Skip to content

Fix: reported issues in the scanner#2264

Draft
jjnicola wants to merge 10 commits into
mainfrom
some-fixes
Draft

Fix: reported issues in the scanner#2264
jjnicola wants to merge 10 commits into
mainfrom
some-fixes

Conversation

@jjnicola

@jjnicola jjnicola commented Jun 25, 2026

Copy link
Copy Markdown
Member

SC-1649

  • Fix: useragent in nasl_http2.c. Reported as an use-after-free issue, but the problem was that I was using the wrong variable. Now uses the right one ua
  • Fix: avoid stack overflow when password length is greater than 21
  • Fix: check buffer lenght before memcpy
  • Fix: OOB read in nasl_crypt.c
  • Fix: nasl_ntlmv2_hash(). Do length validation.
  • Fix:nasl_snmp.c: read() return stored in size_t
  • Fix: use-after-free in nasl_snmpv1v2c_get()
  • Fix: Stack overflow in nasl_win_cmd_exec()
  • Fix: OOB read / potential heap overflow nasl_packet_forgery*

IMPORTANT
Please read the contributing guidelines.

  1. If you are a first time contributor, add a corresponding RELICENSE file to your first pull request.
  2. Please stick to conventional commits and label your changes accordingly.
  3. Disclose any use of generative AI in your pull request.

@jjnicola jjnicola requested a review from a team as a code owner June 25, 2026 16:25
@jjnicola jjnicola marked this pull request as draft June 25, 2026 16:25
@github-actions

github-actions Bot commented Jun 25, 2026

Copy link
Copy Markdown

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

Snapshot Warnings

⚠️: No snapshots were found for the head SHA 5347fde.
Ensure that dependencies are being submitted on PR branches and consider enabling retry-on-snapshot-warnings. See the documentation for more information and troubleshooting advice.

Scanned Files

None

@github-actions github-actions Bot added patch_release creates a patch release and removed patch_release creates a patch release labels Jun 25, 2026
@github-actions github-actions Bot added patch_release creates a patch release and removed patch_release creates a patch release labels Jul 6, 2026
@github-actions github-actions Bot added patch_release creates a patch release and removed patch_release creates a patch release labels Jul 6, 2026
@github-actions github-actions Bot added patch_release creates a patch release and removed patch_release creates a patch release labels Jul 7, 2026
@github-actions github-actions Bot removed the patch_release creates a patch release label Jul 8, 2026
@github-actions github-actions Bot added the patch_release creates a patch release label Jul 8, 2026
@github-actions github-actions Bot added patch_release creates a patch release and removed patch_release creates a patch release labels Jul 8, 2026
@github-actions github-actions Bot added patch_release creates a patch release and removed patch_release creates a patch release labels Jul 9, 2026
@github-actions github-actions Bot added patch_release creates a patch release and removed patch_release creates a patch release labels Jul 9, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

patch_release creates a patch release

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant