199 matches found
Exim 缓冲区错误漏洞
Exim was developed at Cambridge University as a Message Transfer Agent MTA for Unix systems connected to the Internet. A heap buffer overflow vulnerability exists in Exim in parsefixphrase, which stems from interpreting negative sizes in strncpy, and can be exploited by an attacker to elevate...
PT-2020-6038
Name of the Vulnerable Software and Affected Versions Exim versions prior to 4.94.2 Description The issue is caused by a heap-based buffer overflow due to the mishandling of negative sizes in strncpy, potentially allowing privilege escalation from any user to root. This occurs because of the...
DEBIAN-CVE-2020-25412
comline in command.c in gnuplot 5.4 leads to an out-of-bounds-write from strncpy that may lead to arbitrary code execution...
UBUNTU-CVE-2020-25412
comline in command.c in gnuplot 5.4 leads to an out-of-bounds-write from strncpy that may lead to arbitrary code execution...
CVE-2020-25412
comline in command.c in gnuplot 5.4 leads to an out-of-bounds-write from strncpy that may lead to arbitrary code execution...
Type confusion
comline in command.c in gnuplot 5.4 leads to an out-of-bounds-write from strncpy that may lead to arbitrary code execution...
CVE-2020-25412
comline in command.c in gnuplot 5.4 leads to an out-of-bounds-write from strncpy that may lead to arbitrary code execution...
CVE-2020-25412
CVE-2020-25412 affects gnuplot 5.4, where com_line() in command.c performs an out-of-bounds write via strncpy(), enabling arbitrary code execution. Impact is high (remote/vector: network; no user interaction). Several advisories reference this issue among other Gnuplot memory bugs and note that a...
CVE-2020-25412: Out-of-bounds Write
comline in command.c in gnuplot 5.4 leads to an out-of-bounds-write from strncpy that may lead to arbitrary code execution...
sleuthkit:sleuthkit_fls_fat_fuzzer: Strncpy-param-overlap in tsk_fs_name_copy
Project: https://github.com/sleuthkit/sleuthkit.git Detailed Report: https://oss-fuzz.com/testcase?key=5764896327991296 Project: sleuthkit Fuzzing Engine: honggfuzz Fuzz Target: sleuthkitflsfatfuzzer Job Type: honggfuzzasansleuthkit Platform Id: linux Crash Type: Strncpy-param-overlap Crash...
ImageMagick: stack-based buffer overflow at coders/pnm.c in WritePNMImage because of a misplaced strncpy and an off-by-one error
A stack-based buffer overflow was discovered in ImageMagick in the way it writes PNM images due to a misplaced strncpy and off-by-one errors. Applications compiled against ImageMagick libraries that accept untrustworthy images or write PNM images may be vulnerable to this flaw. An attacker could...
CVE-2019-5065
An exploitable information disclosure vulnerability exists in the packet-parsing functionality of Blynk-Library v0.6.1. A specially crafted packet can cause an unterminated strncpy, resulting in information disclosure. An attacker can send a packet to trigger this vulnerability...
Information disclosure
An exploitable information disclosure vulnerability exists in the packet-parsing functionality of Blynk-Library v0.6.1. A specially crafted packet can cause an unterminated strncpy, resulting in information disclosure. An attacker can send a packet to trigger this vulnerability...
CVE-2019-5065
An exploitable information disclosure vulnerability exists in the packet-parsing functionality of Blynk-Library v0.6.1. A specially crafted packet can cause an unterminated strncpy, resulting in information disclosure. An attacker can send a packet to trigger this vulnerability...
CVE-2019-5065: Out-of-bounds Read
An exploitable information disclosure vulnerability exists in the packet-parsing functionality of Blynk-Library v0.6.1. A specially crafted packet can cause an unterminated strncpy, resulting in information disclosure. An attacker can send a packet to trigger this vulnerability...
Blynk inc. Blynk-Library BlynkProtocol<Transp>::processInput() information disclosure vulnerability
Summary An exploitable information disclosure vulnerability exists in the packet-parsing functionality of Blynk-Library v0.6.1. A specially crafted packet can cause an unterminated strncpy, resulting in information disclosure. An attacker can send a packet to trigger this vulnerability. Tested...
freeimage:load_from_memory_fuzzer: Stack-buffer-overflow in strncpy
Detailed Report: https://oss-fuzz.com/testcase?key=5633780185825280 Project: freeimage Fuzzing Engine: libFuzzer Fuzz Target: loadfrommemoryfuzzer Job Type: libfuzzerasanfreeimage Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Address: 0x7f89f7151530 Crash State: strncpy...
freeimage:load_from_memory_fuzzer: Stack-buffer-overflow in strncpy
Detailed Report: https://oss-fuzz.com/testcase?key=5131488567230464 Project: freeimage Fuzzing Engine: libFuzzer Fuzz Target: loadfrommemoryfuzzer Job Type: libfuzzerasanfreeimage Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Address: 0x7f152a437530 Crash State: strncpy...