CWE-122 Archives - CVE Vulnerability

CVE-2018-4833

Sun, 26 Feb 2023 06:50:05 +0000

A vulnerability has been identified in RFID 181EIP (All versions), RUGGEDCOM Win (V4.4, V4.5, V5.0, and V5.1), SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < V5.2.3), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.4.1), SCALANCE X-200RNA switch family (All versions < V3.2.6), SCALANCE X-300 switch family (incl. SIPLUS NET variants) (All versions < V4.1.3), SCALANCE X408 (All versions < V4.1.3), SCALANCE X414 (All versions), SIMATIC RF182C (All versions). Unprivileged remote attackers located in the same local network segment (OSI Layer 2) could gain remote code execution on the affected products by sending a specially crafted DHCP response to a client's DHCP request.

The post CVE-2018-4833 appeared first on CVE Vulnerability.

CVE-2018-14653

Sun, 26 Feb 2023 06:46:24 +0000

The Gluster file system through versions 4.1.4 and 3.12 is vulnerable to a heap-based buffer overflow in the ‘__server_getspec’ function via the ‘gf_getspec_req’ RPC message. A remote authenticated attacker could exploit this to cause a denial of service or other potential unspecified impact.

The post CVE-2018-14653 appeared first on CVE Vulnerability.

CVE-2018-1123

Sun, 26 Feb 2023 06:45:09 +0000

procps-ng before version 3.3.15 is vulnerable to a denial of service in ps via mmap buffer overflow. Inbuilt protection in ps maps a guard page at the end of the overflowed buffer, ensuring that the impact of this flaw is limited to a crash (temporary denial of service).

The post CVE-2018-1123 appeared first on CVE Vulnerability.

CVE-2018-10893

Sun, 26 Feb 2023 06:45:02 +0000

Multiple integer overflow and buffer overflow issues were discovered in spice-client’s handling of LZ compressed frames. A malicious server could cause the client to crash or, potentially, execute arbitrary code.

The post CVE-2018-10893 appeared first on CVE Vulnerability.

CVE-2018-10840

Sun, 26 Feb 2023 06:45:01 +0000

Linux kernel is vulnerable to a heap-based buffer overflow in the fs/ext4/xattr.c:ext4_xattr_set_entry() function. An attacker could exploit this by operating on a mounted crafted ext4 image.

The post CVE-2018-10840 appeared first on CVE Vulnerability.

CVE-2020-7586

Sun, 26 Feb 2023 06:43:06 +0000

A vulnerability has been identified in SIMATIC PCS 7 V8.2 and earlier (All versions), SIMATIC PCS 7 V9.0 (All versions < V9.0 SP3), SIMATIC PDM (All versions < V9.2), SIMATIC STEP 7 V5.X (All versions < V5.6 SP2 HF3), SINAMICS STARTER (containing STEP 7 OEM version) (All versions < V5.4 HF2). A buffer overflow vulnerability could allow a local attacker to cause a Denial-of-Service situation. The security vulnerability could be exploited by an attacker with local access to the affected systems. Successful exploitation requires user privileges but no user interaction. The vulnerability could allow an attacker to compromise the availability of the system as well as to have access to confidential information.

The post CVE-2020-7586 appeared first on CVE Vulnerability.

CVE-2020-4068

Sun, 26 Feb 2023 06:41:53 +0000

In APNSwift 1.0.0, calling APNSwiftSigner.sign(digest:) is likely to result in a heap buffer overflow. This has been fixed in 1.0.1.

The post CVE-2020-4068 appeared first on CVE Vulnerability.

CVE-2020-35493

Sun, 26 Feb 2023 06:41:17 +0000

A flaw exists in binutils in bfd/pef.c. An attacker who is able to submit a crafted PEF file to be parsed by objdump could cause a heap buffer overflow -> out-of-bounds read that could lead to an impact to application availability. This flaw affects binutils versions prior to 2.34.

The post CVE-2020-35493 appeared first on CVE Vulnerability.

CVE-2020-27828

Sun, 26 Feb 2023 06:40:28 +0000

There’s a flaw in jasper’s jpc encoder in versions prior to 2.0.23. Crafted input provided to jasper by an attacker could cause an arbitrary out-of-bounds write. This could potentially affect data confidentiality, integrity, or application availability.

The post CVE-2020-27828 appeared first on CVE Vulnerability.

CVE-2020-27829

Sun, 26 Feb 2023 06:40:28 +0000

A heap based buffer overflow in coders/tiff.c may result in program crash and denial of service in ImageMagick before 7.0.10-45.

The post CVE-2020-27829 appeared first on CVE Vulnerability.