CVE-2021-20314

Stack buffer overflow in libspf2 versions below 1.2.11 when processing certain SPF macros can lead to Denial of service and potentially code execution via malicious crafted SPF explanation messages...

CVE-2021-20314

CVE-2021-20314 concerns the libspf2 library (versions below 1.2.11). The vulnerability is a stack-buffer overflow when processing certain SPF macros that can lead to denial of service and potentially code execution via crafted SPF explanation messages. Related advisories (GLSA-202401-22) describe...

Debian DSA-4955-1 : libspf2 - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dsa-4955 advisory. - Stack buffer overflow in libspf2 versions below 1.2.11 when processing certain SPF macros can lead to Denial of service and potentially code execution via malicious...

Debian DLA-2739-1 : libspf2 - LTS security update

The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-2739 advisory. - Stack buffer overflow in libspf2 versions below 1.2.11 when processing certain SPF macros can lead to Denial of service and potentially code execution via malicious craft...

CVE-2021-20314: Out-of-bounds Write

Stack buffer overflow in libspf2 versions below 1.2.11 when processing certain SPF macros can lead to Denial of service and potentially code execution via malicious crafted SPF explanation messages...

HackTool.Win32.Hidd.b Buffer Overflow

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/665a408981294ca49be23096363eec2f.txt Contact: [email protected] Media: twitter.com/malvuln Threat: HackTool.Win32.Hidd.b Vulnerability: Remote Stack Buffer Overflow UDP Datagram Description: The...

fig2dev stack buffer overflow vulnerability

fig2dev is used to convert .fig files to various graphics languages and formats. A stack buffer overflow vulnerability exists in the putarrow component of genpict2e.c in fig2dev version 3.2.7b. An attacker could exploit this vulnerability to cause a denial of service by converting xfig files to...

NETGEAR R6400 Stack Buffer Overflow Vulnerability (CNVD-2022-06699)

NETGEAR R6400 is an AC1750 dual-band WiFi router.A stack buffer overflow vulnerability exists in versions prior to NETGEAR R6400 1.0.1.52. No details of the vulnerability are currently available...

fig2dev stack buffer overflow vulnerability (CNVD-2021-68460)

fig2dev is used to convert .fig files to various graphics languages and formats. A stack buffer overflow vulnerability exists in the genptktext component of genptk.c in fig2dev version 3.2.7b. An attacker could exploit this vulnerability to cause a denial of service by converting xfig files to pt...

PT-2021-7823 · Xmill · Xmill

Name of the Vulnerable Software and Affected Versions: Xmill affected versions not specified Description: The issue is related to a memory boundary error in the HandleFileArg function of the Xmill XML compression tool when processing an XML file. This can be exploited by a local attacker to execu...

Juniper Networks SBR Carrier Service Provider EAP Protocol Code Execution

The vulnerability of the EAP protocol implementation in Juniper Networks SBR Carrier’s service provider server arises due to buffer overflow in the stack. Exploiting this vulnerability allows an attacker to cause service failures or execute arbitrary code by sending specially crafted packets...

espeak-ng:ssml-fuzzer: Stack-buffer-overflow in LoadVoice

Detailed Report: https://oss-fuzz.com/testcase?key=5966373875482624 Project: espeak-ng Fuzzing Engine: libFuzzer Fuzz Target: ssml-fuzzer Job Type: libfuzzerasanespeak-ng Platform Id: linux Crash Type: Stack-buffer-overflow READ Crash Address: 0x7fa6f0969198 Crash State: LoadVoice LoadVoiceVarian...

OSV-2021-1113 Stack-buffer-overflow in getoid

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36962 Crash type: Stack-buffer-overflow READ 8 Crash state: getoid parseobjectid parseasntype...

PT-2021-27695

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a stack-buffer-overflow read crash. The crash involves the functions getoid, parse objectid, and parse asntype. No information is...

PT-2021-3776

Name of the Vulnerable Software and Affected Versions Moxa EDS-405A series Ethernet switch software affected versions not specified Description The issue is related to a buffer overflow on the stack when checking passwords, which could allow a remote attacker to cause a denial of service or execu...

net-snmp:snmp_mib_fuzzer: Stack-buffer-overflow in getoid

Project: git://git.code.sf.net/p/net-snmp/code https://github.com/net-snmp/net-snmp.git Detailed Report: https://oss-fuzz.com/testcase?key=4817499223883776 Project: net-snmp Fuzzing Engine: libFuzzer Fuzz Target: snmpmibfuzzer Job Type: libfuzzerasannet-snmp Platform Id: linux Crash Type:...

OSV-2021-1110 Stack-buffer-overflow in TranslateWord2

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36932 Crash type: Stack-buffer-overflow WRITE 1 Crash state: TranslateWord2 TranslateClause SpeakNextClause...

PT-2021-27694

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a stack-buffer-overflow crash. Technical details about the crash include the functions TranslateWord2, TranslateClause, and...

espeak-ng:ssml-fuzzer: Stack-buffer-overflow in TranslateWord2

Project: https://github.com/espeak-ng/espeak-ng.git Detailed Report: https://oss-fuzz.com/testcase?key=6035710980259840 Project: espeak-ng Fuzzing Engine: libFuzzer Fuzz Target: ssml-fuzzer Job Type: libfuzzerasanespeak-ng Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 1 Crash Address...

FATEK Automation FvDesigner Stack Buffer Overflow Vulnerability

FATEK Automation FvDesigner, a human-computer interaction device from FATEK, has a security vulnerability in FATEK Automation FvDesigner 1.5.88 and earlier versions that could be exploited to execute arbitrary code...