jq:jq_fuzz_parse_stream: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5436452473733120 Project: jq Fuzzing Engine: libFuzzer Fuzz Target: jqfuzzparsestream Job Type: libfuzzerasanjq Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN Crash Revision:...

OPENSUSE-SU-2024:10881-1 jq-1.6-2.9 on GA media

These are all security issues fixed in the jq-1.6-2.9 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13521-1 jq-1.7.1-1.1 on GA media

These are all security issues fixed in the jq-1.7.1-1.1 package on the GA media of openSUSE Tumbleweed...

jq bug fix and enhancement update

An update is available for jq. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 8.10...

RHEL 8 : jq (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - jq: stack exhaustion via jvdumpterm function CVE-2016-4074 Note that Nessus has not tested for this issue but has...

BIT-ARGO-CD-2024-32476 Denial of Service via malicious jqPathExpressions in ignoreDifferences

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. There is a Denial of Service DoS vulnerability via OOM using jq in ignoreDifferences. This vulnerability has been patched in versions 2.10.7, 2.9.12 and 2.8.16...

CVE-2024-32476

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. There is a Denial of Service DoS vulnerability via OOM using jq in ignoreDifferences. This vulnerability has been patched in versions 2.10.7, 2.9.12 and 2.8.16...

CVE-2024-32476: Uncontrolled Resource Consumption

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. There is a Denial of Service DoS vulnerability via OOM using jq in ignoreDifferences. This vulnerability has been patched in versions 2.10.7, 2.9.12 and 2.8.16...

RHEL 8 : jq (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - jq: stack exhaustion via jvdumpterm function CVE-2016-4074 Note that Nessus has not tested for this issue but has...

jq:jq_fuzz_fixed: Crash in jvp_object_free

Project: https://github.com/jqlang/jq.git Detailed Report: https://oss-fuzz.com/testcase?key=5098395172667392 Project: jq Fuzzing Engine: libFuzzer Fuzz Target: jqfuzzfixed Job Type: libfuzzerubsanjq Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x5bcd2e830297 Crash State:...

CVE-2024-32476

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. There is a Denial of Service DoS vulnerability via OOM using jq in ignoreDifferences. This vulnerability has been patched in versions 2.10.7, 2.9.12 and 2.8.16...

CVE-2024-32476

CVE-2024-32476 affects Argo CD (GitOps for Kubernetes). The vulnerability is a Denial of Service caused by an OOM triggered by jq in ignoreDifferences logic. Root cause details indicate uncontrolled memory use when processing certain jqPathExpressions. Patched versions are 2.10.7, 2.9.12, and 2.8...

jq:jq_fuzz_execute: Crash in jv_array_set

Project: https://github.com/jqlang/jq.git Detailed Report: https://oss-fuzz.com/testcase?key=5673689753387008 Project: jq Fuzzing Engine: honggfuzz Fuzz Target: jqfuzzexecute Job Type: honggfuzzasanjq Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x609800c101f0 Crash State: jvarrayse...

PT-2024-5350 · Jq +1 · Jq +1

Name of the Vulnerable Software and Affected Versions: Argo CD versions prior to 2.10.8 Argo CD versions prior to 2.9.13 Argo CD versions prior to 2.8.17 Description: The issue is related to a Denial of Service DoS vulnerability via Out of Memory OOM using jq in ignoreDifferences. This...

jq:jq_fuzz_fixed: Crash in std::__1::__POW10_SPLIT_2

Project: https://github.com/jqlang/jq.git Detailed Report: https://oss-fuzz.com/testcase?key=4599000370053120 Project: jq Fuzzing Engine: libFuzzer Fuzz Target: jqfuzzfixed Job Type: libfuzzerubsanjq Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000000640000 Crash State:...

jq:jq_fuzz_execute: Heap-buffer-overflow in jv_parse

Project: https://github.com/jqlang/jq.git Detailed Report: https://oss-fuzz.com/testcase?key=4891865084133376 Project: jq Fuzzing Engine: libFuzzer Fuzz Target: jqfuzzexecute Job Type: libfuzzerasanjq Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x6030000113c1 Crash...

jq:jq_fuzz_execute: Heap-buffer-overflow in validate_relpath

Project: https://github.com/jqlang/jq.git Detailed Report: https://oss-fuzz.com/testcase?key=5666078684413952 Project: jq Fuzzing Engine: afl Fuzz Target: jqfuzzexecute Job Type: aflasanjq Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address: 0x603000000351 Crash State:...

jq:jq_fuzz_fixed: Crash with empty stacktrace

Project: https://github.com/jqlang/jq.git Detailed Report: https://oss-fuzz.com/testcase?key=5316154545471488 Project: jq Fuzzing Engine: libFuzzer Fuzz Target: jqfuzzfixed Job Type: libfuzzerubsanjq Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00002647e200 Crash State: NULL...

jq:jq_fuzz_fixed: Crash in jvp_object_free

Project: https://github.com/jqlang/jq.git Detailed Report: https://oss-fuzz.com/testcase?key=5913670479577088 Project: jq Fuzzing Engine: libFuzzer Fuzz Target: jqfuzzfixed Job Type: libfuzzerubsanjq Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0000000903e7 Crash State:...

jq:jq_fuzz_execute: Heap-buffer-overflow in jv_string_vfmt

Project: https://github.com/jqlang/jq.git Detailed Report: https://oss-fuzz.com/testcase?key=6170924017385472 Project: jq Fuzzing Engine: libFuzzer Fuzz Target: jqfuzzexecute Job Type: libfuzzerasanjq Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address: 0x603000000201 Crash...