PT-2023-35956 · Apache · Apache Lucene

Name of the Vulnerable Software and Affected Versions: Apache Lucene affected versions not specified Description: The issue is related to a security exception in the org.apache.lucene.util.automaton.RegExp.toAutomaton function. It involves the java.base/java.util.BitSet.ensureCapacity and...

lucene:IndexSearchFuzzer: Security exception in org.apache.lucene.util.automaton.RegExp.toAutomaton

Project: https://github.com/apache/lucene.git Detailed Report: https://oss-fuzz.com/testcase?key=5120803086401536 Project: lucene Fuzzing Engine: libFuzzer Fuzz Target: IndexSearchFuzzer Job Type: libfuzzerasanlucene Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

lucene:QueryParserFuzzer: Security exception in org.apache.lucene.analysis.sr.SerbianNormalizationFilter.incrementToken

Project: https://github.com/apache/lucene.git Detailed Report: https://oss-fuzz.com/testcase?key=5157331690979328 Project: lucene Fuzzing Engine: libFuzzer Fuzz Target: QueryParserFuzzer Job Type: libfuzzerasanlucene Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

PT-2023-35954 · Apache · Apache Lucene

Name of the Vulnerable Software and Affected Versions: Apache Lucene affected versions not specified Description: A security exception crash has been reported in Apache Lucene. The crash occurs in the CharTermAttributeImpl.clone and PackedTokenAttributeImpl.clone functions. Recommendations: At th...

lucene:QueryParserFuzzer: Security exception in org.apache.lucene.analysis.tokenattributes.CharTermAttributeImpl.clone

Project: https://github.com/apache/lucene.git Detailed Report: https://oss-fuzz.com/testcase?key=5117840909533184 Project: lucene Fuzzing Engine: libFuzzer Fuzz Target: QueryParserFuzzer Job Type: libfuzzerasanlucene Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

PT-2023-35928 · Apache · Apache Lucene

Name of the Vulnerable Software and Affected Versions: Apache Lucene affected versions not specified Description: The issue is related to a security exception in the org.apache.lucene.util.automaton.RegExp.toAutomaton function. It involves the java.base/java.util.BitSet.ensureCapacity and...

lucene:IndexSearchFuzzer: Security exception in org.apache.lucene.util.automaton.RegExp.toAutomaton

Project: https://github.com/apache/lucene.git Detailed Report: https://oss-fuzz.com/testcase?key=5378350024359936 Project: lucene Fuzzing Engine: libFuzzer Fuzz Target: IndexSearchFuzzer Job Type: libfuzzerasanlucene Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

org.jenkins-ci.lib:xtrigger-lib (>=0.34, <=0.35), org.jenkins-ci.main:jenkins-test-harness (1.590) +4 more potentially affected by CVE-2023-39151 via org.jenkins-ci.main:jenkins-core (1.590)

org.jenkins-ci.main:jenkins-core MAVEN version 1.590 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.lib:xtrigger-lib =0.34, =3.0, =4.4 -...

PT-2023-35923 · Apache · Apache Lucene

Name of the Vulnerable Software and Affected Versions: Apache Lucene affected versions not specified Description: The issue is related to a security exception in the org.apache.lucene.util.automaton.RegExp.toAutomaton function. It involves the java.base/java.util.BitSet.ensureCapacity and...

lucene:IndexSearchFuzzer: Security exception in org.apache.lucene.util.automaton.RegExp.toAutomaton

Project: https://github.com/apache/lucene.git Detailed Report: https://oss-fuzz.com/testcase?key=6595572956790784 Project: lucene Fuzzing Engine: libFuzzer Fuzz Target: IndexSearchFuzzer Job Type: libfuzzerasanlucene Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

Security Bulletin: Denial of Service Vulnerability in Apache Solr used by IBM Operations Analytics - Log Analysis

Summary There is a potential denial of service in Apache Solr that is used by IBM Operations Analytics - Log Analysis Vulnerability Details IBM X-Force ID: 216835 DESCRIPTION: Apache Lucene is vulnerable to a denial of service. By sending a specific regular expression query, a remote attacker cou...

lucene:QueryParserFuzzer: Security exception in org.apache.lucene.util.AttributeImpl.clone

Project: https://github.com/apache/lucene.git Detailed Report: https://oss-fuzz.com/testcase?key=5202028079742976 Project: lucene Fuzzing Engine: libFuzzer Fuzz Target: QueryParserFuzzer Job Type: libfuzzerasanlucene Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

lucene:IndexSearchFuzzer: Security exception in org.apache.lucene.util.automaton.RegExp.parseConcatExp

Project: https://github.com/apache/lucene.git Detailed Report: https://oss-fuzz.com/testcase?key=5139324912664576 Project: lucene Fuzzing Engine: libFuzzer Fuzz Target: IndexSearchFuzzer Job Type: libfuzzerasanlucene Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

OSV-2023-533 Security exception in org.apache.lucene.util.ArrayUtil.growExact

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60248 Crash type: Security exception Crash state: org.apache.lucene.util.ArrayUtil.growExact org.apache.lucene.util.ArrayUtil.grow org.apache.lucene.util.BytesRefBuilder.grow...

PT-2023-35892 · Apache · Apache Lucene

Name of the Vulnerable Software and Affected Versions: Apache Lucene affected versions not specified Description: A security exception crash has been reported in Apache Lucene. The crash occurs in the org.apache.lucene.util.ArrayUtil.growExact function, which is called by...

lucene:QueryParserFuzzer: Security exception in org.apache.lucene.util.ArrayUtil.growExact

Detailed Report: https://oss-fuzz.com/testcase?key=5373660240936960 Project: lucene Fuzzing Engine: libFuzzer Fuzz Target: QueryParserFuzzer Job Type: libfuzzerasanlucene Platform Id: linux Crash Type: Security exception Crash Address: Crash State: org.apache.lucene.util.ArrayUtil.growExact...

OSV-2023-408 Security exception in org.apache.lucene.util.ArrayUtil.growExact

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59071 Crash type: Security exception Crash state: org.apache.lucene.util.ArrayUtil.growExact org.apache.lucene.util.ArrayUtil.grow org.apache.lucene.util.BytesRefBuilder.grow...

PT-2023-35834 · Apache · Apache Lucene

Name of the Vulnerable Software and Affected Versions: Apache Lucene affected versions not specified Description: A security exception crash has been reported in Apache Lucene. The crash occurs in the org.apache.lucene.util.ArrayUtil.growExact function, which is called by...

lucene:QueryParserFuzzer: Security exception in org.apache.lucene.util.ArrayUtil.growExact

Project: https://github.com/apache/lucene.git Detailed Report: https://oss-fuzz.com/testcase?key=6514376076296192 Project: lucene Fuzzing Engine: libFuzzer Fuzz Target: QueryParserFuzzer Job Type: libfuzzerasanlucene Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

Security Bulletin: IBM Watson Discovery Cartridge for IBM Cloud Pak for Data affected by vulnerability in Apache Lucene

Summary IBM Watson Discovery Cartridge for IBM Cloud Pak for Data contains a vulnerable version of Apache Lucene. Vulnerability Details IBM X-Force ID: 216835 DESCRIPTION: Apache Lucene is vulnerable to a denial of service. By sending a specific regular expression query, a remote attacker could...