PT-2023-35747 · Git +1 · Libredwg

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow WRITE 2 crash has been reported, involving functions such as bit utf8 to TU, json wstring, and json AppInfo. No information is...

PT-2023-35592 · Git +1 · Libavc

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow WRITE 4 crash has been reported. The crash involves the following functions: isvcd nal byte swap emulation, isvcd nal parse non vc...

OSV-2023-116 Security exception in org.codehaus.janino.Parser.parseUnaryExpression

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56367 Crash type: Security exception Crash state: org.codehaus.janino.Parser.parseUnaryExpression java.base/java.nio.ByteBuffer.limit java.base/java.nio.Buffer...

OSV-2023-92 UNKNOWN READ in var_Create

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56141 Crash type: UNKNOWN READ Crash state: varCreate Open genericstart...

PT-2023-35978 · Git +1 · Libavc

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 1 crash has been reported. The crash involves several functions, including isvcd interlyr motion mode pred dyadic, isvcd mv...

SUSE CVE-2009-1295

Apport before 0.108.4 on Ubuntu 8.04 LTS, before 0.119.2 on Ubuntu 8.10, and before 1.0-0ubuntu5.2 on Ubuntu 9.04 does not properly remove files from the application's crash-report directory, which allows local users to delete arbitrary files via unspecified vectors...

SUSE CVE-2019-7307

Apport before versions 2.14.1-0ubuntu3.29+esm1, 2.20.1-0ubuntu2.19, 2.20.9-0ubuntu7.7, 2.20.10-0ubuntu27.1, 2.20.11-0ubuntu5 contained a TOCTTOU vulnerability when reading the users /.apport-ignore.xml file, which allows a local attacker to replace this file with a symlink to any other file on th...

SUSE CVE-2022-3647

DISPUTED A vulnerability, which was classified as problematic, was found in Redis up to 6.2.7/7.0.5. Affected is the function sigsegvHandler of the file debug.c of the component Crash Report. The manipulation leads to denial of service. The complexity of an attack is rather high. The exploitabili...

PT-2023-35836 · Git +1 · Boringssl

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-use-after-free READ 8 crash has been reported. The crash involves the sk num variable and occurs during the execution of the ASN1 template free an...

PT-2023-35799 · Git +1 · Radare2

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 4 crash has been reported. The crash involves the functions parse classes 64, classes, and r bin object set items. No...

OSV-2022-1267 Memcpy-param-overlap in repeat

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=55390 Crash type: Memcpy-param-overlap Crash state: repeat pere pere...

PT-2023-35559 · Git +1 · Libplist

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 1 crash has been reported. The crash involves the functions node from openstep, plist from openstep. No information is provid...

PT-2023-35917 · Git +1 · Libplist

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow read issue is reported, with a crash type indicating a Heap-buffer-overflow READ 1. The crash state involves functions such as par...

PT-2022-36813 · Git +1 · Wabt

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A crash has been reported with an unknown write type. The crash involves the std:: 1::allocator traits and std:: 1::vector functions, specifically with...

PT-2022-36807 · Git +1 · Libredwg

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 1 crash has been reported. The crash involves the functions bit read B, dwg decode header variables, and decode R13 RNUMBER. ...

PT-2022-36804 · Git +1 · Hunspell

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 1 crash has been reported. The crash involves the AffixMgr class, specifically the cpdpat check and compound check functions...

OSV-2022-1243 Security exception in com.github.javaparser.CommentsInserter.insertComments

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53980 Crash type: Security exception Crash state: com.github.javaparser.CommentsInserter.insertComments java.base/java.util.Objects.equals com.github.javaparser.Position.equals...

PT-2022-36795 · Mbed Tls · Mbed Tls

Name of the Vulnerable Software and Affected Versions: mbedtls affected versions not specified Description: A heap-use-after-free issue occurs in the mbedtls pkcs7 free function, which is called by mbedtls pkcs7 parse der. This issue is identified by a crash report. Recommendations: At the moment...

SUSE SLES15 / openSUSE 15 Security Update : redis (SUSE-SU-2022:4169-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2022:4169-1 advisory. - CVE-2022-3647: Fixed crash in sigsegvHandler debug function bsc1204633. Tenable has extracted the preceding description bloc...

PT-2022-36781 · Oracle · Java.Base

Name of the Vulnerable Software and Affected Versions: java.base affected versions not specified Description: A security exception crash has been reported. The crash involves the com.ctc.wstx.dtd.FullDTDReader.readContentSpec function, java.base/java.lang.Module.canRead, and...