PT-2022-37298 · Git +1 · Mongoose

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type identified as "Use-after-poison READ 1". The crash state includes references to rx ip, mip rx, and a file named...

mongoose:fuzz: Use-after-poison in rx_ip

Project: https://github.com/cesanta/mongoose.git Detailed Report: https://oss-fuzz.com/testcase?key=6325628706357248 Project: mongoose Fuzzing Engine: afl Fuzz Target: fuzz Job Type: aflasanmongoose Platform Id: linux Crash Type: Use-after-poison READ 1 Crash Address: 0x7fc48cefd1df Crash State:...

ntpsec:FuzzServer: Use-after-poison in ke_next_record

Project: https://gitlab.com/NTPsec/ntpsec.git Detailed Report: https://oss-fuzz.com/testcase?key=5929355863261184 Project: ntpsec Fuzzing Engine: afl Fuzz Target: FuzzServer Job Type: aflasanntpsec Platform Id: linux Crash Type: Use-after-poison READ 2 Crash Address: 0x7f15a00fd00a Crash State:...

ntpsec:FuzzExtens: Use-after-poison in ex_next_record

Project: https://gitlab.com/NTPsec/ntpsec.git Detailed Report: https://oss-fuzz.com/testcase?key=5652606961188864 Project: ntpsec Fuzzing Engine: afl Fuzz Target: FuzzExtens Job Type: aflasanntpsec Platform Id: linux Crash Type: Use-after-poison READ 2 Crash Address: 0x7f4840bfd036 Crash State:...

MGASA-2022-0314 Updated mariadb packages fix security vulnerability

zlib before 1.2.12 allows memory corruption when deflating i.e., when compressing if the input has many distant matches. CVE-2018-25032 A use-after-poison in prepareinplaceaddvirtual at /storage/innobase/handler/handler0alter.cc. CVE-2022-32081 An assertion failure at table-getrefcount == 0 in...

Mageia: Security Advisory (MGASA-2022-0314)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Use-after-poison

MariaDB is vulnerable to an use-after-poison. The vulnerability exists due to lack of proper memory handling in sanitizercommoninterceptors.inc which allows an attacker to do a use-after-poison...

FreeBSD : MariaDB -- Multiple vulnerabilities (36d10af7-248d-11ed-856e-d4c9ef517024)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 36d10af7-248d-11ed-856e-d4c9ef517024 advisory. - zlib before 1.2.12 allows memory corruption when deflating i.e., when compressing if the inp...

MariaDB v10.7 was discovered to contain an use-after-poison in in __interceptor_memset at /libsanitizer/sanitizer_common/sanitizer_common_interceptors.inc.

...

MariaDB v10.4 to v10.7 was discovered to contain an use-after-poison in prepare_inplace_add_virtual at /storage/innobase/handler/handler0alter.cc.

...

Slackware Linux 15.0 / current mariadb Multiple Vulnerabilities (SSA:2022-228-01)

The version of mariadb installed on the remote host is prior to 10.5.17 / 10.6.9. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2022-228-01 advisory. - zlib before 1.2.12 allows memory corruption when deflating i.e., when compressing if the input has many distant...

MariaDB 10.7.0 < 10.7.5 Multiple Vulnerabilities

The version of MariaDB installed on the remote host is prior to 10.7.5. It is, therefore, affected by multiple vulnerabilities as referenced in the 10.7.5 advisory. - A vulnerability was found in MariaDB. An OpenVAS port scan on ports 3306 and 4567 allows a malicious remote client to cause a deni...

ruby:fuzz_ruby_gems: Use-after-poison in rb_set_class_path_string

Project: https://github.com/ruby/ruby.git Detailed Report: https://oss-fuzz.com/testcase?key=5211572917633024 Project: ruby Fuzzing Engine: honggfuzz Fuzz Target: fuzzrubygems Job Type: honggfuzzasanruby Platform Id: linux Crash Type: Use-after-poison READ 8 Crash Address: 0x7fffdcc662c0 Crash...

CVE-2022-25763

Improper Input Validation vulnerability in HTTP/2 request validation of Apache Traffic Server allows an attacker to create smuggle or cache poison attacks. This issue affects Apache Traffic Server 8.0.0 to 9.1.2...

CVE-2022-25763

CVE-2022-25763 affects Apache Traffic Server 8.0.0–9.1.2 due to improper HTTP/2 request validation, enabling potential smuggle or cache-poison attacks. The initial document lists CVSS metrics (base 7.5/ HIGH) and impact as I:H, with no exploitation status provided. Remediation references exist in...

CVE-2022-25763

Improper Input Validation vulnerability in HTTP/2 request validation of Apache Traffic Server allows an attacker to create smuggle or cache poison attacks. This issue affects Apache Traffic Server 8.0.0 to 9.1.2...

CVE-2022-25763 Improper input validation on HTTP/2 headers

Improper Input Validation vulnerability in HTTP/2 request validation of Apache Traffic Server allows an attacker to create smuggle or cache poison attacks. This issue affects Apache Traffic Server 8.0.0 to 9.1.2...

MariaDB 10.6.0 < 10.6.9 Multiple Vulnerabilities

The version of MariaDB installed on the remote host is prior to 10.6.9. It is, therefore, affected by multiple vulnerabilities as referenced in the 10.6.9 advisory. - A vulnerability was found in MariaDB. An OpenVAS port scan on ports 3306 and 4567 allows a malicious remote client to cause a deni...

MariaDB 10.9.0 < 10.9.2 Multiple Vulnerabilities

The version of MariaDB installed on the remote host is prior to 10.9.2. It is, therefore, affected by multiple vulnerabilities as referenced in the 10.9.2 advisory. - MariaDB v10.7 was discovered to contain an use-after-poison in in interceptormemset at...

MariaDB 10.8.0 < 10.8.4 Multiple Vulnerabilities

The version of MariaDB installed on the remote host is prior to 10.8.4. It is, therefore, affected by multiple vulnerabilities as referenced in the 10.8.4 advisory. - A vulnerability was found in MariaDB. An OpenVAS port scan on ports 3306 and 4567 allows a malicious remote client to cause a deni...