Miscompilation in cortex-m-rt 0.7.1 and 0.7.2

Version 0.7.1 of the cortex-m-rt crate introduced a regression causing the stack to NOT be eight-byte aligned prior to calling main or any other specified entrypoint, violating the stack ABI of AAPCS32, the default ABI used by all Cortex-M targets. This regression is also present in version 0.7.2...

GHSA-XW5J-GV2G-MJM2 Miscompilation in cortex-m-rt 0.7.1 and 0.7.2

Version 0.7.1 of the cortex-m-rt crate introduced a regression causing the stack to NOT be eight-byte aligned prior to calling main or any other specified entrypoint, violating the stack ABI of AAPCS32, the default ABI used by all Cortex-M targets. This regression is also present in version 0.7.2...

samba:fuzz_parse_lpq_entry: Stack-buffer-overflow in __wrap_strlcpy

Project: https://gitlab.com/samba-team/samba.git Detailed Report: https://oss-fuzz.com/testcase?key=5864352197771264 Project: samba Fuzzing Engine: honggfuzz Fuzz Target: fuzzparselpqentry Job Type: honggfuzzasansamba Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Address:...

mosquitto:broker_fuzz_test_config: Stack-buffer-overflow in mosquitto__hex2bin

Project: https://github.com/eclipse/mosquitto.git Detailed Report: https://oss-fuzz.com/testcase?key=4940854638018560 Project: mosquitto Fuzzing Engine: honggfuzz Fuzz Target: brokerfuzztestconfig Job Type: honggfuzzasanmosquitto Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 1 Crash...

Miscompilation in cortex-m-rt 0.7.1 and 0.7.2

Version 0.7.1 of the cortex-m-rt crate introduced a regression causing the stack to NOT be eight-byte aligned prior to calling main or any other specified entrypoint, violating the stack ABI of AAPCS32, the default ABI used by all Cortex-M targets. This regression is also present in version 0.7.2...

opensc:fuzz_pkcs15init: Stack-buffer-overflow in __wrap_strlcpy

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=4691271135657984 Project: opensc Fuzzing Engine: honggfuzz Fuzz Target: fuzzpkcs15init Job Type: honggfuzzasanopensc Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Address:...

mupdf:pdf_fuzzer: Use-of-uninitialized-value in pdf_read_xref

Project: git://git.ghostscript.com/mupdf.git Detailed Report: https://oss-fuzz.com/testcase?key=6025258198237184 Project: mupdf Fuzzing Engine: libFuzzer Fuzz Target: pdffuzzer Job Type: libfuzzermsanmupdf Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

php:php-fuzz-parser: Heap-buffer-overflow in zend_yytnamerr

Detailed Report: https://oss-fuzz.com/testcase?key=6020211947208704 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-parser Job Type: libfuzzerasani386php Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0xf6146e67 Crash State: zendyytnamerr yysyntaxerror...

USN-5825-2 pam regressions

USN-5825-1 fixed vulnerabilities in PAM. Unfortunately that update was incomplete and could introduce a regression. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that PAM did not correctly restrict login from an IP address that is...

USN-5825-2: PAM regressions

USN-5825-1 fixed vulnerabilities in PAM. Unfortunately that update was incomplete and could introduce a regression. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that PAM did not correctly restrict login from an IP address that is...

Ubuntu: Security Advisory (USN-5825-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-25193

hb-ot-layout-gsubgpos.hh in HarfBuzz through 6.0.0 allows attackers to trigger On^2 growth via consecutive marks during the process of looking back for base glyphs when attaching marks...

gdal:gml_fuzzer: Heap-use-after-free in CPLDestroyXMLNode

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=6453324275908608 Project: gdal Fuzzing Engine: libFuzzer Fuzz Target: gmlfuzzer Job Type: libfuzzerasani386gdal Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0xf55144b8 Crash...

boringssl:conf: Heap-use-after-free in sk_num

Project: https://boringssl.googlesource.com/boringssl Detailed Report: https://oss-fuzz.com/testcase?key=4809750350266368 Project: boringssl Fuzzing Engine: libFuzzer Fuzz Target: conf Job Type: libfuzzerasanboringssl Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address:...

GSD-2023-1001712 x86/resctrl: Fix event counts regression in reused RMIDs

x86/resctrl: Fix event counts regression in reused RMIDs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.7 by commit...

USN-5823-3 mysql-5.7, mysql-8.0 regression

USN-5823-1 fixed vulnerabilities in MySQL. Unfortunately, 8.0.32 introduced a regression in MySQL Router preventing connections from PyMySQL. This update reverts most of the changes in MySQL Router to 8.0.31 until a proper fix can be found. We apologize for the inconvenience. Original advisory...

spring-data-mongodb:ParameterBindingJsonReaderFuzzer: Security exception in org.springframework.expression.spel.ast.OpPlus.getValueInternal

Project: https://github.com/spring-projects/spring-data-mongodb.git Detailed Report: https://oss-fuzz.com/testcase?key=6705627851522048 Project: spring-data-mongodb Fuzzing Engine: libFuzzer Fuzz Target: ParameterBindingJsonReaderFuzzer Job Type: libfuzzerasanspring-data-mongodb Platform Id: linu...

Ubuntu 20.04 LTS / 22.04 LTS : MySQL regression (USN-5823-3)

The remote Ubuntu 20.04 LTS / 22.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5823-3 advisory. USN-5823-1 fixed vulnerabilities in MySQL. Unfortunately, 8.0.32 introduced a regression in MySQL Router preventing connections from PyMySQL. This...

Ubuntu 20.04 LTS : Samba regression (USN-5822-2)

The remote Ubuntu 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5822-2 advisory. USN-5822-1 fixed vulnerabilities in Samba. The update for Ubuntu 20.04 LTS introduced regressions in certain environments. Pending investigation of these...

Ubuntu: Security Advisory (USN-5822-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...