AZL-9407 CVE-2022-1304 affecting package e2fsprogs for versions less than 1.46.5-3

An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code execution via a specially crafted filesystem...

CVE-2022-27445

MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/sqlwindow.cc...

DEBIAN-CVE-2022-27386

MariaDB Server v10.7 and below was discovered to contain a segmentation fault via the component sql/sqlclass.cc...

envoy: Incorrect handling of internal redirects to routes with a direct response entry

A flaw was found in envoy. Due to incorrect handling of the common router, a segfault is possible when internal redirects are routes with a direct response entry...

envoy: Incorrect handling of internal redirects to routes with a direct response entry

A flaw was found in envoy. Due to incorrect handling of the common router, a segfault is possible when internal redirects are routes with a direct response entry...

SUSE-SU-2022:1108-1 Security update for util-linux

This update for util-linux fixes the following issues: - Improve throughput and reduce clock sequence increments for high load situation with time based version 1 uuids. bsc1194642 - Prevent root owning of /var/lib/libuuid/clock.txt. bsc1194642 - Warn if uuidd lock state is not usable. bsc1194642...

fluent-bit:flb-it-fuzz-record_ac_fuzzer_OSSFUZZ: Segv on unknown address in flb_ra_translate

Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=5740978868191232 Project: fluent-bit Fuzzing Engine: libFuzzer Fuzz Target: flb-it-fuzz-recordacfuzzerOSSFUZZ Job Type: libfuzzerasanfluent-bit Platform Id: linux Crash Type: Segv on unknown addre...

PT-2022-3099 · E2Fsprogs +9 · E2Fsprogs +9

Name of the Vulnerable Software and Affected Versions: e2fsprogs version 1.46.5 Description: The issue is related to an out-of-bounds read/write in the e2fsprogs utility set, which can lead to a segmentation fault and possibly allow an attacker to execute arbitrary code via a specially crafted...

CLSA-2022-1648067906 Fix of CVE: CVE-2020-25717

CVE-2020-25717: Fix username map script regression rhbz2046174 - Fix possible segfault while joining a domain rhbz2046160...

openSUSE: Security Advisory for tcpdump (openSUSE-SU-2022:0774-1)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2022-1035

Removed by vendor...

fluent-bit:flb-it-fuzz-parser_fuzzer_OSSFUZZ: Segv on unknown address in flb_sds_copy

Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=6211782409060352 Project: fluent-bit Fuzzing Engine: libFuzzer Fuzz Target: flb-it-fuzz-parserfuzzerOSSFUZZ Job Type: libfuzzerasanfluent-bit Platform Id: linux Crash Type: Segv on unknown address...

libxml2:schema: Segv on unknown address in ld-linux-x86-64.so.2

Detailed Report: https://oss-fuzz.com/testcase?key=5557530963607552 Project: libxml2 Fuzzing Engine: libFuzzer Fuzz Target: schema Job Type: libfuzzermsanlibxml2 Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: ld-linux-x86-64.so.2 ld-linux-x86-64.so.2...

libxslt:xslt: Segv on unknown address in ld-linux-x86-64.so.2

Detailed Report: https://oss-fuzz.com/testcase?key=5418443480891392 Project: libxslt Fuzzing Engine: libFuzzer Fuzz Target: xslt Job Type: libfuzzermsanlibxslt Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: ld-linux-x86-64.so.2 ld-linux-x86-64.so.2...

Security Bulletin: Multiple vulnerabilities fixed in IBM Maximo Application Suite Monitor

Summary IBM Maximo Application Suite Monitor is vulnerable to Multiple vulnerabilities. See Vulnerability Details. This has been addressed in each of the components; refer to the Remediation section for details. Vulnerability Details CVEID: CVE-2020-15265 DESCRIPTION: Tensorflow is vulnerable to ...

fluent-bit:flb-it-fuzz-record_ac_fuzzer_OSSFUZZ: Segv on unknown address in flb_ra_create

Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=5948759685595136 Project: fluent-bit Fuzzing Engine: libFuzzer Fuzz Target: flb-it-fuzz-recordacfuzzerOSSFUZZ Job Type: libfuzzerasanfluent-bit Platform Id: linux Crash Type: Segv on unknown addre...

libxslt:xslt: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4701152988495872 Project: libxslt Fuzzing Engine: libFuzzer Fuzz Target: xslt Job Type: libfuzzermsanlibxslt Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: memory MSAN Crash Revision:...

SUSE-SU-2022:0774-1 Security update for tcpdump

This update for tcpdump fixes the following issues: - CVE-2018-16301: Fixed segfault when handling large files bsc1195825...

OPENSUSE-SU-2022:0774-1 Security update for tcpdump

This update for tcpdump fixes the following issues: - CVE-2018-16301: Fixed segfault when handling large files bsc1195825...

CVE-2022-21655

A flaw was found in envoy. Due to incorrect handling of the common router, a segfault is possible when internal redirects are routes with a direct response entry...