RHEL 7 : libssh2 (RHSA-2023:5615)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:5615 advisory. The libssh2 packages provide a library that implements the SSH2 protocol. Security Fixes: libssh2: use-of-uninitialized-value in libssh2transportread...

PT-2023-35991 · Git +1 · Cras

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash caused by a use-of-uninitialized-value. The crash occurs in the following functions: dev io capture, dev io run, and audi...

OSV-2023-689 Use-of-uninitialized-value

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61380 Crash type: Use-of-uninitialized-value Crash state: NULL...

PT-2023-35950 · Git +1 · Grok

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of "Use-of-uninitialized-value" with a crash state of "NULL". This suggests that the problem occurs when the softwar...

CVE-2022-44451

A use of uninitialized pointer vulnerability exists in the MSI format atom functionality of Open Babel 3.1.1 and master commit 530dbfa3. A specially crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2023-36836

CVE-2023-36836 affects Juniper Networks Junos OS and Junos OS Evolved. A use of an uninitialized resource in the routing protocol daemon (rpd) allows a local, authenticated attacker with low privileges to cause a Denial of Service (DoS). In a Multicast-only Fast Reroute (MoFRR) scenario, executin...

JVN#64316789: Multiple vulnerabilities in SoftEther VPN and PacketiX VPN

SoftEther VPN provided by University of Tsukuba SoftEther VPN Project and PacketiX VPN provided by SoftEther Corporation contain multiple vulnerabilities listed below in VPN Client function, and Dynamic DNS Client function included in the VPN server. Heap-based buffer overflow CWE-122 -...

OSV-2023-382 Use-of-uninitialized-value in wabt::BinaryReaderObjdump::PrintInitExpr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58694 Crash type: Use-of-uninitialized-value Crash state: wabt::BinaryReaderObjdump::PrintInitExpr wabt::BinaryReaderObjdump::EndInitExpr wabt::BinaryReaderObjdump::EndGlobalInitExpr...

OSV-2023-239 Use-of-uninitialized-value in ihevce_strm_fill_done

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57401 Crash type: Use-of-uninitialized-value Crash state: ihevcestrmfilldone ihevceentcodingthrd osalfunc...

OSV-2023-235 Use-of-uninitialized-value in complexity_RC_reset_marking

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57398 Crash type: Use-of-uninitialized-value Crash state: complexityRCresetmarking ihevcepreencprocessframethrd osalfunc...

Amazon Linux 2023 : vim-common, vim-data, vim-default-editor (ALAS2023-2023-098)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-098 advisory. 2024-02-15: CVE-2022-3591 was added to this advisory. 2024-02-15: CVE-2022-3520 was added to this advisory. A flaw was found in vim. A possible heap-based buffer overflow could allow an attacke...

CVE-2022-43606

A use-of-uninitialized-pointer vulnerability exists in the Forward Open connectionmanagemententry functionality of EIP Stack Group OpENer development commit 58ee13c. A specially-crafted EtherNet/IP request can lead to use of a null pointer, causing the server to crash. An attacker can send a seri...

CVE-2022-43606

A use-of-uninitialized-pointer vulnerability exists in the Forward Open connectionmanagemententry functionality of EIP Stack Group OpENer development commit 58ee13c. A specially-crafted EtherNet/IP request can lead to use of a null pointer, causing the server to crash. An attacker can send a seri...

CVE-2022-43606

Summary (CVE-2022-43606) : In EIP Stack Group OpENer (development commit 58ee13c), a use-of-uninitialized-pointer occurs in the Forward Open connection_management_entry, when processing a specially crafted EtherNet/IP request. This can lead to a crash (server segmentation fault) due to dereferenc...

OSV-2023-119 Use-of-uninitialized-value in rename_process

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56401 Crash type: Use-of-uninitialized-value Crash state: renameprocess safeforkfull parsetimestamp...

PT-2023-35604 · Git +1 · Systemd

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of "Use-of-uninitialized-value". The crash state includes functions such as rename process, safe fork full, and pars...

EulerOS Virtualization 3.0.2.2 : vim (EulerOS-SA-2023-1303)

According to the versions of the vim packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - vim is vulnerable to Heap-based Buffer Overflow CVE-2021-3778, CVE-2021-3872, CVE-2021-3927, CVE-2021-3984, CVE-2021-4019,...

EulerOS Virtualization 3.0.2.6 : vim (EulerOS-SA-2023-1053)

According to the versions of the vim packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - vim is vulnerable to Heap-based Buffer Overflow CVE-2021-3778, CVE-2021-3872, CVE-2021-3927, CVE-2021-3984, CVE-2021-4019,...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : vim (SUSE-SU-2022:4282-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:4282-1 advisory. Updated to version 9.0 with patch level 0814: - CVE-2021-3928: Fixed stack-based buffer overflow...

Debian dla-3182 : vim - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3182 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3182-1 [email protected]...