SUSE CVE-2018-7485

The SQLWriteFileDSN function in odbcinst/SQLWriteFileDSN.c in unixODBC 2.3.5 has strncpy arguments in the wrong order, which allows attackers to cause a denial of service or possibly have unspecified other impact...

SUSE CVE-2019-11365

An issue was discovered in atftpd in atftp 0.7.1. A remote attacker may send a crafted packet triggering a stack-based buffer overflow due to an insecurely implemented strncpy call. The vulnerability is triggered by sending an error packet of 3 bytes or fewer. There are multiple instances of this...

SUSE CVE-2019-13283

In Xpdf 4.01.01, a heap-based buffer over-read could be triggered in strncpy from FoFiType1::parse in fofi/FoFiType1.cc because it does not ensure the source string has a valid length before making a fixed-length copy. It can, for example, be triggered by sending a crafted PDF document to the...

SUSE CVE-2019-13305

ImageMagick 7.0.8-50 Q16 has a stack-based buffer overflow at coders/pnm.c in WritePNMImage because of a misplaced strncpy and an off-by-one error...

SUSE CVE-2020-25412

comline in command.c in gnuplot 5.4 leads to an out-of-bounds-write from strncpy that may lead to arbitrary code execution...

SUSE CVE-2020-28013

Exim 4 before 4.94.2 allows Heap-based Buffer Overflow because it mishandles "-F '.'" on the command line, and thus may allow privilege escalation from any user to root. This occurs because of the interpretation of negative sizes in strncpy...

PT-2022-35481 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.150 Description: The issue is related to a stack-out-of-bounds condition in the strncpy function. This is an automated identification of a potential security issue, and its actual impact and attack...

PT-2022-34994 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: The issue is related to a stack-out-of-bounds condition in the strncpy function. This is an automated identification of a potential security issue, and its actual impact and attack plausibili...

PT-2022-35272

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.75 Description The issue is related to a stack-out-of-bounds condition in the strncpy function. This is an automated identification of a potential security issue, and its actual impact and plausibility of...

PT-2022-35633

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.220 Description The issue is related to a stack-out-of-bounds condition in the strncpy function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PicoC 缓冲区错误漏洞

PicoC is a lightweight C interpreter. A buffer overflow vulnerability exists in PicoC version 3.2.2, which stems from a boundary error in the StringStrncpy function in cstdlib/string.c when ExpressionParseFunctionCall is called while processing untrusted input. An attacker can exploit the...

CVE-2022-37234

Netgear Nighthawk AC1900 Smart WiFi Dual Band Gigabit Router R7000-V1.0.11.13410.2.119 is vulnerable to Buffer Overflow via the wl binary in firmware. There is a stack overflow vulnerability caused by strncpy...

CVE-2022-37234

Netgear Nighthawk AC1900 Smart WiFi Dual Band Gigabit Router R7000-V1.0.11.13410.2.119 is vulnerable to Buffer Overflow via the wl binary in firmware. There is a stack overflow vulnerability caused by strncpy...

NETGEAR R7000 缓冲区错误漏洞

NETGEAR R7000 is a wireless router from NETGEAR. A security vulnerability exists in the NETGEAR R7000 version V1.0.11.13410.2.119, which originates from a stack overflow vulnerability due to strncpy via a buffer overflow susceptibility in the wl binary in the firmware...

CVE-2022-37234: Out-of-bounds Write

Netgear Nighthawk AC1900 Smart WiFi Dual Band Gigabit Router R7000-V1.0.11.13410.2.119 is vulnerable to Buffer Overflow via the wl binary in firmware. There is a stack overflow vulnerability caused by strncpy...

CVE-2022-36588

In D-Link DAP1650 v1.04 firmware, the fileaccess.cgi program in the firmware has a buffer overflow vulnerability caused by strncpy...

CVE-2022-36588

In D-Link DAP1650 v1.04 firmware, the fileaccess.cgi program in the firmware has a buffer overflow vulnerability caused by strncpy...

CVE-2022-36588

In D-Link DAP1650 v1.04 firmware, the fileaccess.cgi program in the firmware has a buffer overflow vulnerability caused by strncpy...

Buffer overflow

In D-Link DAP1650 v1.04 firmware, the fileaccess.cgi program in the firmware has a buffer overflow vulnerability caused by strncpy...

CVE-2022-36588

CVE-2022-36588 affects D-Link DAP1650 v1.04 firmware, specifically the fileaccess.cgi program. The vulnerability is a buffer overflow caused by strncpy in that binary, enabling potential memory corruption. Public documents consistently reference this as a buffer overflow issue in fileaccess.cgi, ...