CVE-2024-50279

In the Linux kernel, the following vulnerability has been resolved: dm cache: fix out-of-bounds access to the dirty bitset when resizing dm-cache checks the dirty bits of the cache blocks to be dropped when shrinking the fast device, but an index bug in bitset iteration causes out-of-bounds acces...

CVE-2024-50279 dm cache: fix out-of-bounds access to the dirty bitset when resizing

In the Linux kernel, the following vulnerability has been resolved: dm cache: fix out-of-bounds access to the dirty bitset when resizing dm-cache checks the dirty bits of the cache blocks to be dropped when shrinking the fast device, but an index bug in bitset iteration causes out-of-bounds acces...

CVE-2024-50279

CVE-2024-50279 affects the Linux kernel dm-cache component. The issue is an index/bounds bug in bitset iteration when shrinking the fast device, which caused an out-of-bounds access to the dirty bitset. The vulnerability is triggered during resize operations (as described in the reproduce steps a...

CVE-2024-50279 dm cache: fix out-of-bounds access to the dirty bitset when resizing

In the Linux kernel, the following vulnerability has been resolved: dm cache: fix out-of-bounds access to the dirty bitset when resizing dm-cache checks the dirty bits of the cache blocks to be dropped when shrinking the fast device, but an index bug in bitset iteration causes out-of-bounds acces...

CVE-2024-50278 dm cache: fix potential out-of-bounds access on the first resume

In the Linux kernel, the following vulnerability has been resolved: dm cache: fix potential out-of-bounds access on the first resume Out-of-bounds access occurs if the fast device is expanded unexpectedly before the first-time resume of the cache table. This happens because expanding the fast...

CVE-2024-50278: Out-of-bounds Read

In the Linux kernel, the following vulnerability has been resolved: dm cache: fix potential out-of-bounds access on the first resume Out-of-bounds access occurs if the fast device is expanded unexpectedly before the first-time resume of the cache table. This happens because expanding the fast...

CVE-2024-50279: Out-of-bounds Read

In the Linux kernel, the following vulnerability has been resolved: dm cache: fix out-of-bounds access to the dirty bitset when resizing dm-cache checks the dirty bits of the cache blocks to be dropped when shrinking the fast device, but an index bug in bitset iteration causes out-of-bounds acces...

joni:AddrListFixFuzzer: Security exception in org.joni.Parser.parseCharClass

Project: https://github.com/jruby/joni.git Detailed Report: https://oss-fuzz.com/testcase?key=5164096112427008 Project: joni Fuzzing Engine: libFuzzer Fuzz Target: AddrListFixFuzzer Job Type: libfuzzerasanjoni Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

joni:AddrListFixFuzzer: Security exception in org.joni.Parser.parseCharClass

Project: https://github.com/jruby/joni.git Detailed Report: https://oss-fuzz.com/testcase?key=5138303777898496 Project: joni Fuzzing Engine: libFuzzer Fuzz Target: AddrListFixFuzzer Job Type: libfuzzerasanjoni Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

lucene:IndexSearchFuzzer: Security exception in org.apache.lucene.util.automaton.RegExp.toAutomaton

Project: https://github.com/apache/lucene.git Detailed Report: https://oss-fuzz.com/testcase?key=5120803086401536 Project: lucene Fuzzing Engine: libFuzzer Fuzz Target: IndexSearchFuzzer Job Type: libfuzzerasanlucene Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

OSV-2023-627 Security exception in org.apache.lucene.util.automaton.RegExp.toAutomaton

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60964 Crash type: Security exception Crash state: org.apache.lucene.util.automaton.RegExp.toAutomaton java.base/java.util.BitSet.ensureCapacity java.base/java.util.BitSet.expandTo...

lucene:IndexSearchFuzzer: Security exception in org.apache.lucene.util.automaton.RegExp.toAutomaton

Project: https://github.com/apache/lucene.git Detailed Report: https://oss-fuzz.com/testcase?key=5378350024359936 Project: lucene Fuzzing Engine: libFuzzer Fuzz Target: IndexSearchFuzzer Job Type: libfuzzerasanlucene Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

OSV-2023-610 Security exception in org.apache.lucene.util.automaton.RegExp.toAutomaton

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60782 Crash type: Security exception Crash state: org.apache.lucene.util.automaton.RegExp.toAutomaton java.base/java.util.BitSet.ensureCapacity java.base/java.util.BitSet.expandTo...

lucene:IndexSearchFuzzer: Security exception in org.apache.lucene.util.automaton.RegExp.toAutomaton

Project: https://github.com/apache/lucene.git Detailed Report: https://oss-fuzz.com/testcase?key=6595572956790784 Project: lucene Fuzzing Engine: libFuzzer Fuzz Target: IndexSearchFuzzer Job Type: libfuzzerasanlucene Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

SUSE CVE-2006-1630

The clibitsetset function in libclamav/others.c in Clam AntiVirus ClamAV before 0.88.1 allows remote attackers to cause a denial of service via unspecified vectors that trigger an "invalid memory access."...

UBUNTU-CVE-2020-18734

A stack buffer overflow in /ddsi/qbitset.h of Eclipse IOT Cyclone DDS Project v0.1.0 causes the DDS subscriber server to crash...

apache-commons:CompressSevenZFuzzer: Uncaught exception in java.base/java.util.BitSet.initWords

Detailed Report: https://oss-fuzz.com/testcase?key=6399828323074048 Project: apache-commons Fuzzing Engine: libFuzzer Fuzz Target: CompressSevenZFuzzer Job Type: libfuzzerasanapache-commons Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash State:...

oniguruma: Out-of-bounds heap write in bitset_set_range()

An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5. A heap out-of-bounds write occurs in bitsetsetrange during regular expression compilation due to an uninitialized variable from an incorrect state transition. An incorrect...

The vulnerability of the Oniguruma library, related to the use of an uninitialized variable, which allows for memory corruption to occur.

The vulnerability of the Oniguruma library arises from an incorrect change in the state of the parsecharclass function. This allows for the use of an uninitialized variable during writing to the buffer. Exploiting this vulnerability could enable a malicious actor to cause memory corruption by...

The vulnerability of the Oniguruma library, which arises from the use of an uninitialized variable and allows for memory corruption to occur.

The vulnerability of the Oniguruma library arises from an improper change in the state of the parsecharclass function. This allows for the use of an uninitialized variable during writing to the buffer. Exploiting this vulnerability could enable a malicious actor to cause memory corruption by...