CVE-2018-16865

An allocation of memory without limits, that could result in the stack clashing with another memory region, was discovered in systemd-journald when many entries are sent to the journal socket. A local attacker, or a remote one if systemd-journal-remote is used, may use this flaw to crash...

Nintendo: NEX: Stack overflow in UnicodeToUtf8

Vulnerability description not provided...

CVE-2018-16742

An issue was discovered in mgetty before 1.2.1. In contrib/scrts.c, a stack-based buffer overflow can be triggered via a command-line parameter...

CVE-2017-1083

In FreeBSD before 11.2-RELEASE, a stack guard-page is available but is disabled by default. This results in the possibility a poorly written process could be cause a stack overflow...

MGASA-2018-0255 Updated pdns packages fix security vulnerability

A stack-based buffer overflow in the dnsreplay tool occurring when replaying a specially crafted PCAP file with the --ecs-stamp option enabled, leading to a denial of service or potentially arbitrary code execution CVE-2018-1046...

NASA CFITSIO 'ffgphd' and 'ffgtkn' function stack buffer overflow vulnerability

NASA CFITSIO is a FITS file subroutine library for reading and writing data files in FITS Flexible Image Transfer System format. A stack buffer overflow vulnerability exists in the 'ffgphd' and 'ffgtkn' functions in NASA CFITSIO version 3.42. An attacker could exploit this vulnerability by sendin...

CVE-2018-7729

An issue was discovered in Exempi through 2.4.4. There is a stack-based buffer over-read in the PostScriptMetaHandler::ParsePSFile function in XMPFiles/source/FileHandlers/PostScriptHandler.cpp...

MGASA-2017-0372 Updated openvpn packages fix security vulnerability

The bounds check in readkey was performed after using the value, instead of before. If 'key-method 1' is used, this allowed an attacker to send a malformed packet to trigger a stack buffer overflow. Note that 'key-method 1' has been replaced by 'key method 2' as the default in OpenVPN 2.0...

Ubuntu: Security Advisory (USN-3324-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MGASA-2016-0390 Updated gnuchess packages fix security vulnerability

gnuchess before 6.2.4 is vulnerable to a stack buffer overflow related to user move input, where 160 characters of input can crash gnuchess CVE-2015-8972...

SUSE-SU-2016:2670-1 Security update for gd

This update for gd fixes the following issues: - CVE-2016-8670: Stack Buffer Overflow in GD dynamicGetbuf bsc1004924 - CVE-2016-6911: Check for out-of-bound read in dynamicGetbuf bsc1005274...

SUSE-SU-2016:2618-1 Security update for quagga

This update for quagga fixes the following issue: - CVE-2016-1245: Fix for a zebra stack overrun in IPv6 RA receive code bsc1005258...

CVE-2014-9090

The dodoublefault function in arch/x86/kernel/traps.c in the Linux kernel through 3.17.4 does not properly handle faults associated with the Stack Segment SS segment register, which allows local users to cause a denial of service panic via a modifyldt system call, as demonstrated by sigreturn32 i...

Updated socat package fixes security vulnerability

Due to a missing check in socat before 2.0.0-b7 during assembly of the HTTP request line, a long target server name in the documentation in the PROXY-CONNECT address can cause a stack buffer overrun. Exploitation requires that the attacker is able to provide the target server name to the...

UnrealIRCd 3.2.8.1 Stack Overflow

Exploit Title: UnrealIRCd local configuration stack overflow Date: 20/10/2011 Author: DiGMi http://digmi.org Software Link: http://www.unrealircd.com/downloads/Unreal3.2.8.1.exe Version: 3.2.8.1 and probably every previous version Tested on: Windows 7 Details and explanations can be found here:...

UnrealIRCd 3.2.8.1 - Local Configuration Stack Overflow

Exploit Title: UnrealIRCd local configuration stack overflow Date: 20/10/2011 Author: DiGMi http://digmi.org Software Link: http://www.unrealircd.com/downloads/Unreal3.2.8.1.exe Version: 3.2.8.1 and probably every previous version Tested on: Windows 7 Details and explanations can be found here:...

JAD java decompiler 1.5.8g (.class) Stack Overflow DoS

Exploit for unknown platform in category local exploits ====================================================== JAD java decompiler 1.5.8g .class Stack Overflow DoS ====================================================== !/usr/bin/env python JAD java decompiler 1.5.8g .class Stack Overflow DoS Test...

sudosh -- buffer overflow

ISS reports: sudosh2 and sudosh3 are vulnerable to a stack-based buffer overflow, caused by improper bounds checking by the replay function. By persuading a victim to replay a specially-crafted recorded sudo session, a local attacker could overflow a buffer and execute arbitrary code on the syste...

PT-2009-5970 · Httpdx · Httpdx

Name of the Vulnerable Software and Affected Versions: httpdx versions 1.4 through 1.4.3 Description: The issue is a stack-based buffer overflow in the h handlepeer function, located in http.cpp. This can be triggered by remote attackers sending a long HTTP GET request, potentially causing a deni...

openSUSE 10 Security Update : audacity (audacity-5997)

Specially crafted GRO files could cause a stack based buffer in audacity CVE-2009-0490. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update audacity-5997. The text description of this plugin is C...