OSV-2021-261 Stack-buffer-overflow in flb_sds_cat

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30093 Crash type: Stack-buffer-overflow READ Crash state: flbsdscat ratranslatekeymap flbratranslate...

PT-2021-28038

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a stack-buffer-overflow read crash. The crash involves the functions flb sds cat, ra translate keymap, and flb ra translate. No...

CVE-2021-0362: Out-of-bounds Write

In aee, there is a possible memory corruption due to a stack buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-11; Patch ID: ALPS05457070...

PT-2021-13041

Name of the Vulnerable Software and Affected Versions: Android version Android-11 Description: The issue is related to a possible memory corruption due to a stack buffer overflow in the aee component. This could lead to local escalation of privilege, with System execution privileges needed. User...

imagemagick:encoder_heic_fuzzer: Stack-buffer-overflow in void put_epel_hv_fallback<unsigned short>

Detailed Report: https://oss-fuzz.com/testcase?key=6548145850941440 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type: Stack-buffer-overflow READ 2 Crash Address: 0x7ffcd9ad6a91 Crash State: void...

CentOS 8 : cups (CESA-2020:1765)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:1765 advisory. - cups: stack-buffer-overflow in libcups's asn1gettype function CVE-2019-8675 - cups: stack-buffer-overflow in libcups's asn1getpacked function...

CentOS 8 : squid:4 (CESA-2020:2041)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:2041 advisory. - squid: improper check for new member in ESIExpression::Evaluate allows for stack buffer overflow CVE-2019-12519 - squid: parsing of header...

fluent-bit:flb-it-fuzz-record_ac_fuzzer_OSSFUZZ: Stack-buffer-overflow in flb_sds_cat

Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=4585689394053120 Project: fluent-bit Fuzzing Engine: honggfuzz Fuzz Target: flb-it-fuzz-recordacfuzzerOSSFUZZ Job Type: honggfuzzasanfluent-bit Platform Id: linux Crash Type: Stack-buffer-overflow...

matio:matio_fuzzer: Stack-buffer-overflow in H5S_extent_get_dims

Project: git://git.code.sf.net/p/matio/matio Detailed Report: https://oss-fuzz.com/testcase?key=4926969642876928 Project: matio Fuzzing Engine: afl Fuzz Target: matiofuzzer Job Type: aflasanmatio Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 8 Crash Address: 0x7ffd7b7a3568 Crash Stat...

OSV-2021-257 Stack-buffer-overflow in kdf_sshkdf_set_ctx_params

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30037 Crash type: Stack-buffer-overflow READ 1 Crash state: kdfsshkdfsetctxparams EVPKDFCTXsetparams cryptofuzz::module::OpenSSL::OpKDFSSH...

PT-2021-28035

Name of the Vulnerable Software and Affected Versions OpenSSL affected versions not specified Description The issue is related to a stack-buffer-overflow read crash. Technical details about the crash include the function names kdf sshkdf set ctx params and EVP KDF CTX set params, which are part o...

WS-2021-0148

Fluent Bit is vulnerable to Stack-buffer-overflow , related tosrc/flbrecordaccessor.c...

cryptofuzz:cryptofuzz-openssl-noasm: Stack-buffer-overflow in kdf_sshkdf_set_ctx_params

Detailed Report: https://oss-fuzz.com/testcase?key=6575133781262336 Project: cryptofuzz Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-openssl-noasm Job Type: libfuzzerasancryptofuzz Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address: 0x7ffdddf6df91 Crash State:...

CentOS 8 : thunderbird (CESA-2019:3237)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2019:3237 advisory. - Mozilla: Use-after-free when creating index updates in IndexedDB CVE-2019-11757 - Mozilla: Potentially exploitable crash due to 360 Total Security...

CentOS 8 : libvorbis (CESA-2019:3703)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2019:3703 advisory. - libvorbis: heap buffer overflow in mapping0forward function CVE-2018-10392 - libvorbis: stack buffer overflow in barknoisehybridmp function...

CentOS 8 : firefox (CESA-2019:3196)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2019:3196 advisory. - Mozilla: Use-after-free when creating index updates in IndexedDB CVE-2019-11757 - Mozilla: Potentially exploitable crash due to 360 Total Security...

CentOS 8 : thunderbird (CESA-2019:1623)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2019:1623 advisory. - libical: Heap buffer over read in icalparser.c parsergetnextchar CVE-2019-11703 - libical: Heap buffer overflow in icalmemorystrdupanddequote functio...

CentOS 8 : curl (CESA-2019:3701)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2019:3701 advisory. - curl: NTLM type-2 heap out-of-bounds buffer read CVE-2018-16890 - wget: Information exposure in setfilemetadata function in xattr.c CVE-2018-20483 -...

relic:cryptofuzz-relic: Stack-buffer-overflow in bn_rec_slw

Project: https://github.com/relic-toolkit/relic.git Detailed Report: https://oss-fuzz.com/testcase?key=5658029280329728 Project: relic Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-relic Job Type: libfuzzerasanrelic Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 1 Crash Address:...

Sailfish Buffer Overflow

The vulnerability of the Sailfish Browser application for the “Avora” operating system is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to cause service failures or execute arbitrary code...