Marsman1996

A flaw in the `with argv()` function located in `/unistd/mod.rs` allows an attacker to trigger a Denial of Service (DoS) by providing a specially crafted input.

A flaw in the `seekdir()` function located in `/dirent/mod.rs` allows an attacker to trigger a Denial of Service (DoS) by providing a specially crafted input.

A reachable unwrap in the ` assert fail()` function located in /assert/mod.rs allows attackers to cause a Denial of Service (DoS) by providing a crafted string. An unwrap is a operation that attempts to extract a value from a wrapper; if the value is missing, the program crashes.

A flaw in the `pthread rwlockattr setpshared()` function allows attackers to trigger a Denial of Service (DoS) by providing crafted input.

Name of the Vulnerable Software and Affected Versions: Exiv2 versions v0.28.0 through v0.28.4 Description: A heap buffer overflow was found in Exiv2 when used to write metadata into a crafted image file. This issue can be exploited by an attacker to gain code execution if they can trick the victim into running Exiv2 on a crafted image file. The heap overflow is triggered by a less frequently used Exiv2 operation, which is writing the metadata. For example, to trigger the bug in the Exiv2 command-line application, an extra command-line argument such as `fixiso` is needed. Recommendations: For Exiv2 versions v0.28.0 through v0.28.4, update to version v0.28.5 to resolve the issue. As a temporary workaround, consider avoiding the use of Exiv2 for writing metadata until the issue is resolved. Restrict access to crafted image files to minimize the risk of exploitation. Avoid using Exiv2 with untrusted image files until the issue is resolved. At the moment, there are no other known workarounds for this vulnerability.

The issue allows a remote attacker to cause a denial of service via a crafted .swf file to the `makeswf` function.

The issue arises from jhead copying strings to a stack buffer when it detects a `&i` or `&o`, without checking the boundary of the stack buffer. This results in a stack buffer overflow problem when multiple `&i` or `&o` are given. The problem is related to the `shellescape()` function in `jhead.c`.

A Buffer Overflow issue allows a remote attacker to cause a denial of service via the `resolveSubtable` function at `compileTranslationTabel.c`. This issue can be exploited to disrupt service.

An issue in TCPrewrite allows a remote attacker to cause a denial of service via the `ports2PORT` function at the "portmap.c:69" endpoint.

The issue allows a remote attacker to cause a denial of service via the `parse list` function. This is related to a pointer dereference issue in the PCAP file handler of the Tcpreplay utility. Exploitation of the issue may allow a remote attacker to cause a denial of service.

The issue is related to the `cidr2cidr()` function in the Tcpreplay utility, which can cause a denial of service when exploited by a remote attacker. This function is part of the PCAP file handler and is associated with an uncontrolled reachable assertion. The exploitation of this issue can allow a remote attacker to cause a denial of service.

The issue allows a remote attacker to cause a denial of service via the `read hexstring` function. This is related to a pointer dereference issue in the `tcprewrite` editor of PCAP files in the Tcpreplay utility. The exploitation of this issue can allow a remote attacker to cause a denial of service.

The issue allows a remote attacker to cause a denial of service via the `parse endpoints()` function, which is related to pointer dereferencing. This can be exploited by a remote attacker to cause a denial of service.

The issue is related to a buffer overflow that can be triggered by a remote attacker, potentially causing a denial of service. This is associated with the `compileTranslationTable.c` and the `lou setDataPath` functions. The vulnerability involves uncontrolled copying of data, which can lead to service disruption.

The issue is related to a buffer overflow vulnerability in the lou logFile function of the Liblouis translator, which is caused by copying a buffer without checking the size of the input data. This can be exploited by a remote attacker to cause a denial of service. The vulnerability is associated with the lou logFile function at the logginc.c endpoint.

The issue is related to a reachable assertion in the `packet2tree()` function at `tree.c` in tcpprep. This assertion is `assert(l2len > 0)`, indicating a potential problem when the `l2len` variable is not greater than 0.

The issue is related to a Reachable Assertion in the `add tree ipv6()` function at `tree.c`.

The issue is related to a Reachable Assertion in the `add tree ipv4()` function at `tree.c`.

A Null Pointer Dereference issue exists due to incomplete patching. When size information in the metadata of a bmp file is out of range, the program fails to assign a memory buffer to `pb->pdata` but continues execution, leading to a crash when trying to access `pb->data` in `jfif encode()` at jfif.c:763.

The issue is related to a heap overflow in the `GetByte()` function at ngiflib.c:70 when operating in NGIFLIB NO FILE mode. This occurs because `GetByte()` reads from a memory buffer without properly checking its boundaries.