224 matches found
CVE-2023-31135 Dgraph Audit Log Encryption nonce reuse
Dgraph is an open source distributed GraphQL database. Existing Dgraph audit logs are vulnerable to brute force attacks due to nonce collisions. The first 12 bytes come from a baseIv which is initialized when an audit log is created. The last 4 bytes come from the length of the log line being...
CVE-2023-31135 Dgraph Audit Log Encryption nonce reuse
Dgraph is an open source distributed GraphQL database. Existing Dgraph audit logs are vulnerable to brute force attacks due to nonce collisions. The first 12 bytes come from a baseIv which is initialized when an audit log is created. The last 4 bytes come from the length of the log line being...
Dgraph encryption issues and vulnerabilities
Dgraph is Dgraph open source a horizontally scalable distributed GraphQL database with a graph backend. Dgraph version before 23.0.0 has a cryptographic problem vulnerability , the vulnerability stems from a nounce conflict , an attacker can use the vulnerability to brute-force attack on the log...
PT-2023-23169 · Dgraph · Dgraph
Name of the Vulnerable Software and Affected Versions: Dgraph versions prior to v23.0.0 Description: Dgraph is an open source distributed GraphQL database. Existing Dgraph audit logs are vulnerable to brute force attacks due to nonce collisions. The first 12 bytes come from a baseIv which is...
CVE-2023-31135: Inadequate Encryption Strength
Dgraph is an open source distributed GraphQL database. Existing Dgraph audit logs are vulnerable to brute force attacks due to nonce collisions. The first 12 bytes come from a baseIv which is initialized when an audit log is created. The last 4 bytes come from the length of the log line being...
dgraph:parser_fuzzer: Crash in pthread_create
Detailed Report: https://oss-fuzz.com/testcase?key=6015314898059264 Project: dgraph Fuzzing Engine: libFuzzer Fuzz Target: parserfuzzer Job Type: libfuzzerasandgraph Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xfffffffffffffff8 Crash State: pthreadcreate cgotrypthreadcreate...
GHSA-P4G4-WGRH-QRG2 vulnerabilities
Vulnerabilities for packages: dgraph...
dgraph:parser_fuzzer: Segv on unknown address with empty stacktrace
Detailed Report: https://oss-fuzz.com/testcase?key=6056669865443328 Project: dgraph Fuzzing Engine: libFuzzer Fuzz Target: parserfuzzer Job Type: libfuzzerasandgraph Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN Crash Revision:...
GHSA-WF43-55JJ-VWQ8 vulnerabilities
Vulnerabilities for packages: etcd, dgraph, etcd-fips...
dgraph:parser_fuzzer: Crash with empty stacktrace
Detailed Report: https://oss-fuzz.com/testcase?key=5618729564635136 Project: dgraph Fuzzing Engine: libFuzzer Fuzz Target: parserfuzzer Job Type: libfuzzerasandgraph Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000000205ce8 Crash State: NULL Sanitizer: address ASAN Recommended...
dgraph:parser_fuzzer: Crash with empty stacktrace
Detailed Report: https://oss-fuzz.com/testcase?key=6246929084841984 Project: dgraph Fuzzing Engine: libFuzzer Fuzz Target: parserfuzzer Job Type: libfuzzerasandgraph Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000031cd5723 Crash State: NULL Sanitizer: address ASAN Recommended...
dgraph:parser_fuzzer: Crash with empty stacktrace
Detailed Report: https://oss-fuzz.com/testcase?key=5889746617368576 Project: dgraph Fuzzing Engine: libFuzzer Fuzz Target: parserfuzzer Job Type: libfuzzerasandgraph Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x10bfffffffef Crash State: NULL Sanitizer: address ASAN Recommended...
dgraph:parser_fuzzer: Crash with empty stacktrace
Detailed Report: https://oss-fuzz.com/testcase?key=5769126017630208 Project: dgraph Fuzzing Engine: libFuzzer Fuzz Target: parserfuzzer Job Type: libfuzzerasandgraph Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x10bfffffffe0 Crash State: NULL Sanitizer: address ASAN Recommended...
dgraph:parser_fuzzer: Null-dereference READ in pthread_create
Detailed Report: https://oss-fuzz.com/testcase?key=6426145611448320 Project: dgraph Fuzzing Engine: libFuzzer Fuzz Target: parserfuzzer Job Type: libfuzzerasandgraph Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: pthreadcreate cgotrypthreadcreate...
dgraph:parser_fuzzer: Crash with empty stacktrace
Detailed Report: https://oss-fuzz.com/testcase?key=5957316187914240 Project: dgraph Fuzzing Engine: libFuzzer Fuzz Target: parserfuzzer Job Type: libfuzzerasandgraph Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x10bfffffffef Crash State: NULL Sanitizer: address ASAN Recommended...
dgraph:parser_fuzzer: Crash with empty stacktrace
Detailed Report: https://oss-fuzz.com/testcase?key=5520656946036736 Project: dgraph Fuzzing Engine: libFuzzer Fuzz Target: parserfuzzer Job Type: libfuzzerasandgraph Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x10bfffffffe0 Crash State: NULL Sanitizer: address ASAN Recommended...
CVE-2020-15114 vulnerabilities
Vulnerabilities for packages: etcd, dgraph, etcd-fips...
CVE-2020-15136 vulnerabilities
Vulnerabilities for packages: etcd, dgraph, etcd-fips...