checkstyle:CheckstyleFuzzer: Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.elementValueArra

Project: https://github.com/checkstyle/checkstyle.git Detailed Report: https://oss-fuzz.com/testcase?key=5190056068120576 Project: checkstyle Fuzzing Engine: libFuzzer Fuzz Target: CheckstyleFuzzer Job Type: libfuzzerasancheckstyle Platform Id: linux Crash Type: Security exception Crash Address:...

checkstyle:CheckstyleFuzzer: Security exception in java.base/java.util.ArrayList.forEach

Project: https://github.com/checkstyle/checkstyle.git Detailed Report: https://oss-fuzz.com/testcase?key=4700636558786560 Project: checkstyle Fuzzing Engine: libFuzzer Fuzz Target: CheckstyleFuzzer Job Type: libfuzzerasancheckstyle Platform Id: linux Crash Type: Security exception Crash Address:...

checkstyle:CheckstyleFuzzer: Security exception in org.antlr.v4.runtime.atn.ParserATNSimulator.closureCheckingStopState

Project: https://github.com/checkstyle/checkstyle.git Detailed Report: https://oss-fuzz.com/testcase?key=4596914830835712 Project: checkstyle Fuzzing Engine: libFuzzer Fuzz Target: CheckstyleFuzzer Job Type: libfuzzerasancheckstyle Platform Id: linux Crash Type: Security exception Crash Address:...

checkstyle:CheckstyleFuzzer: Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.primary

Project: https://github.com/checkstyle/checkstyle.git Detailed Report: https://oss-fuzz.com/testcase?key=6510150773768192 Project: checkstyle Fuzzing Engine: libFuzzer Fuzz Target: CheckstyleFuzzer Job Type: libfuzzerasancheckstyle Platform Id: linux Crash Type: Security exception Crash Address:...

checkstyle:CheckstyleFuzzer: Security exception in org.antlr.v4.runtime.atn.PredictionContext.fromRuleContext

Project: https://github.com/checkstyle/checkstyle.git Detailed Report: https://oss-fuzz.com/testcase?key=6492556574457856 Project: checkstyle Fuzzing Engine: libFuzzer Fuzz Target: CheckstyleFuzzer Job Type: libfuzzerasancheckstyle Platform Id: linux Crash Type: Security exception Crash Address:...

checkstyle:CheckstyleFuzzer: Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.memberDeclaratio

Project: https://github.com/checkstyle/checkstyle.git Detailed Report: https://oss-fuzz.com/testcase?key=5021109607858176 Project: checkstyle Fuzzing Engine: libFuzzer Fuzz Target: CheckstyleFuzzer Job Type: libfuzzerasancheckstyle Platform Id: linux Crash Type: Security exception Crash Address:...

checkstyle:CheckstyleFuzzer: Security exception in com.puppycrawl.tools.checkstyle.JavaAstVisitor.lambda$processChildren$28

Project: https://github.com/checkstyle/checkstyle.git Detailed Report: https://oss-fuzz.com/testcase?key=4834049370488832 Project: checkstyle Fuzzing Engine: libFuzzer Fuzz Target: CheckstyleFuzzer Job Type: libfuzzerasancheckstyle Platform Id: linux Crash Type: Security exception Crash Address:...

SUSE CVE-2018-1000009

Jenkins Checkstyle Plugin 3.49 and earlier processes XML external entities in files it parses as part of the build process, allowing attackers with user permissions in Jenkins to extract secrets from the Jenkins master, perform server-side request forgery, or denial-of-service attacks...

org.jvnet.hudson.main:hudson-test-harness (1.294), org.jvnet.hudson.main:hudson-war (1.294) +8 more potentially affected by CVE-2015-8031 via org.jvnet.hudson.main:hudson-core (1.294)

org.jvnet.hudson.main:hudson-core MAVEN version 1.294 is affected by a known vulnerability. The following packages have a transitive dependency on org.jvnet.hudson.main:hudson-core and may be impacted: - org.jvnet.hudson.main:hudson-test-harness 1.294 - org.jvnet.hudson.main:hudson-war 1.294 -...

org.jvnet.hudson.main:hudson-test-harness (1.286), org.jvnet.hudson.main:hudson-war (1.286) +7 more potentially affected by CVE-2015-8031 via org.jvnet.hudson.main:hudson-core (1.286)

org.jvnet.hudson.main:hudson-core MAVEN version 1.286 is affected by a known vulnerability. The following packages have a transitive dependency on org.jvnet.hudson.main:hudson-core and may be impacted: - org.jvnet.hudson.main:hudson-test-harness 1.286 - org.jvnet.hudson.main:hudson-war 1.286 -...

org.jvnet.hudson.main:hudson-test-harness (1.264), org.jvnet.hudson.main:hudson-war (1.264) +7 more potentially affected by CVE-2015-8031 via org.jvnet.hudson.main:hudson-core (1.264)

org.jvnet.hudson.main:hudson-core MAVEN version 1.264 is affected by a known vulnerability. The following packages have a transitive dependency on org.jvnet.hudson.main:hudson-core and may be impacted: - org.jvnet.hudson.main:hudson-test-harness 1.264 - org.jvnet.hudson.main:hudson-war 1.264 -...

