CVE-2023-5563

CVE-2023-5563 affects Zephyr RTOS, specifically the SJA1000 CAN controller driver backend. When built with CONFIG_CAN_AUTO_BUS_OFF_RECOVERY=y, the driver attempts to recover from a bus-off event by calling k_sleep() in IRQ context, which leads to a fatal exception. The linked documents confirm th...

CVE-2023-5563

The SJA1000 CAN controller driver backend automatically attempt to recover from a bus-off event when built with CONFIGCANAUTOBUSOFFRECOVERY=y. This results in calling ksleep in IRQ context, causing a fatal exception...

CVE-2023-5563

The SJA1000 CAN controller driver backend automatically attempt to recover from a bus-off event when built with CONFIGCANAUTOBUSOFFRECOVERY=y. This results in calling ksleep in IRQ context, causing a fatal exception...

Juniper Networks Junos OS Code Issue Vulnerability

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. Juniper Networks Junos OS contains a code issue vulnerability that arises from an improperly checked exception or anomaly...

Zephyr Security Breach

Zephyr is an extensible real-time operating system RTOS open-sourced by the Zephyr Project. A security vulnerability exists in Zephyr 3.4.0 and earlier versions, which stems from the fact that when built with CONFIGCANAUTOBUSOFFRECOVERY=y, the backend of the SJA1000 CAN controller driver...

OSV-2023-1001 Security exception in java.base/java.lang.String.repeat

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63154 Crash type: Security exception Crash state: java.base/java.lang.String.repeat org.springframework.expression.spel.ast.OpMultiply.getValueInternal org.springframework.expression.spel.ast.MethodReference.getArguments...

PT-2023-35523 · Spring · Spring

Name of the Vulnerable Software and Affected Versions: Spring versions affected versions not specified Description: The issue is related to a security exception in the java.lang.String.repeat method, which is called by org.springframework.expression.spel.ast.OpMultiply.getValueInternal and...

PT-2023-29531 · Mediawiki +1 · Mediawiki +1

Name of the Vulnerable Software and Affected Versions: MediaWiki versions prior to 1.39.5 MediaWiki versions 1.40.x prior to 1.40.1 Description: An issue was discovered in VectorComponentUserLinks.php in the Vector Skin component. A MalformedTitleException is uncaught if it is not a valid title,...

jackson-databind Vulnerability in Bitbucket Data Center and Server

This High severity Third-Party Dependency vulnerability was introduced in versions 7.17.0, 7.21.0, 8.7.0, 8.8.0, 8.9.0, 8.10.0, 8.11.0, 8.12.0, and 8.13.0 of Bitbucket Data Center and Server. This Third-Party Dependency vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of...

The vulnerability of the multimedia library libvpx arises from improper handling of exception states during the processing of certain special format video data. This vulnerability allows attackers to cause service failures.

The vulnerability of the multimedia library libvpx is related to incorrect processing of exception states during the processing of certain special format video data. Exploiting this vulnerability can allow a malicious actor to cause service failures through a specially created HTML page...

OSV-2023-962 Security exception in java.base/java.util.regex.Pattern$GroupHead.match

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62976 Crash type: Security exception Crash state: java.base/java.util.regex.Pattern$GroupHead.match java.base/java.util.regex.Pattern$Loop.match java.base/java.util.regex.Pattern$GroupTail.match...

OSV-2023-961 Security exception in java.base/java.util.Arrays.copyOf

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62959 Crash type: Security exception Crash state: java.base/java.util.Arrays.copyOf java.base/java.lang.AbstractStringBuilder.ensureCapacityInternal java.base/java.lang.AbstractStringBuilder.append...

OSV-2023-957 Security exception in com.github.javaparser.ast.validator.TreeVisitorValidator.accept

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62967 Crash type: Security exception Crash state: com.github.javaparser.ast.validator.TreeVisitorValidator.accept com.github.javaparser.ast.expr.FieldAccessExpr.getMetaModel...

PT-2023-36052 · Git +1 · Apache Poi

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A security exception crash was reported, involving the java.base/java.util.Arrays.copyOf, java.base/java.lang.AbstractStringBuilder.ensureCapacityInterna...

OSV-2023-955 Security exception in org.apache.poi.ddf.EscherPropertyFactory$$Lambda$285/ADDRESS.apply

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62924 Crash type: Security exception Crash state: org.apache.poi.ddf.EscherPropertyFactory$$Lambda$285/ADDRESS.apply org.apache.poi.ddf.EscherPropertyFactory.createProperties org.apache.poi.ddf.AbstractEscherOptRecord.fillFiel...

PT-2023-36049 · Apache · Apache Poi

Name of the Vulnerable Software and Affected Versions: Apache POI affected versions not specified Description: A security exception occurs in Apache POI, specifically in the EscherPropertyFactory class. The issue is related to the createProperties method and the fillFields method in...

CVE-2023-37605

Weak Exception Handling vulnerability in baramundi software GmbH EMM Agent 23.1.50 and before allows an attacker to cause a denial of service via a crafted request to the password parameter...

CVE-2023-37605

Weak Exception Handling vulnerability in baramundi software GmbH EMM Agent 23.1.50 and before allows an attacker to cause a denial of service via a crafted request to the password parameter...

CVE-2023-37605

Weak Exception Handling vulnerability in baramundi software GmbH EMM Agent 23.1.50 and before allows an attacker to cause a denial of service via a crafted request to the password parameter...

CVE-2023-37605

Weak Exception Handling vulnerability in baramundi software GmbH EMM Agent 23.1.50 and before allows an attacker to cause a denial of service via a crafted request to the password parameter...