Base de CVEs

CVE-2023-50572 Média · 5.5 CWE-787 29/12/2023

Out-of-bounds Write em Jline

An issue in the component GroovyEngine.execute of jline-groovy v3.24.1 allows attackers to cause an OOM (OutofMemory) error.

CVE-2023-7024 Alta · 8.8 KEV Alta · 61 Exploit público CWE-787 21/12/2023

Google Chromium WebRTC Heap Buffer Overflow Vulnerability

Heap buffer overflow in WebRTC in Google Chrome prior to 120.0.6099.129 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

CVE-2023-6931 Alta · 7.0 CWE-787 19/12/2023

Out-of-bounds write in Linux kernel's Performance Events system component

A heap out-of-bounds write vulnerability in the Linux kernel's Performance Events system component can be exploited to achieve local privilege escalation. A perf_event's read_size can overflow, leading to an heap out-of-bounds increment or write in perf_read_group(). We recommend upgrading past commit 382c27f4ed28f803b1f1473ac2d8db0afc795a1b.

CVE-2023-42917 Alta · 8.8 KEV Alta · 55 CWE-787 30/11/2023

Apple Multiple Products WebKit Memory Corruption Vulnerability

A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2, macOS Sonoma 14.1.2, Safari 17.1.2. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited against versions of iOS before iOS 16.7.1.

CVE-2023-42366 Média · 5.5 CWE-787 27/11/2023

Out-of-bounds Write em Busybox

A heap-buffer-overflow was discovered in BusyBox v.1.36.1 in the next_token function at awk.c:1159.

CVE-2023-48161 Alta · 7.1 CWE-787 22/11/2023

Out-of-bounds Write em Giflib Project Giflib

Buffer Overflow vulnerability in GifLib Project GifLib v.5.2.1 allows a local attacker to obtain sensitive information via the DumpSCreen2RGB function in gif2rgb.c

CVE-2023-36036 Alta · 7.8 KEV Alta · 56 CWE-787 14/11/2023

Microsoft Windows Cloud Files Mini Filter Driver Privilege Escalation Vulnerability

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

CVE-2023-5717 Alta · 7.8 CWE-787 25/10/2023

Out-of-bounds write in Linux kernel's Linux Kernel Performance Events (perf) component

A heap out-of-bounds write vulnerability in the Linux kernel's Linux Kernel Performance Events (perf) component can be exploited to achieve local privilege escalation. If perf_read_group() is called while an event's sibling_list is smaller than its child's sibling_list, it can increment or write to memory locations outside of the allocated buffer. We recommend upgrading past commit 32671e3799ca2e4590773fd0e63aaa4229e50c06.

CVE-2023-34048 Crítica · 9.8 KEV Urgente · 74 Exploit público CWE-787 25/10/2023

VMware vCenter Server Out-of-Bounds Write Vulnerability

vCenter Server contains an out-of-bounds write vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigger an out-of-bounds write potentially leading to remote code execution.

CVE-2023-45863 Média · 6.4 CWE-787 14/10/2023

An issue was discovered in lib/kobject.c in the Linux kernel before 6.2.3. With root access, an...

An issue was discovered in lib/kobject.c in the Linux kernel before 6.2.3. With root access, an attacker can trigger a race condition that results in a fill_kobj_path out-of-bounds write.

CVE-2023-4911 Alta · 7.8 KEV Urgente · 76 Exploit público CWE-787 03/10/2023

GNU C Library Buffer Overflow Vulnerability

A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES environment variables when launching binaries with SUID permission to execute code with elevated privileges.

CVE-2023-5217 Alta · 8.8 KEV Alta · 62 Exploit público CWE-787 28/09/2023

Estouro de buffer no heap na codificação VP8 do libvpx no Google Chromium

Estouro de buffer no heap na codificação vp8 no libvpx do Google Chrome anterior à 117.0.5938.132 e libvpx 1.13.1 permitia que um atacante remoto potencialmente explorasse corrupção de heap por meio de uma página HTML criada. (Gravidade de segurança do Chromium: Alta)

CVE-2023-20109 Média · 6.6 KEV Alta · 51 CWE-787 27/09/2023

Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write Vulnerability

A vulnerability in the Cisco Group Encrypted Transport VPN (GET VPN) feature of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker who has administrative control of either a group member or a key server to execute arbitrary code on an affected device or cause the device to crash. This vulnerability is due to insufficient validation of attributes in the Group Domain of Interpretation (GDOI) and G-IKEv2 protocols of the GET VPN feature. An attacker could exploit this vulnerability by either compromising an installed key server or modifying the configuration of a group member to point to a key server that is controlled by the attacker. A successful exploit could allow the attacker to execute arbitrary code and gain full control of the affected system or cause the affected system to reload, resulting in a denial of service (DoS) condition. For more information, see the Details ["#details"] section of this advisory.