org.jvnet.hudson.main:hudson-test-harness (1.255), org.jvnet.hudson.main:hudson-war (1.255) +14 more potentially affected by CVE-2015-8031 via org.jvnet.hudson.main:hudson-core (1.255)

org.jvnet.hudson.main:hudson-core MAVEN version 1.255 is affected by a known vulnerability. The following packages have a transitive dependency on org.jvnet.hudson.main:hudson-core and may be impacted: - org.jvnet.hudson.main:hudson-test-harness 1.255 - org.jvnet.hudson.main:hudson-war 1.255 -...

org.jvnet.hudson.main:hudson-war (1.227), org.jvnet.hudson.plugins:checkstyle (1.5) +4 more potentially affected by CVE-2015-8031 via org.jvnet.hudson.main:hudson-core (1.227)

org.jvnet.hudson.main:hudson-core MAVEN version 1.227 is affected by a known vulnerability. The following packages have a transitive dependency on org.jvnet.hudson.main:hudson-core and may be impacted: - org.jvnet.hudson.main:hudson-war 1.227 - org.jvnet.hudson.plugins:checkstyle 1.5 -...

org.jvnet.hudson.main:hudson-war (1.214), org.jvnet.hudson.plugins:bitkeeper (1.1) +8 more potentially affected by CVE-2015-8031 via org.jvnet.hudson.main:hudson-core (1.214)

org.jvnet.hudson.main:hudson-core MAVEN version 1.214 is affected by a known vulnerability. The following packages have a transitive dependency on org.jvnet.hudson.main:hudson-core and may be impacted: - org.jvnet.hudson.main:hudson-war 1.214 - org.jvnet.hudson.plugins:bitkeeper 1.1 -...

org.jvnet.hudson.main:hudson-test-harness (1.270), org.jvnet.hudson.main:hudson-war (1.270) +6 more potentially affected by CVE-2015-8031 via org.jvnet.hudson.main:hudson-core (1.270)

org.jvnet.hudson.main:hudson-core MAVEN version 1.270 is affected by a known vulnerability. The following packages have a transitive dependency on org.jvnet.hudson.main:hudson-core and may be impacted: - org.jvnet.hudson.main:hudson-test-harness 1.270 - org.jvnet.hudson.main:hudson-war 1.270 -...

org.jvnet.hudson.main:hudson-test-harness (1.272), org.jvnet.hudson.main:hudson-war (1.272) +7 more potentially affected by CVE-2015-8031 via org.jvnet.hudson.main:hudson-core (1.272)

org.jvnet.hudson.main:hudson-core MAVEN version 1.272 is affected by a known vulnerability. The following packages have a transitive dependency on org.jvnet.hudson.main:hudson-core and may be impacted: - org.jvnet.hudson.main:hudson-test-harness 1.272 - org.jvnet.hudson.main:hudson-war 1.272 -...

org.jvnet.hudson.main:hudson-war (1.213), org.jvnet.hudson.plugins:checkstyle (1.0) +8 more potentially affected by CVE-2015-8031 via org.jvnet.hudson.main:hudson-core (1.213)

org.jvnet.hudson.main:hudson-core MAVEN version 1.213 is affected by a known vulnerability. The following packages have a transitive dependency on org.jvnet.hudson.main:hudson-core and may be impacted: - org.jvnet.hudson.main:hudson-war 1.213 - org.jvnet.hudson.plugins:checkstyle 1.0 -...

org.jvnet.hudson.main:hudson-war (1.217), org.jvnet.hudson.plugins:checkstyle (1.2) +2 more potentially affected by CVE-2015-8031 via org.jvnet.hudson.main:hudson-core (1.217)

org.jvnet.hudson.main:hudson-core MAVEN version 1.217 is affected by a known vulnerability. The following packages have a transitive dependency on org.jvnet.hudson.main:hudson-core and may be impacted: - org.jvnet.hudson.main:hudson-war 1.217 - org.jvnet.hudson.plugins:checkstyle 1.2 -...

org.jvnet.hudson.main:hudson-test-harness (1.256), org.jvnet.hudson.main:hudson-war (1.256) +6 more potentially affected by CVE-2015-8031 via org.jvnet.hudson.main:hudson-core (1.256)

org.jvnet.hudson.main:hudson-core MAVEN version 1.256 is affected by a known vulnerability. The following packages have a transitive dependency on org.jvnet.hudson.main:hudson-core and may be impacted: - org.jvnet.hudson.main:hudson-test-harness 1.256 - org.jvnet.hudson.main:hudson-war 1.256 -...

XXE vulnerability in Jenkins Checkstyle Plugin

Jenkins Checkstyle Plugin 3.49 and earlier processes XML external entities in files it parses as part of the build process, allowing attackers with user permissions in Jenkins to extract secrets from the Jenkins master, perform server-side request forgery, or denial-of-service attacks...