PT-2022-30925

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.3 Description The issue concerns the use of strlcpy instead of strscpy in mm/page owner. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior t...

The vulnerability of the hd_strlcpy() function in software for converting web pages using htmldoc, related to writing beyond the buffer boundary, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the hdstrlcpy function in software for converting web pages to htmldoc format is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

osquery:osqueryfuzz-config: Crash in yara_strutils_strlcpy

Project: https://github.com/osquery/osquery.git Detailed Report: https://oss-fuzz.com/testcase?key=5580095274745856 Project: osquery Fuzzing Engine: libFuzzer Fuzz Target: osqueryfuzz-config Job Type: libfuzzerasanosquery Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00000348b420...

PT-2024-11452

Name of the Vulnerable Software and Affected Versions Linux kernel versions 5.11 and later, built with CONFIG FORTIFY SOURCE, are affected. Description The issue arises from the fact that strings for cluster stack and cluster name are not guaranteed to be null terminated in the disk representatio...

frr:zebra: Heap-buffer-overflow in strlcpy

Project: https://github.com/FRRouting/frr.git Detailed Report: https://oss-fuzz.com/testcase?key=5943338019717120 Project: frr Fuzzing Engine: libFuzzer Fuzz Target: zebra Job Type: libfuzzerasanfrr Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x6060000000bc Crash State...

OSV-2021-679 Heap-buffer-overflow in strlcpy

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33556 Crash type: Heap-buffer-overflow WRITE Crash state: strlcpy parselxcmntopts setconfigrootfsoptions...

PT-2021-28226

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap buffer overflow error, as indicated by the crash type 'Heap-buffer-overflow WRITE'. The crash state involves functions suc...

lxc:fuzz-lxc-define-load: Heap-buffer-overflow in strlcpy

Project: https://github.com/lxc/lxc.git Detailed Report: https://oss-fuzz.com/testcase?key=6387887164751872 Project: lxc Fuzzing Engine: libFuzzer Fuzz Target: fuzz-lxc-define-load Job Type: libfuzzerasanlxc Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address: 0x629000004780...

PT-2020-22289

Name of the Vulnerable Software and Affected Versions OpenSSL affected versions not specified Description The issue is related to a heap-buffer-overflow write error. Technical details about the crash include the involvement of OPENSSL strlcpy, OPENSSL strlcat, and ERR add error vdata functions...

PT-2019-6156 · Htmldoc +2 · Htmldoc +2

Name of the Vulnerable Software and Affected Versions: htmldoc version 1.9.7 Description: The issue is related to a buffer overflow in the hd strlcpy function, which can be exploited by a remote attacker to access confidential data, compromise data integrity, and cause a denial of service. This c...

PT-2019-13292

Name of the Vulnerable Software and Affected Versions Codedoc version 3.2 Description The issue is related to a stack-based buffer overflow in the add variable function in codedoc.c, specifically involving the codedoc strlcpy function. Recommendations For Codedoc version 3.2, consider restricting...

UDFclient Buffer Overflow Vulnerability

UDFclient is a user-implemented solution for the UDF file system defined by the OSTA group. A buffer overflow vulnerability exists in the custom strlcpy implementation in versions of UDFclient prior to 0.8.8. An attacker could exploit this vulnerability to cause a denial of service or execute...

Design/Logic Flaw

The UDFclient before 0.8.8 custom strlcpy implementation has a buffer overflow. UDFclient's strlcpy is used only on systems with a C library e.g., glibc that lacks its own strlcpy...

CVE-2017-8305

The UDFclient before 0.8.8 custom strlcpy implementation has a buffer overflow. UDFclient's strlcpy is used only on systems with a C library e.g., glibc that lacks its own strlcpy...

CVE-2017-8305

The UDFclient before 0.8.8 custom strlcpy implementation has a buffer overflow. UDFclient's strlcpy is used only on systems with a C library e.g., glibc that lacks its own strlcpy...

DEBIAN-CVE-2017-8305

The UDFclient before 0.8.8 custom strlcpy implementation has a buffer overflow. UDFclient's strlcpy is used only on systems with a C library e.g., glibc that lacks its own strlcpy...

UBUNTU-CVE-2017-8305

The UDFclient before 0.8.8 custom strlcpy implementation has a buffer overflow. UDFclient's strlcpy is used only on systems with a C library e.g., glibc that lacks its own strlcpy...

CVE-2017-8305

The UDFclient before 0.8.8 custom strlcpy implementation has a buffer overflow. UDFclient's strlcpy is used only on systems with a C library e.g., glibc that lacks its own strlcpy...

CVE-2017-8305

The CVE-2017-8305 entry concerns UDFclient’s custom strlcpy implementation, which has a buffer overflow in versions before 0.8.8. The vulnerability affects UDFclient where the built-in strlcpy is used only on systems whose C library (e.g., glibc) lacks strlcpy. Upgrade to 0.8.8 or later to mitiga...

CVE-2017-8305

The UDFclient before 0.8.8 custom strlcpy implementation has a buffer overflow. UDFclient's strlcpy is used only on systems with a C library e.g., glibc that lacks its own strlcpy...