in the MFT and MFTMirror allowing for code execution or escalation of privileges when setuid-root...

CVE-2021-35267

NTFS-3G versions 2021.8.22, a stack buffer overflow can occur when correcting differences in the MFT and MFTMirror allowing for code execution or escalation of privileges when setuid-root...

CVE-2021-35267: Out-of-bounds Write

NTFS-3G versions 2021.8.22, a stack buffer overflow can occur when correcting differences in the MFT and MFTMirror allowing for code execution or escalation of privileges when setuid-root...

CVE-2021-35267

NTFS-3G is affected by CVE-2021-35267 for versions older than 2021.8.22. The issue is a stack/heap buffer overflow in MFT/MFTMirror handling that can enable code execution or privilege escalation when setuid-root. Connected advisories from Astra Linux and Alpine Linux confirm the

CVE-2021-35267

NTFS-3G versions 2021.8.22, a stack buffer overflow can occur when correcting differences in the MFT and MFTMirror allowing for code execution or escalation of privileges when setuid-root...

ujson:hypothesis_structured_fuzzer: Stack-buffer-overflow in ujson.cpython-38-x86_64-linux-gnu.so

Detailed Report: https://oss-fuzz.com/testcase?key=6165079859527680 Project: ujson Fuzzing Engine: libFuzzer Fuzz Target: hypothesisstructuredfuzzer Job Type: libfuzzerasanujson Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 1 Crash Address: 0x7ffcd053e440 Crash State:...