4503 matches found
CVE-2024-50143 udf: fix uninit-value use in udf_get_fileshortad
In the Linux kernel, the following vulnerability has been resolved: udf: fix uninit-value use in udfgetfileshortad Check for overflow when computing alen in udfcurrentaext to mitigate later uninit-value use in udfgetfileshortad KMSAN bug1. After applying the patch reproducer did not trigger any...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an uninitialized value in the udfgetfileshortad function...
CVE-2024-50143: Use of Uninitialized Resource
In the Linux kernel, the following vulnerability has been resolved: udf: fix uninit-value use in udfgetfileshortad Check for overflow when computing alen in udfcurrentaext to mitigate later uninit-value use in udfgetfileshortad KMSAN bug1. After applying the patch reproducer did not trigger any...
krb5:fuzz_kdc: Use-of-uninitialized-value in k5_hashtab_add
Project: https://github.com/krb5/krb5.git Detailed Report: https://oss-fuzz.com/testcase?key=6536582762397696 Project: krb5 Fuzzing Engine: libFuzzer Fuzz Target: fuzzkdc Job Type: libfuzzermsankrb5 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: k5hashtabadd...
ffmpeg:ffmpeg_dem_IAMF_fuzzer: Use-of-uninitialized-value in ff_iamf_parse_obu_header
Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4554550985424896 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegdemIAMFfuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...
ffmpeg:ffmpeg_DEMUXER_fuzzer: Use-of-uninitialized-value in mxf_read_packet
Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5824136942780416 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegDEMUXERfuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...
imagemagick:encoder_jxl_fuzzer: Use-of-uninitialized-value in GetPixelIntensity
Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5162477567934464 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderjxlfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Cra...
SUSE SLES15 Security Update : rubygem-actionpack-5_1 (SUSE-SU-2024:3877-1)
The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3877-1 advisory. - CVE-2024-47887: Fixed Possible ReDoS vulnerability in HTTP Token authentication in Action Controller bsc1231729. - CVE-2024-42228: Fixed...
imagemagick:encoder_dng_fuzzer: Use-of-uninitialized-value in LibRaw::parse_kodak_ifd
Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5142559472549888 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderdngfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Cra...
SUSE SLES15 Security Update : kernel (Live Patch 27 for SLE 15 SP4) (SUSE-SU-2024:3780-1)
The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3780-1 advisory. This update for the Linux Kernel 5.14.21-15040024122 fixes several issues. The following security issues were fixed: - CVE-2021-47598: schcake:...
SUSE SLES15 Security Update : kernel (Live Patch 49 for SLE 15 SP2) (SUSE-SU-2024:3800-1)
The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3800-1 advisory. This update for the Linux Kernel 5.3.18-15020024194 fixes several issues. The following security issues were fixed: - CVE-2021-47600: dm btree...
open62541:fuzz_attributeoperand: Use-of-uninitialized-value in UA_String_escapeAppend
Project: https://github.com/open62541/open62541.git Detailed Report: https://oss-fuzz.com/testcase?key=4834543258894336 Project: open62541 Fuzzing Engine: libFuzzer Fuzz Target: fuzzattributeoperand Job Type: libfuzzermsanopen62541 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...
imagemagick:encoder_heic_fuzzer: Use-of-uninitialized-value in residual_coding
Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5115519029542912 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value...
SUSE CVE-2024-49900
In the Linux kernel, the following vulnerability has been resolved: jfs: Fix uninit-value access of newea in eabuffer syzbot reports that lzo1x1docompress is using uninit-value: ===================================================== BUG: KMSAN: uninit-value in lzo1x1docompress+0x19f9/0x2510...
ffmpeg:ffmpeg_AV_CODEC_ID_HYMT_fuzzer: Use-of-uninitialized-value in add_left_pred_c
Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6352546854141952 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDHYMTfuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...
PT-2024-40614
Name of the Vulnerable Software and Affected Versions: pcre2 affected versions not specified Description: The issue is related to a crash type of Use-of-uninitialized-value. It occurs in the jit compile function, specifically in pcre2 jit compile 8, which is located in the pcre2 fuzzsupport.c fil...
AZL-51111 CVE-2024-50035 affecting package kernel for versions less than 5.15.173.1-1
In the Linux kernel, the following vulnerability has been resolved: ppp: fix pppasyncencode illegal access syzbot reported an issue in pppasyncencode 1 In this case, pppoesendmsg is called with a zero size. Then pppasyncencode is called with an empty skb. BUG: KMSAN: uninit-value in pppasyncencod...
CVE-2022-48993
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
DEBIAN-CVE-2024-49900
In the Linux kernel, the following vulnerability has been resolved: jfs: Fix uninit-value access of newea in eabuffer syzbot reports that lzo1x1docompress is using uninit-value: ===================================================== BUG: KMSAN: uninit-value in lzo1x1docompress+0x19f9/0x2510...