DEBIAN-CVE-2022-49401

In the Linux kernel, the following vulnerability has been resolved: mm/pageowner: use strscpy instead of strlcpy current-comm is not a string no guarantee for a zero byte in it. strlcpys1, s2, l is calling strlens2, potentially causing out-of-bound access, as reported by syzbot: detected buffer...

CVE-2022-49401 mm/page_owner: use strscpy() instead of strlcpy()

In the Linux kernel, the following vulnerability has been resolved: mm/pageowner: use strscpy instead of strlcpy current-comm is not a string no guarantee for a zero byte in it. strlcpys1, s2, l is calling strlens2, potentially causing out-of-bound access, as reported by syzbot: detected buffer...

CVE-2022-49401

CVE-2022-49401 pertains to the Linux kernel, where a fault in mm/page_owner handling was fixed: current->comm[] is not guaranteed to be a proper string, and using strlcpy(s1, s2, l) may call strlen(s2) and trigger out-of-bounds access. The fix replaces strlcpy with strscpy() in mm/page_owner.c...

CVE-2022-49401 mm/page_owner: use strscpy() instead of strlcpy()

In the Linux kernel, the following vulnerability has been resolved: mm/pageowner: use strscpy instead of strlcpy current-comm is not a string no guarantee for a zero byte in it. strlcpys1, s2, l is calling strlens2, potentially causing out-of-bound access, as reported by syzbot: detected buffer...

CVE-2022-49401: Out-of-bounds Read

In the Linux kernel, the following vulnerability has been resolved: mm/pageowner: use strscpy instead of strlcpy current-comm is not a string no guarantee for a zero byte in it. strlcpys1, s2, l is calling strlens2, potentially causing out-of-bound access, as reported by syzbot: detected buffer...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from the use of strlcpy instead of strscpy by mm/pageowner...

Astra Linux - уязвимость в linux-5.10

In the Linux kernel, the following vulnerability has been resolved: mm/pageowner: use strscpy instead of strlcpy current-comm is not a string no guarantee for a zero byte in it. strlcpys1, s2, l is calling strlens2, potentially causing out-of-bound access, as reported by syzbot: detected buffer...

xnu:net_fuzzer: Stack-buffer-overflow in strlcpy

Detailed Report: https://oss-fuzz.com/testcase?key=5831143244496896 Project: xnu Fuzzing Engine: libFuzzer Fuzz Target: netfuzzer Job Type: libfuzzerasanxnu Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address: 0x7d6f57f02d2c Crash State: strlcpy sosettcdbg sosetoptlock...

The vulnerability of the strlcpy() function in Netgear Orbi RBR750 router software allows a hacker to cause a service failure.

The vulnerability of the strlcpy function in Netgear Orbi RBR750 router software lies in the fact that the operation escapes the buffer boundaries when processing the lengths of the X-Forwarded-For and X-Forwarded-Proto headers. Exploiting this vulnerability allows a remote attacker to cause...

kernel: mm/page_owner: use strscpy() instead of strlcpy()

In the Linux kernel, the following vulnerability has been resolved: mm/pageowner: use strscpy instead of strlcpy current-comm is not a string no guarantee for a zero byte in it. strlcpys1, s2, l is calling strlens2, potentially causing out-of-bound access, as reported by syzbot: detected buffer...

xnu:net_fuzzer: Stack-buffer-overflow in __wrap_strlcpy

Detailed Report: https://oss-fuzz.com/testcase?key=4947316577271808 Project: xnu Fuzzing Engine: honggfuzz Fuzz Target: netfuzzer Job Type: honggfuzzasanxnu Platform Id: linux Crash Type: Stack-buffer-overflow READ Crash Address: 0x7ffff749092c Crash State: wrapstrlcpy sosettcdbg sosetoptlock...

suricata:fuzz_siginit: Stack-buffer-overflow in strlcpy

Project: https://github.com/OISF/suricata.git Detailed Report: https://oss-fuzz.com/testcase?key=5613236528742400 Project: suricata Fuzzing Engine: honggfuzz Fuzz Target: fuzzsiginit Job Type: honggfuzzasansuricata Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Address:...

net-snmp:snmp_parse_oid_fuzzer: Global-buffer-overflow in __wrap_strlcpy

Detailed Report: https://oss-fuzz.com/testcase?key=4794118825181184 Project: net-snmp Fuzzing Engine: honggfuzz Fuzz Target: snmpparseoidfuzzer Job Type: honggfuzzasannet-snmp Platform Id: linux Crash Type: Global-buffer-overflow WRITE Crash Address: 0x00000a12ea60 Crash State: wrapstrlcpy...

suricata:fuzz_confyamlloadstring: Stack-buffer-overflow in strlcpy

Project: https://github.com/OISF/suricata.git Detailed Report: https://oss-fuzz.com/testcase?key=6544605694001152 Project: suricata Fuzzing Engine: honggfuzz Fuzz Target: fuzzconfyamlloadstring Job Type: honggfuzzasansuricata Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Addres...

opensc:fuzz_pkcs15init: Stack-buffer-overflow in __wrap_strlcpy

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=6738566215761920 Project: opensc Fuzzing Engine: honggfuzz Fuzz Target: fuzzpkcs15init Job Type: honggfuzzasanopensc Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Address:...

samba:fuzz_parse_lpq_entry: Stack-buffer-overflow in __wrap_strlcpy

Project: https://gitlab.com/samba-team/samba.git Detailed Report: https://oss-fuzz.com/testcase?key=5864352197771264 Project: samba Fuzzing Engine: honggfuzz Fuzz Target: fuzzparselpqentry Job Type: honggfuzzasansamba Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Address:...

suricata:fuzz_siginit: Stack-buffer-overflow in strlcpy

Project: https://github.com/OISF/suricata.git Detailed Report: https://oss-fuzz.com/testcase?key=6303734667018240 Project: suricata Fuzzing Engine: honggfuzz Fuzz Target: fuzzsiginit Job Type: honggfuzzasansuricata Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Address:...

net-snmp:snmp_config_fuzzer: Stack-buffer-overflow in __wrap_strlcpy

Project: git://git.code.sf.net/p/net-snmp/code https://github.com/net-snmp/net-snmp.git Detailed Report: https://oss-fuzz.com/testcase?key=5420875685167104 Project: net-snmp Fuzzing Engine: honggfuzz Fuzz Target: snmpconfigfuzzer Job Type: honggfuzzasannet-snmp Platform Id: linux Crash Type:...

opensc:fuzz_pkcs15init: Stack-buffer-overflow in __wrap_strlcpy

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=4691271135657984 Project: opensc Fuzzing Engine: honggfuzz Fuzz Target: fuzzpkcs15init Job Type: honggfuzzasanopensc Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Address:...

net-snmp:snmp_transport_fuzzer: Stack-buffer-overflow in __wrap_strlcpy

Project: git://git.code.sf.net/p/net-snmp/code https://github.com/net-snmp/net-snmp.git Detailed Report: https://oss-fuzz.com/testcase?key=6316417839661056 Project: net-snmp Fuzzing Engine: honggfuzz Fuzz Target: snmptransportfuzzer Job Type: honggfuzzasannet-snmp Platform Id: linux Crash Type:...