bearssl:cryptofuzz-bearssl: Use-of-uninitialized-value in Botan::operator-

Detailed Report: https://oss-fuzz.com/testcase?key=5842119275642880 Project: bearssl Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-bearssl Job Type: libfuzzermsanbearssl Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: Botan::operator-...

libecc:cryptofuzz-libecc: Use-of-uninitialized-value in Botan::IntMod<Botan::MontgomeryRep<Botan::EllipticCurve<Botan::PCurve::brainpool

Project: https://github.com/ANSSI-FR/libecc.git https://github.com/libecc/libecc.git Detailed Report: https://oss-fuzz.com/testcase?key=5344590727544832 Project: libecc Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-libecc Job Type: libfuzzermsanlibecc Platform Id: linux Crash Type:...

cryptofuzz:cryptofuzz-boringssl-noasm: Use-of-uninitialized-value in Botan::ProjectiveCurvePoint<Botan::IntMod<Botan::PCurve::secp256k1::Secp256k1Rep

Project: https://github.com/guidovranken/cryptofuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=5187614846550016 Project: cryptofuzz Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-boringssl-noasm Job Type: libfuzzermsancryptofuzz Platform Id: linux Crash Type:...

libecc:cryptofuzz-libecc: Use-of-uninitialized-value in Botan::ProjectiveCurvePoint<Botan::IntMod<Botan::PCurve::secp256k1::Secp256k1Rep

Project: https://github.com/ANSSI-FR/libecc.git https://github.com/libecc/libecc.git Detailed Report: https://oss-fuzz.com/testcase?key=4922451417432064 Project: libecc Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-libecc Job Type: libfuzzermsanlibecc Platform Id: linux Crash Type:...

libecc:cryptofuzz-libecc: Use-of-uninitialized-value in Botan::operator-

Project: https://github.com/ANSSI-FR/libecc.git https://github.com/libecc/libecc.git Detailed Report: https://oss-fuzz.com/testcase?key=4690496165838848 Project: libecc Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-libecc Job Type: libfuzzermsanlibecc Platform Id: linux Crash Type:...

bearssl:cryptofuzz-bearssl: Use-of-uninitialized-value in Botan::IntMod<Botan::PCurve::sm2p256v1::Sm2p256v1Rep<Botan::EllipticCurve<Botan:

Detailed Report: https://oss-fuzz.com/testcase?key=4620071754858496 Project: bearssl Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-bearssl Job Type: libfuzzermsanbearssl Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

Couchbase Server security vulnerabilities

Couchbase Server is a distributed open source NoSQL non-relational database from Couchbase, Inc. in the United States. It supports data query, full-text search and active global replication. A security vulnerability exists in Couchbase Server versions prior to 7.2.5 and versions 7.6.0 through...

imagemagick:encoder_dng_fuzzer: Use-of-uninitialized-value in LibRaw::parse_sinar_ia

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=6585575793033216 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderdngfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Cra...

CVE-2024-38287

The password-reset mechanism in the Forgot Password functionality in R-HUB TurboMeeting through 8.x allows unauthenticated remote attackers to force the application into resetting the administrator's password to a random insecure 8-digit value...

PT-2024-40824 · Flac · Flac

Name of the Vulnerable Software and Affected Versions: FLAC affected versions not specified Description: The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the FLAC replaygain synthesis apply gain function, which is called from the write callback and...

Improper Authorization

Streampark is vulnerable to Improper Authorization. The vulnerability is due to the Backend service returning "Authorization" as the front-end authentication credential upon successful login, allowing users to request other users' information, including the administrator's username, password, and...

mpv:fuzzer_protocol_lavf: Use-of-uninitialized-value in jxl_u64

Project: https://github.com/mpv-player/mpv.git Detailed Report: https://oss-fuzz.com/testcase?key=4792291689037824 Project: mpv Fuzzing Engine: libFuzzer Fuzz Target: fuzzerprotocollavf Job Type: libfuzzermsanmpv Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State...

poppler:pdf_fuzzer: Use-of-uninitialized-value in Splash::clear

Detailed Report: https://oss-fuzz.com/testcase?key=5583095026221056 Project: poppler Fuzzing Engine: libFuzzer Fuzz Target: pdffuzzer Job Type: libfuzzermsanpoppler Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: Splash::clear SplashOutputDev::tilingPatternFi...

qemu-kvm: 'qemu-img info' leads to host file read/write

A flaw was found in the QEMU disk image utility qemu-img 'info' command. A specially crafted image file containing a json: value describing block devices in QMP could cause the qemu-img process on the host to consume large amounts of memory or CPU time, leading to denial of service or read/write ...

CVE-2024-6122

An incorrect permission in the installation directory for the shared NI SystemLink Server KeyValueDatabase service may result in information disclosure via local access. This affects NI SystemLink Server 2024 Q1 and prior versions. It also affects NI FlexLogger 2023 Q2 and prior versions which...

CLSA-2024-1721659158 Fix of 66 CVEs

CVE-url: https://ubuntu.com/security/CVE-2024-26810 - vfio/pci: Lock external INTx masking ops CVE-url: https://ubuntu.com/security/CVE-2024-38587 - speakup: Fix sizeof vs ARRAYSIZE bug CVE-url: https://ubuntu.com/security/CVE-2024-39493 - crypto: qat - Fix ADFDEVRESETSYNC memory leak CVE-url:...

PT-2024-37398 · National Instruments · Ni Flexlogger +1

Name of the Vulnerable Software and Affected Versions: NI SystemLink Server versions prior to 2024 Q1 NI FlexLogger versions prior to 2023 Q2 Description: An issue with incorrect permissions in the installation directory for the shared NI SystemLink Server KeyValueDatabase service may lead to...

cpython3:fuzz_pycompile: Use-of-uninitialized-value in _PyTokenizer_translate_newlines

Project: https://github.com/python/cpython.git Detailed Report: https://oss-fuzz.com/testcase?key=5129746917163008 Project: cpython3 Fuzzing Engine: libFuzzer Fuzz Target: fuzzpycompile Job Type: libfuzzermsancpython3 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

CVE-2024-39962

D-Link DIR-823X AX3000 Dual-Band Gigabit Wireless Router v21D240126 was discovered to contain a remote code execution RCE vulnerability in the ntpzoneval parameter at /goform/setntp. This vulnerability is exploited via a crafted HTTP request...

PT-2024-32751

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved. The issue occurs when a BPF program attached to the file alloc security hook returns a positive number, causing a kernel panic. Thi...