cn.hutool:hutool-dfa (4.5.14), cn.hutool:hutool-http (4.5.14) potentially affected by CVE-2022-45689 via cn.hutool:hutool-json (4.5.14)

cn.hutool:hutool-json MAVEN version 4.5.14 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-json and may be impacted: - cn.hutool:hutool-dfa 4.5.14 - cn.hutool:hutool-http 4.5.14 Source cves: CVE-2022-45689 Source advisory:...

cn.hutool:hutool-bom (4.6.6), cn.hutool:hutool-dfa (4.6.6) +8 more potentially affected by CVE-2022-45689 via cn.hutool:hutool-json (4.6.6)

cn.hutool:hutool-json MAVEN version 4.6.6 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-json and may be impacted: - cn.hutool:hutool-bom 4.6.6 - cn.hutool:hutool-dfa 4.6.6 - cn.hutool:hutool-http 4.6.6 - com.github.javen205:ijpay 2.2...

cn.hutool:hutool-dfa (4.4.3), cn.hutool:hutool-http (4.4.3) potentially affected by CVE-2022-45688 via cn.hutool:hutool-json (4.4.3)

cn.hutool:hutool-json MAVEN version 4.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-json and may be impacted: - cn.hutool:hutool-dfa 4.4.3 - cn.hutool:hutool-http 4.4.3 Source cves: CVE-2022-45688 Source advisory:...

cn.hutool:hutool-dfa (4.1.8), cn.hutool:hutool-http (4.1.8) +5 more potentially affected by CVE-2022-45690 via cn.hutool:hutool-json (4.1.8)

cn.hutool:hutool-json MAVEN version 4.1.8 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-json and may be impacted: - cn.hutool:hutool-dfa 4.1.8 - cn.hutool:hutool-http 4.1.8 - cn.virens:virens-util 1.2.3 - com.zyplayer:swagger-mg-ui...

cn.hutool:hutool-bom (4.6.12), cn.hutool:hutool-dfa (4.6.12) +1 more potentially affected by CVE-2022-45689 via cn.hutool:hutool-json (4.6.12)

cn.hutool:hutool-json MAVEN version 4.6.12 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-json and may be impacted: - cn.hutool:hutool-bom 4.6.12 - cn.hutool:hutool-dfa 4.6.12 - cn.hutool:hutool-http 4.6.12 Source cves: CVE-2022-45689...

CVE-2022-23901

A stack overflow re2c 2.2 exists due to infinite recursion issues in src/dfa/deadrules.cc...

CVE-2022-23901

A stack overflow re2c 2.2 exists due to infinite recursion issues in src/dfa/deadrules.cc...

CVE-2022-23901

A stack overflow re2c 2.2 exists due to infinite recursion issues in src/dfa/deadrules.cc...

CVE-2022-23901

CVE-2022-23901 describes a stack overflow in re2c 2.2 due to infinite recursion in src/dfa/dead_rules.cc. Connected advisories show affected environments (e.g., Amazon Linux 2/ALAS2023-2344 and ALAS2023-438; Azure Linux security update) and fixes upgrading to re2c 3.1.x (e.g., 3.1-2) or later. Th...

CVE-2022-23901: Out-of-bounds Write

A stack overflow re2c 2.2 exists due to infinite recursion issues in src/dfa/deadrules.cc...

php:php-fuzz-function-jit: Crash in zend_ssa_remove_nops

Detailed Report: https://oss-fuzz.com/testcase?key=4919685179637760 Project: php Fuzzing Engine: honggfuzz Fuzz Target: php-fuzz-function-jit Job Type: honggfuzzasanphp Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x1000df08700f Crash State: zendssaremovenops zenddfaoptimizeoparray...

javaparser:parseFuzzer: Uncaught exception in com.github.javaparser.GeneratedJavaParser.Expression

Project: https://github.com/javaparser/javaparser.git Detailed Report: https://oss-fuzz.com/testcase?key=5334862729969664 Project: javaparser Fuzzing Engine: libFuzzer Fuzz Target: parseFuzzer Job Type: libfuzzerasanjavaparser Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash...

OSV-2021-921 Stack-buffer-overflow in bool re2::DFA::InlinedSearchLoop<true, true, true>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35821 Crash type: Stack-buffer-overflow READ 1 Crash state: bool re2::DFA::InlinedSearchLoop re2::DFA::Search re2::Prog::SearchDFA...

PT-2021-28332

Name of the Vulnerable Software and Affected Versions: re2 affected versions not specified Description: The issue is related to a stack-buffer-overflow read, which occurs in the re2::DFA::InlinedSearchLoop function. This function is part of the re2::DFA::Search and re2::Prog::SearchDFA calls...

re2:re2_fuzzer: Stack-buffer-overflow in bool re2::DFA::InlinedSearchLoop<true, true, true>

Project: https://code.googlesource.com/re2 Detailed Report: https://oss-fuzz.com/testcase?key=5733284528128000 Project: re2 Fuzzing Engine: libFuzzer Fuzz Target: re2fuzzer Job Type: libfuzzerasani386re2 Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address: 0xfff929ef Crash...

Enable RSA SecurID Authentication for DFA in Storefront

How to Enable RSA SecurID Authentication for DFA in storefront server...

Raptor WAF v0.6 - Web Application Firewall using DFA

Raptor is a Web application firewall made in C, uses DFA to block SQL injection, Cross site scripting and path traversal. http://funguscodes.blogspot.com.br/ to run: $ git clone https://github.com/CoolerVoid/raptorwaf $ cd raptorwaf; make; bin/raptor Note: Don't execute with "cd bin; ./raptor" us...

Raptor WAF v0.5 - Web Application Firewall using DFA

Raptor is a Web application firewall made in C, uses DFA to block SQL injection, Cross site scripting and path traversal. to run: $ git clone https://github.com/CoolerVoid/raptorwaf $ cd raptorwaf; make; bin/raptor Note: Don't execute with "cd bin; ./raptor" use full path "bin/raptor" look detail...

DEBIAN-CVE-2017-9992

Heap-based buffer overflow in the decodedds1 function in libavcodec/dfa.c in FFmpeg before 2.8.12, 3.0.x before 3.0.8, 3.1.x before 3.1.8, 3.2.x before 3.2.5, and 3.3.x before 3.3.1 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact vi...

UBUNTU-CVE-2017-9992

Heap-based buffer overflow in the decodedds1 function in libavcodec/dfa.c in FFmpeg before 2.8.12, 3.0.x before 3.0.8, 3.1.x before 3.1.8, 3.2.x before 3.2.5, and 3.3.x before 3.3.1 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact vi...