openSUSE: Security Advisory for ImageMagick (openSUSE-SU-2021:0136-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

swift-protobuf:FuzzTextFormat_release: Stack-buffer-overflow in SwiftProtobuf.TextFormatScanner.nextUInt

Project: https://github.com/apple/swift-protobuf.git Detailed Report: https://oss-fuzz.com/testcase?key=4519429842010112 Project: swift-protobuf Fuzzing Engine: libFuzzer Fuzz Target: FuzzTextFormatrelease Job Type: libfuzzerasanswift-protobuf Platform Id: linux Crash Type: Stack-buffer-overflow...

assimp:assimp_fuzzer: Stack-buffer-overflow in Assimp::FileSystemFilter::Cleanup

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=5268692859486208 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzerasanassimp Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address:...

D-Link DAP-2020 security vulnerabilities

The D-Link DAP-2020 is a WiFi range extender from D-Link, a Taiwan-based company.TCP Transmission Control Protocol is a connection-oriented, reliable, byte-stream-based transport layer communication protocol defined by IETF RFC 793. A command injection vulnerability exists in D-Link DAP-2020...

Siemens SCALANCE X-200 Web Server Stack Buffer Overflow Vulnerability

Siemens SCALANCE X switches are used to connect industrial components such as programmable logic controllers PLCs or human machine interfaces HMIs. A stack buffer overflow vulnerability exists in the Siemens SCALANCE X-200 web server. An attacker could exploit this vulnerability to cause a denial...

imagemagick:encoder_heic_fuzzer: Stack-buffer-overflow in void put_epel_hv_fallback<unsigned short>

Detailed Report: https://oss-fuzz.com/testcase?key=6342009100042240 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type: Stack-buffer-overflow READ 2 Crash Address: 0x7ffdb4de224f Crash State: void...

gpac:fuzz_parse: Stack-buffer-overflow in gf_strdup

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=5475902680072192 Project: gpac Fuzzing Engine: afl Fuzz Target: fuzzparse Job Type: aflasangpac Platform Id: linux Crash Type: Stack-buffer-overflow READ Crash Address: 0x7ffcaae88b00 Crash State: gfstrdu...

Out-of-Bounds Write

cairo is vulnerable to out-of-bound write. An attacker may exploit a malicious input file to cairo's image-compositor to cause a stack buffer overflow leading to an out-of-bounds write...

D-Link DIR-878 Stack Buffer Overflow Vulnerability

The D-Link DIR-878 is a wireless router from AUO D-Link of Taiwan, China. A stack buffer overflow vulnerability exists in prog.cgi in the D-Link DIR-878 version 1.30B08. An attacker can exploit this vulnerability without authentication based on a stack buffer overflow...

OSV-2021-597 Stack-buffer-overflow in read_mft_common

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32837 Crash type: Stack-buffer-overflow WRITE 1 Crash state: readmftcommon bool readtagmft1 readb2a...

PT-2021-28189

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a stack-buffer-overflow crash. Technical details about the crash include the read mft common function, read tag mft1 function wit...

skcms:iccprofile_atf: Stack-buffer-overflow in read_mft_common

Project: https://skia.googlesource.com/skcms.git Detailed Report: https://oss-fuzz.com/testcase?key=4565713772740608 Project: skcms Fuzzing Engine: afl Fuzz Target: iccprofileatf Job Type: aflasanskcms Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 1 Crash Address: 0x7ffe15fbcf70 Cras...

D-Link DIR-878 buffer error vulnerability

The D-Link DIR-878 is a wireless router from AUO D-Link of Taiwan, China. A stack buffer overflow vulnerability exists in prog.cgi in the D-Link DIR-878 version 1.30B08. An attacker can exploit this vulnerability without authentication based on a stack buffer overflow...

suricata:fuzz_sigpcap_aware: Stack-buffer-overflow in FPC_next_tcp

Project: https://github.com/OISF/suricata.git Detailed Report: https://oss-fuzz.com/testcase?key=5190230303965184 Project: suricata Fuzzing Engine: libFuzzer Fuzz Target: fuzzsigpcapaware Job Type: libfuzzerasansuricata Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Address:...

CVE-2021-20294

A flaw was found in binutils' readelf program. An attacker who is able to convince a victim using readelf to read a crafted file, could trigger a stack buffer overflow, out-of-bounds write of arbitrary data supplied by the attacker. The highest impact of this flaw is to confidentiality, integrity...

lxc:fuzz-lxc-config-read: Stack-buffer-overflow in parse_byte_size_string

Detailed Report: https://oss-fuzz.com/testcase?key=4819590195576832 Project: lxc Fuzzing Engine: afl Fuzz Target: fuzz-lxc-config-read Job Type: aflasanlxc Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address: 0x7f379b948a3f Crash State: parsebytesizestring...

Security update for grub2 (important)

openSUSE Security Update: Security update for grub2 Announcement ID: openSUSE-SU-2021:0462-1 Rating: important References: 1175970 1176711 1177883 1179264 1179265 1182057 1182262 1182263 1183073 Cross-References: CVE-2020-14372 CVE-2020-25632 CVE-2020-25647 CVE-2020-27749 CVE-2020-27779...

CVE-2020-35492

A flaw was found in cairo's image-compositor.c in all versions prior to 1.17.4. This flaw allows an attacker who can provide a crafted input file to cairo's image-compositor for example, by convincing a user to open a file in an application using cairo, or if an application uses cairo on untruste...

CVE-2020-35492

A flaw was found in cairo's image-compositor.c in all versions prior to 1.17.4. This flaw allows an attacker who can provide a crafted input file to cairo's image-compositor for example, by convincing a user to open a file in an application using cairo, or if an application uses cairo on untruste...

CVE-2020-35492

CVE-2020-35492 affects cairo’s image-compositor.c in all versions before 1.17.4. A crafted input file can cause a stack buffer overflow (out-of-bounds write), with impact on confidentiality, integrity, and availability. Root cause: unchecked memory/write in image-compositor when processing untrus...