CVE-2023-42753 Alta · 7.8 CWE-787 25/09/2023

Kernel: netfilter: potential slab-out-of-bound access due to integer underflow

An array indexing vulnerability was found in the netfilter subsystem of the Linux kernel. A missing macro could lead to a miscalculation of the `h->nets` array offset, providing attackers with the primitive to arbitrarily increment/decrement a memory buffer out-of-bound. This issue may allow a local user to crash the system or potentially escalate their privileges on the system.

CVE-2023-34319 Alta · 7.8 CWE-787 22/09/2023

Linux: buffer overrun in netback due to unusual packet

The fix for XSA-423 added logic to Linux'es netback driver to deal with a frontend splitting a packet in a way such that not all of the headers would come in one piece. Unfortunately the logic introduced there didn't account for the extreme case of the entire packet being split into as many pieces as permitted by the protocol, yet still being smaller than the area that's specially dealt with to keep all (possible) headers together. Such an unusual packet would therefore trigger a buffer overrun in the driver.

CVE-2023-32643 Alta · 7.8 CWE-787 14/09/2023

A flaw was found in GLib. The GVariant deserialization code is vulnerable to a heap buffer...

A flaw was found in GLib. The GVariant deserialization code is vulnerable to a heap buffer overflow introduced by the fix for CVE-2023-32665. This bug does not affect any released version of GLib, but does affect GLib distributors who followed the guidance of GLib developers to backport the initial fix for CVE-2023-32665.

CVE-2023-26369 Alta · 7.8 KEV Alta · 55 CWE-787 13/09/2023

Adobe Acrobat and Reader Out-of-Bounds Write Vulnerability

Acrobat Reader versions 23.003.20284 (and earlier), 20.005.30516 (and earlier) and 20.005.30514 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2023-4863 Alta · 8.8 KEV Alta · 62 Exploit público CWE-787 12/09/2023

Estouro de buffer baseado em heap no libwebp do Google Chromium

Estouro de buffer baseado em heap na libwebp no Google Chrome anterior a 116.0.5845.187 e libwebp 1.3.2 permitiu que um atacante remoto realizasse uma escrita fora dos limites de memória por meio de uma página HTML criada. (Gravidade de segurança do Chromium: Crítica)

CVE-2022-48522 Crítica · 9.8 CWE-787 22/08/2023

In Perl 5.34.0, function S_find_uninit_var in sv.c has a stack-based crash that can lead to...

In Perl 5.34.0, function S_find_uninit_var in sv.c has a stack-based crash that can lead to remote code execution or local privilege escalation.

CVE-2021-32292 Crítica · 9.8 CWE-787 22/08/2023

An issue was discovered in json-c through 0.15-20200726. A stack-buffer-overflow exists in the...

An issue was discovered in json-c from 20200420 (post 0.14 unreleased code) through 0.15-20200726. A stack-buffer-overflow exists in the auxiliary sample program json_parse which is located in the function parseit.

CVE-2020-22218 Alta · 7.5 CWE-787 22/08/2023

An issue was discovered in function _libssh2_packet_add in libssh2 1.10.0 allows attackers to...

An issue was discovered in function _libssh2_packet_add in libssh2 1.10.0 allows attackers to access out of bounds memory.

CVE-2020-21047 Média · 5.5 CWE-787 22/08/2023

The libcpu component which is used by libasm of elfutils version 0.177 (git 47780c9e), suffers...

The libcpu component which is used by libasm of elfutils version 0.177 (git 47780c9e), suffers from denial-of-service vulnerability caused by application crashes due to out-of-bounds write (CWE-787), off-by-one error (CWE-193) and reachable assertion (CWE-617); to exploit the vulnerability, the attackers need to craft certain ELF files which bypass the missing bound checks.

CVE-2020-19190 Média · 6.5 CWE-787 22/08/2023

Buffer Overflow vulnerability in _nc_find_entry in tinfo/comp_hash.c:70 in ncurses 6.1 allows...

Buffer Overflow vulnerability in _nc_find_entry in tinfo/comp_hash.c:70 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command.

CVE-2020-19189 Média · 6.5 CWE-787 22/08/2023

Buffer Overflow vulnerability in postprocess_terminfo function in tinfo/parse_entry.c:997 in...

Buffer Overflow vulnerability in postprocess_terminfo function in tinfo/parse_entry.c:997 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command.

CVE-2020-19188 Média · 6.5 CWE-787 22/08/2023

Buffer Overflow vulnerability in fmt_entry function in progs/dump_entry.c:1116 in ncurses 6.1...

Buffer Overflow vulnerability in fmt_entry function in progs/dump_entry.c:1116 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command.