223 matches found
Security Bulletin: In _imagingcms.c in Pillow before 10.3.0, a buffer overflow exists because strcpy is used instead of strncpy.
Summary In imagingcms.c in Pillow before 10.3.0, a buffer overflow exists because strcpy is used instead of strncpy. Vulnerability Details CVEID:CVE-2024-28219 DESCRIPTION: In imagingcms.c in Pillow before 10.3.0, a buffer overflow exists because strcpy is used instead of strncpy. CWE:CWE-680:...
EUVD-2003-0459
Malware in sbrugna...
EUVD-2017-7740
Malware in sbrugna...
EUVD-2019-14670
Malware in sbrugna...
EUVD-2020-18099
Malware in sbrugna...
EUVD-2019-3043
Malware in sbrugna...
Linux Distros Unpatched Vulnerability : CVE-2023-46586
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cgi.c in weborf .0.17, 0.18, 0.19, and 0.20 before 1.0 lacks '\0' termination of the path for CGI scripts because strncpy is misused. CVE-2023-46586 Note that...
Linux Distros Unpatched Vulnerability : CVE-2020-25412
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - comline in command.c in gnuplot 5.4 leads to an out-of-bounds-write from strncpy that may lead to arbitrary code execution. CVE-2020-25412 Note that Nessus reli...
ntopng:fuzz_dissect_packet: Heap-buffer-overflow in ___interceptor_strncpy
Project: https://github.com/ntop/ntopng.git Detailed Report: https://oss-fuzz.com/testcase?key=6343024707960832 Project: ntopng Fuzzing Engine: libFuzzer Fuzz Target: fuzzdissectpacket Job Type: libfuzzerasanntopng Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address:...
Linksys E8450 DoS
The vulnerability of the sub422eb8 function in the Linksys E8450 Wi-Fi router’s microprogramming system is related to the copying of buffers without checking the size of the input data during the strncpy operation. Exploiting this vulnerability can allow an attacker to cause a service failure...
Linksys E8450 Sub_422eb8 Code Execution
The vulnerability of the sub422eb8 function in Linksys E8450 Wi-Fi routers’ microprogramming software is related to the copying of buffers without checking the size of the input data during the processing of the strncpy parameter. Exploiting this vulnerability allows an attacker to execute...
PT-2024-10253 · Linksys · Linksys E8450
Name of the Vulnerable Software and Affected Versions: Linksys E8450 version 1.2.00.360516 Description: The issue is related to a buffer overflow vulnerability. The anonymous protect status field is copied to the stack without length verification, which can be exploited by a remote attacker to...
PT-2024-10259
Name of the Vulnerable Software and Affected Versions Linksys E8450 version 1.2.00.360516 Description The issue is related to a buffer overflow vulnerability. The ipv6 protect status field is copied to the stack without length verification, which can lead to a buffer overflow. This potentially...
AZL-51837 CVE-2024-50067 affecting package kernel 5.15.200.1-1
In the Linux kernel, the following vulnerability has been resolved: uprobe: avoid out-of-bounds memory access of fetching args Uprobe needs to fetch args into a percpu buffer, and then copy to ring buffer to avoid non-atomic context problem. Sometimes user-space strings, arrays can be very large,...
DEBIAN-CVE-2023-46586
cgi.c in weborf .0.17, 0.18, 0.19, and 0.20 before 1.0 lacks '\0' termination of the path for CGI scripts because strncpy is misused...
CVE-2023-46586
cgi.c in weborf .0.17, 0.18, 0.19, and 0.20 before 1.0 lacks '\0' termination of the path for CGI scripts because strncpy is misused...
CVE-2023-46586
cgi.c in weborf .0.17, 0.18, 0.19, and 0.20 before 1.0 lacks '\0' termination of the path for CGI scripts because strncpy is misused...
CVE-2023-46586
cgi.c in weborf .0.17, 0.18, 0.19, and 0.20 before 1.0 lacks '\0' termination of the path for CGI scripts because strncpy is misused...
Weborf security vulnerabilities
Weborf is a lightweight web server by the individual developer of ltworf. A security vulnerability exists in Weborf versions prior to 1.0, which stems from a misuse of strncpy and a missing terminator in cgi.c for CGI script paths...
