CVE-2012-5964

libupnp: Multiple stack-based buffer overflows in unique_service_name() by processing specially-crafted SSDP request (VU#922681)

Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Devices (aka libupnp, formerly the Intel SDK for UPnP devices) 1.3.1 allows remote attackers to execute arbitrary code via a long ServiceType (aka urn service) field in a UDP packet.

CVSS 2.0 · 10.0 Critical EPSS 36.9% KEV · Not listed

Vendors

Portable Sdk For Upnp Project

Products

Portable Sdk For Upnp

CVE-2012-5963

libupnp: Multiple stack-based buffer overflows in unique_service_name() by processing specially-crafted SSDP request (VU#922681)

Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Devices (aka libupnp, formerly the Intel SDK for UPnP devices) 1.3.1 allows remote attackers to execute arbitrary code via a long UDN (aka uuid) field within a string that lacks a :: (colon colon) in a UDP packet.

CVSS 2.0 · 10.0 Critical EPSS 36.9% KEV · Not listed

Vendors

Portable Sdk For Upnp Project

Products

Portable Sdk For Upnp

CVE-2012-5962

libupnp: Multiple stack-based buffer overflows in unique_service_name() by processing specially-crafted SSDP request (VU#922681)

Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Devices (aka libupnp, formerly the Intel SDK for UPnP devices) 1.3.1 allows remote attackers to execute arbitrary code via a long DeviceType (aka urn) field in a UDP packet.

CVSS 2.0 · 10.0 Critical EPSS 36.9% KEV · Not listed

Vendors

Portable Sdk For Upnp Project

Products

Portable Sdk For Upnp

CVE-2012-5961

libupnp: Multiple stack-based buffer overflows in unique_service_name() by processing specially-crafted SSDP request (VU#922681)

Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Devices (aka libupnp, formerly the Intel SDK for UPnP devices) 1.3.1 allows remote attackers to execute arbitrary code via a long UDN (aka device) field in a UDP packet.

CVSS 2.0 · 10.0 Critical EPSS 36.9% KEV · Not listed

Vendors

Libupnp Project

Products

Libupnp

CVE-2012-5960

libupnp: Multiple stack-based buffer overflows in unique_service_name() by processing specially-crafted SSDP request (VU#922681)

Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Devices (aka libupnp, formerly the Intel SDK for UPnP devices) before 1.6.18 allows remote attackers to execute arbitrary code via a long UDN (aka upnp:rootdevice) field in a UDP packet.

CVSS 2.0 · 10.0 Critical EPSS 32.6% KEV · Not listed

Vendors

Portable Sdk For Upnp Project

Products

Portable Sdk For Upnp

CVE-2013-1828

kernel: sctp: SCTP_GET_ASSOC_STATS stack buffer overflow

The sctp_getsockopt_assoc_stats function in net/sctp/socket.c in the Linux kernel before 3.8.4 does not validate a size value before proceeding to a copy_from_user operation, which allows local users to gain privileges via a crafted application that contains an SCTP_GET_ASSOC_STATS getsockopt system call.

CVSS 2.0 · 6.9 Medium EPSS 1.0% KEV · Not listed

Vendors

Linux

Products

Linux Kernel

CVE-2013-0288

nss-pam-ldapd: FD_SET array index error, leading to stack-based buffer overflow

nss-pam-ldapd before 0.7.18 and 0.8.x before 0.8.11 allows context-dependent attackers to cause a denial of service (application crash) and possibly execute arbitrary code by performing a name lookup on an application with a large number of open file descriptors, which triggers a stack-based buffer overflow related to incorrect use of the FD_SET macro.

CVSS 2.0 · 6.8 Medium EPSS 3.6% KEV · Not listed

Vendors

Arthurdejong Redhat

Products

Nss-pam-ldapd Enterprise Linux

CVE-2013-4458

glibc: Stack (frame) overflow in getaddrinfo() when called with AF_INET6

Stack-based buffer overflow in the getaddrinfo function in sysdeps/posix/getaddrinfo.c in GNU C Library (aka glibc or libc6) 2.18 and earlier allows remote attackers to cause a denial of service (crash) via a (1) hostname or (2) IP address that triggers a large number of AF_INET6 address results. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-1914.

CVSS 2.0 · 5.0 Medium EPSS 4.2% KEV · Not listed

Vendors

Gnu Redhat Suse

Products

Glibc Enterprise Linux Linux Enterprise Debuginfo and 1 more

CVE-2013-4473

poppler: stack-based buffer overflow in pdfseparate utility

Stack-based buffer overflow in the extractPages function in utils/pdfseparate.cc in poppler before 0.24.2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a source filename.

CVSS 2.0 · 7.5 High EPSS 7.1% KEV · Not listed

Vendors

Canonical Freedesktop

Products

Ubuntu Linux Poppler

CVE-2012-5959

libupnp: Multiple stack-based buffer overflows in unique_service_name() by processing specially-crafted SSDP request (VU#922681)

Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Devices (aka libupnp, formerly the Intel SDK for UPnP devices) before 1.6.18 allows remote attackers to execute arbitrary code via a long UDN (aka uuid) field within a string that contains a :: (colon colon) in a UDP packet.

