Design/Logic Flaw

A flaw was found in the decompression function of registry-support. This issue can be triggered if an unauthenticated remote attacker tricks a user into parsing a devfile which uses the parent or plugin keywords. This could download a malicious archive and cause the cleanup process to overwrite o...

CVE-2024-1485 Registry-support: decompress can delete files outside scope via relative paths

A flaw was found in the decompression function of registry-support. This issue can be triggered if an unauthenticated remote attacker tricks a user into parsing a devfile which uses the parent or plugin keywords. This could download a malicious archive and cause the cleanup process to overwrite o...

CVE-2024-1485

A flaw was found in the decompression function of registry-support. This issue can be triggered if an unauthenticated remote attacker tricks a user into parsing a devfile which uses the "parent" or "plugin" keywords. This could download a malicious archive and cause the cleanup process to overwri...

CVE-2024-1485

CVE-2024-1485 affects the registry-support library’s decompression logic. An unauthenticated attacker can trick a user into parsing a devfile that uses the parent or plugin keywords, causing the decompressor to extract archives with relative paths that write outside the intended scope. This can l...

CVE-2024-1485 Registry-support: decompress can delete files outside scope via relative paths

A flaw was found in the decompression function of registry-support. This issue can be triggered if an unauthenticated remote attacker tricks a user into parsing a devfile which uses the parent or plugin keywords. This could download a malicious archive and cause the cleanup process to overwrite o...

CVE-2024-1485 Registry-support: decompress can delete files outside scope via relative paths

A flaw was found in the decompression function of registry-support. This issue can be triggered if an unauthenticated remote attacker tricks a user into parsing a devfile which uses the parent or plugin keywords. This could download a malicious archive and cause the cleanup process to overwrite o...

PT-2024-18086

Name of the Vulnerable Software and Affected Versions registry-support versions prior to v0.0.0-20240206 Description A flaw was found in the decompression function of registry-support. This issue can be triggered if an unauthenticated remote attacker tricks a user into parsing a devfile which use...

CVE-2024-1485: Improper Limitation of a Pathname to a Restricted Directory

A flaw was found in the decompression function of registry-support. This issue can be triggered if an unauthenticated remote attacker tricks a user into parsing a devfile which uses the parent or plugin keywords. This could download a malicious archive and cause the cleanup process to overwrite o...

Denial Of Service (DoS)

github.com/tendermint/tendermint is vulnerable to Denial Of Service DoS. The vulnerability is due to the makeHTTPClient function within httpclient.go automatically decompressing Gzip-compressed responses, without limitations on the size or content of the response body. This allows an attacker to...

GHSA-3GJH-29FV-8HR6 Nervos CKB Snappy decompress length can be very large and causes out of memory error

Impact Adversary can create message which compressed size is less than the package limit but the decompressed length is very large such as 1G. It will cost the node many memories to process the network messages, and on the system with less than 1G memory, the process is killed directly because of...

upx:test_packed_file_fuzzer: Heap-buffer-overflow in ucl_nrv2e_decompress_safe_le16

Project: https://github.com/upx/upx.git Detailed Report: https://oss-fuzz.com/testcase?key=5089751338123264 Project: upx Fuzzing Engine: afl Fuzz Target: testpackedfilefuzzer Job Type: aflasanupx Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x7e06e86f79b8 Crash State:...

Post-quantum Cryptography for the Go Ecosystem

filippo.io/mlkem768 is a pure-Go implementation of ML-KEM-768 optimized for correctness and readability. ML-KEM formerly known as Kyber, renamed because we can't have nice things is a post-quantum key exchange mechanism in the process of being standardized by NIST and adopted by most of the...

upx:decompress_packed_file_fuzzer: Stack-buffer-overflow in PackLinuxElf32::unpack

Project: https://github.com/upx/upx.git Detailed Report: https://oss-fuzz.com/testcase?key=6229815489265664 Project: upx Fuzzing Engine: libFuzzer Fuzz Target: decompresspackedfilefuzzer Job Type: libfuzzerasanupx Platform Id: linux Crash Type: Stack-buffer-overflow READ 4 Crash Address:...

upx:decompress_packed_file_fuzzer: Crash in N_BELE_RTP::LEPolicy::get32

Project: https://github.com/upx/upx.git Detailed Report: https://oss-fuzz.com/testcase?key=6063044497047552 Project: upx Fuzzing Engine: libFuzzer Fuzz Target: decompresspackedfilefuzzer Job Type: libfuzzerubsanupx Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000003408000 Crash...

Exploit for Argument Injection in Linuxmint Xreader

CVE-2023-44452, CVE-2023-51698: Linux Mint Xreader/MATE Atril...

GTKWave out-of-bounds write vulnerability (CNVD-2024-39639)

GTKWave is a full-featured, GTK+-based waveform viewer from GTKWave. An out-of-bounds write vulnerability exists in GTKWave version 3.3.115. The vulnerability stems from an out-of-bounds write to the VZT vztrdgetfacname decompression function, which can be exploited by an attacker to cause...

SUSE CVE-2023-35955

Multiple heap-based buffer overflow vulnerabilities exist in the fstReaderIterBlocks2 VCDATA parsing functionality of GTKWave 3.3.115. A specially-crafted .fst file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerabili...

SUSE CVE-2023-35963

Multiple OS command injection vulnerabilities exist in the decompression functionality of GTKWave 3.3.115. A specially crafted wave file can lead to arbitrary command execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns decompression...

SUSE CVE-2023-35961

Multiple OS command injection vulnerabilities exist in the decompression functionality of GTKWave 3.3.115. A specially crafted wave file can lead to arbitrary command execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns decompression...

SUSE CVE-2023-35960

Multiple OS command injection vulnerabilities exist in the decompression functionality of GTKWave 3.3.115. A specially crafted wave file can lead to arbitrary command execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns legacy...