njs:njs_process_script_fuzzer: Segv on unknown address in njs_chb_append0

Project: http://hg.nginx.org/njs Detailed Report: https://oss-fuzz.com/testcase?key=4938686485364736 Project: njs Fuzzing Engine: libFuzzer Fuzz Target: njsprocessscriptfuzzer Job Type: libfuzzermsannjs Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: njschbappen...

HPESBST04539 rev.1 - HPE MSA Controllers, Remote Desync Vulnerability

Potential Security Impact: Remote: Input Validation SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE MSA 2062 Storage - Prior to IN210R004 HPE MSA 2060 Storage - Prior to IN210R004 HPE MSA 1060 Storage - Prior to IN210R004 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- |...

Gas Limit Issues/DoS with Block Gas Limit

Lines of code Vulnerability details Impact Detailed description of the impact of this finding. Iterating through the users array without a limitation might cause the function to consume a lot of gas, especially when the array size is large. It may potentially reach the block gas limit and get...

PT-2023-9767

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to an array-index-out-of-bounds error in the diAlloc function of the jfs component. This error occurs due to the lack of a check against the agno of the iag while...

PT-2024-14755

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to an array-index-out-of-bounds error in the dbFindLeaf function when searching for dmtree t for sufficient free blocks. This error occurs while getting an element i...

Lack of Input Validation

Lines of code Vulnerability details Impact Neither function appears to validate the length of the users array, which opens the door for misuse or unexpected behavior. Proof of Concept A user can pass an empty array or an exceedingly large array to disrupt expected behavior. Tools Used Manual code...

Ubuntu 22.04 LTS : Linux kernel (OEM) vulnerabilities (USN-6415-1)

The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6415-1 advisory. Daniel Trujillo, Johannes Wikner, and Kaveh Razavi discovered that some AMD processors utilising speculative execution and branch prediction may allow...

CVE-2023-24850 Improper Validation of Array Index in HLOS

Memory Corruption in HLOS while importing a cryptographic key into KeyMaster Trusted Application...

CVE-2023-24850: Improper Validation of Array Index

Memory Corruption in HLOS while importing a cryptographic key into KeyMaster Trusted Application...

PT-2024-14759

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the lack of validity checks for db maxag and db agpref, which are used as indexes for the db agfree array. This can lead to errors, as reported by Syzbot with an...

CVE-2023-28373: Undefined Security Weakness

A flaw exists in FlashArray Purity whereby an array administrator by configuring an external key manager can affect the availability of data on the system including snapshots protected by SafeMode...

CVE-2023-32572: Improper Access Control

A flaw exists in FlashArray Purity wherein under limited circumstances, an array administrator can alter the retention lock of a pgroup and disable pgroup SafeMode protection...

Updated java packages fix security vulnerabilities

The updated packages fix security vulnerabilities and a file conflict : Improper connection handling during TLS handshake. CVE-2023-21930 Incorrect enqueue of references in garbage collector. CVE-2023-21954 Certificate validation issue in TLS session negotiation. CVE-2023-21967 Swing HTML parsing...

PT-2023-22800 · Nodebb · Nodebb

Name of the Vulnerable Software and Affected Versions: NodeBB versions = 2.8.10 Description: The issue allows unauthenticated attackers to trigger a crash in NodeBB when invoking eventName.startsWith or eventName.toString, while processing Socket.IO messages via crafted Socket.IO messages...

CVE-2023-42753

An array indexing vulnerability was found in the netfilter subsystem of the Linux kernel. A missing macro could lead to a miscalculation of the h-nets array offset, providing attackers with the primitive to arbitrarily increment/decrement a memory buffer out-of-bound. This issue may allow a local...

DEBIAN-CVE-2023-42753

An array indexing vulnerability was found in the netfilter subsystem of the Linux kernel. A missing macro could lead to a miscalculation of the h-nets array offset, providing attackers with the primitive to arbitrarily increment/decrement a memory buffer out-of-bound. This issue may allow a local...

AZL-30050 CVE-2023-42753 affecting package kernel for versions less than 5.15.135.1-2

An array indexing vulnerability was found in the netfilter subsystem of the Linux kernel. A missing macro could lead to a miscalculation of the h-nets array offset, providing attackers with the primitive to arbitrarily increment/decrement a memory buffer out-of-bound. This issue may allow a local...

Buffer overflow

An array indexing vulnerability was found in the netfilter subsystem of the Linux kernel. A missing macro could lead to a miscalculation of the h-nets array offset, providing attackers with the primitive to arbitrarily increment/decrement a memory buffer out-of-bound. This issue may allow a local...

CVE-2023-42753

An array indexing vulnerability was found in the netfilter subsystem of the Linux kernel. A missing macro could lead to a miscalculation of the h-nets array offset, providing attackers with the primitive to arbitrarily increment/decrement a memory buffer out-of-bound. This issue may allow a local...

CVE-2023-42753

An array indexing vulnerability was found in the netfilter subsystem of the Linux kernel. A missing macro could lead to a miscalculation of the "h-nets" array offset, providing attackers with the primitive to arbitrarily increment/decrement a memory buffer out-of-bound. This issue may allow a loc...