CVSS 2.0 · 10.0 Critical EPSS 75.8% KEV · Not listed

Vendors

Portable Sdk For Upnp Project

Products

Portable Sdk For Upnp

CVE-2012-1139

freetype: data buffer underflow in BDF parser _bdf_parse_glyphs() (#35656)

Array index error in FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid stack read operation and memory corruption) or possibly execute arbitrary code via crafted glyph data in a BDF font.

CVSS 2.0 · 9.3 Critical EPSS 3.8% KEV · Not listed

Vendors

Freetype Mozilla Redhat

Products

Freetype Firefox Mobile Enterprise Linux

CVE-2012-5958

libupnp: Multiple stack-based buffer overflows in unique_service_name() by processing specially-crafted SSDP request (VU#922681)

Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Devices (aka libupnp, formerly the Intel SDK for UPnP devices) before 1.6.18 allows remote attackers to execute arbitrary code via a UDP packet with a crafted string that is not properly handled after a certain pointer subtraction.

CVSS 2.0 · 10.0 Critical EPSS 83.2% KEV · Not listed

Vendors

Libupnp Project

Products

Libupnp

CVE-2012-5240

wireshark: Stack-based buffer overflow in the LDP dissector

Buffer overflow in the dissect_tlv function in epan/dissectors/packet-ldp.c in the LDP dissector in Wireshark 1.8.x before 1.8.3 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a malformed packet.

CVSS 2.0 · 5.8 Medium EPSS 1.4% KEV · Not listed

Vendors

Wireshark

Products

Wireshark

CVE-2012-3547

freeradius: stack-based buffer overflow via long expiration date fields in client X509 certificates

Stack-based buffer overflow in the cbtls_verify function in FreeRADIUS 2.1.10 through 2.1.12, when using TLS-based EAP methods, allows remote attackers to cause a denial of service (server crash) and possibly execute arbitrary code via a long "not after" timestamp in a client certificate.

CVSS 2.0 · 6.8 Medium EPSS 5.7% KEV · Not listed

Vendors

Freeradius Redhat

Products

Freeradius Enterprise Linux

CVE-2014-0978

graphviz: stack-based buffer overflow in yyerror()

Stack-based buffer overflow in the yyerror function in lib/cgraph/scan.l in Graphviz 2.34.0 allows remote attackers to have unspecified impact via a long line in a dot file.

CVSS 2.0 · 9.3 Critical EPSS 4.9% KEV · Not listed

Vendors

Graphviz

Products

Graphviz

CVE-2013-0272

pidgin: MXit protocol stack-based buffer overflow when processing HTTP headers

Buffer overflow in http.c in the MXit protocol plugin in libpurple in Pidgin before 2.10.7 allows remote servers to execute arbitrary code via a long HTTP header.

CVSS 2.0 · 6.8 Medium EPSS 2.9% KEV · Not listed

Vendors

Pidgin Redhat

Products

Pidgin Enterprise Linux Rhel Productivity

CVE-2012-3480

glibc: Integer overflows, leading to stack-based buffer overflows in strto* related routines

Multiple integer overflows in the (1) strtod, (2) strtof, (3) strtold, (4) strtod_l, and other unspecified "related functions" in stdlib in GNU C Library (aka glibc or libc6) 2.16 allow local users to cause a denial of service (application crash) and possibly execute arbitrary code via a long string, which triggers a stack-based buffer overflow.

CVSS 2.0 · 4.6 Medium EPSS < 1% KEV · Not listed

Vendors

Gnu Redhat

Products

Glibc Enterprise Linux

CVE-2013-0249

curl: Stack-based buffer overflow when negotiating SASL DIGEST-MD5 authentication with IMAP, POP3 and SMTP protocols

Stack-based buffer overflow in the Curl_sasl_create_digest_md5_message function in lib/curl_sasl.c in curl and libcurl 7.26.0 through 7.28.1, when negotiating SASL DIGEST-MD5 authentication, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string in the realm parameter in a (1) POP3, (2) SMTP or (3) IMAP message.

CVSS 2.0 · 7.5 High EPSS 21.6% KEV · Not listed

Vendors

Canonical Haxx

Products

Ubuntu Linux Curl Libcurl

CVE-2012-3410

bash: Stack-based buffer overflow (crash) when expanding /dev/fd file names

Stack-based buffer overflow in lib/sh/eaccess.c in GNU Bash before 4.2 patch 33 might allow local users to bypass intended restricted shell access via a long filename in /dev/fd, which is not properly handled when expanding the /dev/fd prefix.

CVSS 2.0 · 4.6 Medium EPSS < 1% KEV · Not listed

Vendors

Gnu

Products

Bash

CVE-2012-5965

libupnp: Multiple stack-based buffer overflows in unique_service_name() by processing specially-crafted SSDP request (VU#922681)

Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Devices (aka libupnp, formerly the Intel SDK for UPnP devices) 1.3.1 allows remote attackers to execute arbitrary code via a long DeviceType (aka urn device) field in a UDP packet.

CVSS 2.0 · 10.0 Critical EPSS 36.9% KEV · Not listed

Vendors

Portable Sdk For Upnp Project

Products

Portable Sdk For Upnp