CVE-2021-39228

CVE-2021-39228 affects Tremor 0.7.2–0.11.6, including the tremor-script crate. The issue is a memory-safety bug that occurs when using tremor-script’s patch or merge on the state and assigning the result back to state; the optimizer could modify the target in place, leaving references to memory t...

Tremor 资源管理错误漏洞

Tremor is an open source event processing system for unstructured data. A resource management error vulnerability exists in Tremor Tremor-runtime, which arises when the product causes access to freed memory when using patch or merge on a state and assigning the result back to the state state. The...

PT-2021-22478

Name of the Vulnerable Software and Affected Versions Tremor versions 0.7.2 through 0.11.6 Description The issue is a memory safety problem that occurs when using patch or merge on state and assigning the result back to state. This allows access to already freed regions of memory, which can be se...

CVE-2021-39228: Use After Free

Tremor is an event processing system for unstructured data. A vulnerability exists between versions 0.7.2 and 0.11.6. This vulnerability is a memory safety Issue when using patch or merge on state and assign the result back to state. In this case, affected versions of Tremor and the tremor-script...

RUSTSEC-2021-0111 Memory Safety Issue when using `patch` or `merge` on `state` and assign the result back to `state`

Affected versions of this crate maintains references to memory that might have been freed already. If affects the following two tremor-script language constructs: A Merge where we assign the result back to the target expression and the expression to be merged needs to reference the event: let sta...

Memory Safety Issue when using `patch` or `merge` on `state` and assign the result back to `state`

Affected versions of this crate maintains references to memory that might have been freed already. If affects the following two tremor-script language constructs: A Merge where we assign the result back to the target expression and the expression to be merged needs to reference the event: let sta...

PT-2021-24275

Name of the Vulnerable Software and Affected Versions: tremor-script versions prior to 0.11.6 Description: The issue is related to a use-after-free error in the tremor-script crate. It affects the tremor-script language constructs, specifically Merge and Patch, where the result is assigned back t...

PT-2021-24276

Name of the Vulnerable Software and Affected Versions: tremor-script versions prior to 0.11.6 Description: The issue is related to a use-after-free error in the tremor-script crate for Rust. It affects the Merge and Patch language constructs when they reference the event and assign the result bac...

tremor:decode_fuzzer: Heap-buffer-overflow in res2_inverse

Detailed Report: https://oss-fuzz.com/testcase?key=5769585533124608 Project: tremor Fuzzing Engine: afl Fuzz Target: decodefuzzer Job Type: aflasantremor Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x60e00000062d Crash State: res2inverse mapping0inverse...

tremor:decode_fuzzer: Crash in _01inverse

Project: https://gitlab.xiph.org/xiph/tremor.git Detailed Report: https://oss-fuzz.com/testcase?key=5087225147817984 Project: tremor Fuzzing Engine: libFuzzer Fuzz Target: decodefuzzer Job Type: libfuzzermsantremor Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x70a06c800114 Crash...

tremor:decode_fuzzer: Heap-buffer-overflow in vorbis_book_decodev_add

Detailed Report: https://oss-fuzz.com/testcase?key=5674180009000960 Project: tremor Fuzzing Engine: honggfuzz Fuzz Target: decodefuzzer Job Type: honggfuzzasantremor Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x611000000500 Crash State: vorbisbookdecodevadd 01invers...

libtremor -- multiple vulnerabilities

The RedHat Project reports: Will Drewry of the Google Security Team reported multiple issues in OGG Vorbis and Tremor libraries, that could cause application using those libraries to crash NULL pointer dereference or divide by zero, enter an infinite loop or cause heap overflow caused by integer...