779 matches found
PT-2024-9236 · Sonicwall · Sonicwall Sma100 Sslvpn
Name of the Vulnerable Software and Affected Versions: SonicWall SMA100 SSLVPN versions prior to 10.2.1.13-72sv Description: The issue is related to a heap-based buffer overflow vulnerability in the SonicWall SMA100 SSLVPN, caused by the use of strcpy. This allows remote authenticated attackers t...
SUSE CVE-2024-52949
iptraf-ng 1.2.1 has a stack-based buffer overflow. In src/ifaces.c, the strcpy function consistently fails to control the size, and it is consequently possible to overflow memory on the stack...
Astra Linux – Vulnerability in pillow
In imagingcms.c within Pillow, before version 10.3.0, a buffer overflow exists because strcpy is used instead of strncpy...
Medium: python-pillow
Issue Overview: In imagingcms.c, two strcpy calls were able to copy too much data into fixed length strings. This has been fixed by using strncpy instead. CVE-2024-28219 Affected Packages: python-pillow Issue Correction: Run dnf update python-pillow --releasever 2023.6.20241111 to update your...
curl: Buffer overflow in strcpy
Vulnerability description not provided...
CVE-2024-49869
In the Linux kernel, the following vulnerability has been resolved: btrfs: send: fix buffer overflow detection when copying path to cache entry Starting with commit c0247d289e73 "btrfs: send: annotate struct namecacheentry with countedby" we annotated the variable length array "name" from the...
CVE-2024-44415
A vulnerability was discovered in DI8200-16.07.26A1, There is a buffer overflow in the dbsrvasp function; The strcpy function is executed without checking the length of the string, leading to a buffer overflow...
CVE-2024-44415
A vulnerability was discovered in DI8200-16.07.26A1, There is a buffer overflow in the dbsrvasp function; The strcpy function is executed without checking the length of the string, leading to a buffer overflow...
PT-2024-31924 · Km08-708H +1 · Km08-708H +1
Name of the Vulnerable Software and Affected Versions: KM08-708H version 1.1 Description: A buffer overflow issue exists due to the strcpy function being executed without checking the length of the string in the sub 445BDC function within the /usr/sbin/goahead program. This leads to a buffer...
CVE-2024-46215
KM08-708H-v1.1 contains a buffer overflow in the /usr/sbin/goahead binary, caused by unsafe use of strcpy in the sub_445BDC() function. This vulnerability is documented across multiple feeds (NVD/Red Hat/CVE records) and affects the KM08-708H device. Exploitation details are not provided in these...
CVE-2024-46215
A vulnerability was discovered in KM08-708H-v1.1, There is a buffer overflow in the sub445BDC function within the /usr/sbin/goahead program; The strcpy function is executed without checking the length of the string, leading to a buffer overflow...
D-Link DI_8200 安全漏洞
The D-Link DI8200 is an enterprise router from China's AUO D-Link. The D-Link DI8200 suffers from a buffer overflow vulnerability that stems from the strcpy function not checking the length of a string during execution. No details of the vulnerability are provided at this time...
GIGA WIFI Wave KM08-708H 安全漏洞
GIGA WIFI Wave KM08-708H is a wireless device from GIGA WIFI Wave. A security vulnerability exists in the GIGA WIFI Wave KM08-708H v1.1, which originates from a buffer overflow when the strcpy function is executed without checking the length of the string...
CVE-2024-41590
Several CGI endpoints are vulnerable to buffer overflows, by authenticated users, because of missing bounds checking on parameters passed through POST requests to the strcpy function on DrayTek Vigor310 devices through 4.3.2.6...
CVE-2024-41590
Several CGI endpoints are vulnerable to buffer overflows, by authenticated users, because of missing bounds checking on parameters passed through POST requests to the strcpy function on DrayTek Vigor310 devices through 4.3.2.6...
CVE-2024-41590
Several CGI endpoints are vulnerable to buffer overflows, by authenticated users, because of missing bounds checking on parameters passed through POST requests to the strcpy function on DrayTek Vigor310 devices through 4.3.2.6...
CVE-2024-41590
CVE-2024-41590 affects DrayTek Vigor310 routers, where the web UI CGI endpoints expose a buffer overflow via missing bounds checks on POST parameters passed to strcpy. Affected firmware includes versions up to 4.3.2.6, and exploitation requires authenticated access. The Red Hat/NCSC/PT-Security e...
DrayTek Vigor 3910 安全漏洞
The DrayTek Vigor 3910 is a high-performance router for enterprise networks from China-based DrayTek. A security vulnerability exists in the DrayTek Vigor 3910 version 4.3.2.6 and earlier versions, which stems from a missing boundary check in the strcpy function...