DEBIAN-CVE-2023-40548

A buffer overflow was found in Shim in the 32-bit system. The overflow happens due to an addition operation involving a user-controlled value parsed from the PE binary being used by Shim. This value is further used for memory allocation operations, leading to a heap-based buffer overflow. This fl...

Heap overflow

A buffer overflow was found in Shim in the 32-bit system. The overflow happens due to an addition operation involving a user-controlled value parsed from the PE binary being used by Shim. This value is further used for memory allocation operations, leading to a heap-based buffer overflow. This fl...

freeradius:fuzzer_radius: Heap-buffer-overflow in _fr_dbuff_out_memcpy

Detailed Report: https://oss-fuzz.com/testcase?key=4726406781140992 Project: freeradius Fuzzing Engine: libFuzzer Fuzz Target: fuzzerradius Job Type: libfuzzerasanfreeradius Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x611000001680 Crash State: frdbuffoutmemcpy...

CVE-2023-40548

A buffer overflow was found in Shim in the 32-bit system. The overflow happens due to an addition operation involving a user-controlled value parsed from the PE binary being used by Shim. This value is further used for memory allocation operations, leading to a heap-based buffer overflow. This fl...

sqlite3:ossfuzz: Use-of-uninitialized-value in jsonTranslateBlobToText

Detailed Report: https://oss-fuzz.com/testcase?key=5692622052065280 Project: sqlite3 Fuzzing Engine: libFuzzer Fuzz Target: ossfuzz Job Type: libfuzzermsansqlite3 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: jsonTranslateBlobToText jsonExtractFunc...

Palantir Foundry Security Breach

Palantir Foundry is a business process management platform from US-based Palantir. A security vulnerability exists in Palantir Foundry Guardian versions prior to 2.278.0. An attacker who exploited the vulnerability to change the group name of a default value, the renamed value could be visible to...

imagemagick:encoder_heic_fuzzer: Use-of-uninitialized-value in fillIntraPredModeCandidates

Detailed Report: https://oss-fuzz.com/testcase?key=5420165030281216 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: fillIntraPredModeCandidates...

njs:njs_process_script_fuzzer: Use-of-uninitialized-value in njs_utf8_decode

Project: http://hg.nginx.org/njs Detailed Report: https://oss-fuzz.com/testcase?key=4844091804286976 Project: njs Fuzzing Engine: libFuzzer Fuzz Target: njsprocessscriptfuzzer Job Type: libfuzzermsannjs Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

imagemagick:encoder_psd_fuzzer: Use-of-uninitialized-value in CompositeOverImage

Detailed Report: https://oss-fuzz.com/testcase?key=6012197348114432 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderpsdfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: CompositeOverImage CompositeIma...

imagemagick:encoder_viff_fuzzer: Use-of-uninitialized-value in IdentifyImageGray

Detailed Report: https://oss-fuzz.com/testcase?key=6264545198800896 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encodervifffuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: IdentifyImageGray WriteVIFFIma...

samba: type confusion in mdssvc RPC service for spotlight

A Type Confusion vulnerability was found in Samba's mdssvc RPC service for Spotlight. When parsing Spotlight mdssvc RPC packets, one encoded data structure is a key-value style dictionary where the keys are character strings, and the values can be any of the supported types in the mdssvc protocol...

samba: GnuTLS gnutls_rnd() can fail and give predictable random values

A flaw was found in Samba. When the gnutlsrnd function is called, its return value is not verified, allowing it to give predictable random values when the call to the gnutlsrnd function fails...

kernel: out-of-bounds write in qfq_change_class function

An out-of-bounds memory access flaw was found in the Linux kernel’s traffic control QoS subsystem in how a user triggers the qfqchangeclass function with an incorrect MTU value of the network device used as lmax. This flaw allows a local user to crash or potentially escalate their privileges on t...

edk2: Function GetEfiGlobalVariable2() return value not checked in DxeImageVerificationHandler()

REJECTED CVE A secure boot bypass vulnerability was found in EDK2 due to the lack of proper return value checks in the GetEfiGlobalVariable2 function. The API may fail if functions like AllocatePool or gRT-GetVariable fail. Without verifying the return value, an attacker could cause the API to...

libpcap:fuzz_both: Use-of-uninitialized-value in pcapint_filter_with_aux_data

Project: https://github.com/the-tcpdump-group/libpcap.git Detailed Report: https://oss-fuzz.com/testcase?key=5185152170917888 Project: libpcap Fuzzing Engine: libFuzzer Fuzz Target: fuzzboth Job Type: libfuzzermsanlibpcap Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

squid: Incorrect Check of Function Return Value In Helper Process management

A flaw was found in Squid due to an incorrect check of the return value in the helper process management. This issue may allow attackers to perform remote denial of service...

imagemagick:encoder_heic_fuzzer: Use-of-uninitialized-value in void intra_prediction_angular<unsigned short>

Detailed Report: https://oss-fuzz.com/testcase?key=6372919387160576 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: void intrapredictionangular vo...

Linux nft_byteorder_eval Heap Buffer Overflow DoS

The vulnerability of the nftbyteordereval function in the net/netfilter/nftbyteorder.c module of the Linux operating system’s kernel is related to incorrect handling of values. Exploiting this vulnerability could allow an attacker to cause service failures or have other adverse effects...

Mozilla Firefox security vulnerabilities

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. Mozilla Firefox suffers from a denial of service vulnerability caused by an unchecked return value in the TLS handshake code. An attacker can exploit the vulnerability to cause the NSS TLS method to...

CVE-2024-0743: Unchecked Return Value

An unchecked return value in TLS handshake code could have caused a potentially exploitable crash. This vulnerability affects Firefox 122, Firefox ESR 115.9, and Thunderbird 115.9...