Lucene search
Veracode Vulnerability DatabaseVERACODE:32782HistoryNov 01, 2021 - 10:36 a.m.
Heap-Based Buffer Overflow
2021-11-0110:36:33
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11
libmysofa vulnerability
heap-based buffer overflow
dataobject.c function
EPSS
0.003
Percentile
71.5%
libmysofa.so is vulnerable to heap-based buffer overflow. The lack of size check in the readOHDRHeaderMessageDataLayout function in dataobject.c causes a heap-based buffer overflow which could result in an application crash.
References
github.com/hoene/libmysofa/commit/890400ebd092c574707d0c132124f8ff047e20e1
github.com/hoene/libmysofa/issues/165
github.com/hoene/libmysofa/pull/166
huntr.dev/bounties/7ca8d9ea-e2a6-4294-af28-70260bb53bc1
lists.fedoraproject.org/archives/list/[email protected]/message/PGQ45S4RH7MC42NHTAGOIHYR4C5IRTMZ/
lists.fedoraproject.org/archives/list/[email protected]/message/WGY7TAZX2M4NYXXGNHIBBKKN5XMSMKQ4/
Related
nessus
nessus
ubuntucve
ubuntucve
CVE-2021-3756
2021-10-29 00:00:00
prion
prion
Heap overflow
2021-10-29 16:15:00
nvd
nvd
CVE-2021-3756
2021-10-29 16:15:07
cvelist
cvelist
CVE-2021-3756 Heap-based Buffer Overflow in hoene/libmysofa
2021-10-29 15:55:10
huntr
huntr
Heap-based Buffer Overflow in hoene/libmysofa
2021-09-27 13:04:04
osv
osv
libmysofa vulnerability
2021-12-08 19:05:50
CVE-2021-3756
2021-10-29 16:15:07
debiancve
debiancve
CVE-2021-3756
2021-10-29 16:15:07
cve
cve
CVE-2021-3756
2021-10-29 16:15:07
openvas
openvas
Ubuntu: Security Advisory (USN-5184-1)
2023-01-27 00:00:00
Fedora: Security Advisory for libmysofa (FEDORA-2021-36ac17e5ac)
2021-12-10 00:00:00
Fedora: Security Advisory for libmysofa (FEDORA-2021-28b495e9e0)
2021-12-20 00:00:00
freebsd
freebsd
libmysoft -- Heap-based buffer overflow vulnerability
2021-09-27 00:00:00
ubuntu
ubuntu
libmysofa vulnerability
2021-12-08 00:00:00
fedora
fedora
[SECURITY] Fedora 35 Update: libmysofa-1.2.1-1.fc35
2021-12-10 01:22:42
[SECURITY] Fedora 34 Update: libmysofa-1.2.1-1.fc34
2021-12-16 01:14:05
rosalinux
rosalinux
Advisory ROSA-SA-2023-2256
2023-10-21 16:03:37