util-linux:test_blkid_fuzz: Crash in probe_bcachefs

Project: https://github.com/karelzak/util-linux.git https://github.com/util-linux/util-linux.git Detailed Report: https://oss-fuzz.com/testcase?key=4689464301846528 Project: util-linux Fuzzing Engine: libFuzzer Fuzz Target: testblkidfuzz Job Type: libfuzzerasani386util-linux Platform Id: linux...

xs:xst: Crash in fxUint8Getter

Detailed Report: https://oss-fuzz.com/testcase?key=5971630402961408 Project: xs Fuzzing Engine: libFuzzer Fuzz Target: xst Job Type: libfuzzerasanxs Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7f206ad9fc67 Crash State: fxUint8Getter fxTypedArrayGetter fxRunID Sanitizer: address...

CVE-2022-35014

A segmentation fault was found in advancecomp caused by invalid READ memory access. This flaw allows an attacker to cause a crash by tricking a user into opening a malformed file, leading to a denial of service attack...

GSD-2022-1003554 dlm: fix plock invalid read

dlm: fix plock invalid read This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.121 by commit 899bc4429174861122f0c236588700a4710c1fec, it was...

GSD-2022-1003008 dlm: fix plock invalid read

dlm: fix plock invalid read This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.14 by commit 56aa8d1fbd02357f3bf81bdfba1cde87ce8402fc, it was...

PT-2022-31996

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.22 through 5.4.197 Description The issue is related to an invalid read in the plock function. It was introduced in version v2.6.22 and fixed in version v5.4.198. The actual impact and attack plausibility have not yet...

PT-2022-32136

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.22 through 4.19.246 Description The issue is related to an invalid read in plock. It was introduced in version v2.6.22 and fixed in version v4.19.247. The actual impact and attack plausibility have not yet been proven...

PT-2022-31817

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.22 through 5.10.120 Description The issue is related to an invalid read in the plock function. It was introduced in version v2.6.22 and fixed in version v5.10.121. The actual impact and attack plausibility have not ye...

PT-2022-31271

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.22 through 5.17.13 Description The issue concerns an invalid read in the plock function. It was introduced in version v2.6.22 and fixed in version v5.17.14. The actual impact and attack plausibility have not yet been...

PT-2022-30933

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.3 Description The issue is related to an invalid read in the plock function. It was introduced in version v2.6.22 and fixed in version v5.18.3. The actual impact and attack plausibility have not yet been...

PT-2022-31565

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.46 Description The issue concerns an invalid read in the plock function. It was introduced in version v2.6.22 and fixed in version v5.15.46. The actual impact and attack plausibility have not yet been prove...

PT-2022-32321

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.22 through 4.9.317 Description The issue is related to an invalid read in the plock function. It was introduced in version v2.6.22 and fixed in version v4.9.318. The actual impact and attack plausibility have not yet...

PT-2022-32253

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.22 through 4.14.282 Description The issue is related to an invalid read in the plock function. It was introduced in version v2.6.22 and fixed in version v4.14.283. The actual impact and attack plausibility have not ye...

OpenEXR invalid read

In OpenEXR 2.2.0, an invalid read of size 1 in the getBits function in ImfHuf.cpp could cause the application to crash...

GHSA-8M57-J273-2QG9 OpenEXR invalid read

In OpenEXR 2.2.0, an invalid read of size 1 in the getBits function in ImfHuf.cpp could cause the application to crash...

PT-2025-8341

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.14.0+ Description The issue is related to an invalid read in the Linux kernel's dlm module. This occurs when a struct plock op is allocated and appended to a global send list data structure, and then moved to...

RHEL 8 : kernel (RHSA-2022:1213)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:1213 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: remote stack overflow via kern...

RHEL 8 : kernel-rt (RHSA-2022:1209)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:1209 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirement...

Important: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 8.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

Use of Out-of-range Pointer Offset

Description This issue occur in the v8.2.4428 version. Proof of Concept sh $ echo "dnMgIDPKKSAwMGNtZGxicmVh4OvbmfsA3ykA3/8wAMQAAAAAAAAAAAAAAAAAAAAAAAAAAAAhAAAA AAAAAODr3/f/fwAAAAAAAAAAAPZRIwAAAAAAa3N5bWxpbmsgCmJcJlx6cypcenMqQGU=" | base64 -d poc $ /valgrind/vg-in-place -s ./src/vim -u NONE -i NON...