cras:cras_hfp_slc: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5351102929240064 Project: cras Fuzzing Engine: libFuzzer Fuzz Target: crashfpslc Job Type: libfuzzermsancras Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: memory MSAN Crash Revision:...

http-pattern-matcher:http_template_fuzz_test: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6624741750276096 Project: http-pattern-matcher Fuzzing Engine: libFuzzer Fuzz Target: httptemplatefuzztest Job Type: libfuzzerasanhttp-pattern-matcher Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x588ff322bd85 Crash State: NULL...

CVE-2023-43016

IBM Security Access Manager Container IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.0.0 through 10.0.6.1 could allow a remote user to log into the server due to a user account with an empty password. IBM X-Force ID: 266154...

CVE-2023-43016

IBM Security Access Manager Container IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.0.0 through 10.0.6.1 could allow a remote user to log into the server due to a user account with an empty password. IBM X-Force ID: 266154...

Code injection

IBM Security Access Manager Container IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.0.0 through 10.0.6.1 could allow a remote user to log into the server due to a user account with an empty password. IBM X-Force ID: 266154...

CVE-2023-43016 IBM Security Access Manager Container unauthorized access

IBM Security Access Manager Container IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.0.0 through 10.0.6.1 could allow a remote user to log into the server due to a user account with an empty password. IBM X-Force ID: 266154...

CVE-2023-43016

CVE-2023-43016 affects IBM Security Verify Access: IBM Security Verify Access Appliance and IBM Security Verify Access Docker images version 10.0.0.0 through 10.0.6.1. The issue allows a remote user to log into the server due to a user account configured with an empty password. The NVD/IBM adviso...

CVE-2023-43016 IBM Security Access Manager Container unauthorized access

IBM Security Access Manager Container IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.0.0 through 10.0.6.1 could allow a remote user to log into the server due to a user account with an empty password. IBM X-Force ID: 266154...

IBM Security Access Manager Container security vulnerability

IBM Security Access Manager is a product for information security management applications from International Business Machines IBM. The product enables access management control through integrated appliances for web, mobile and cloud computing. An unauthorized access vulnerability exists in IBM...

CVE-2023-43016: Empty Password in Configuration File

IBM Security Access Manager Container IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.0.0 through 10.0.6.1 could allow a remote user to log into the server due to a user account with an empty password. IBM X-Force ID: 266154...

PT-2024-13072 · Ibm · Ibm Security Verify Access Appliance +1

Name of the Vulnerable Software and Affected Versions: IBM Security Verify Access Appliance versions 10.0.0.0 through 10.0.6.1 IBM Security Verify Access Docker versions 10.0.0.0 through 10.0.6.1 Description: The issue allows a remote user to log into the server due to a user account with an empt...

http-pattern-matcher:http_template_fuzz_test: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6624741750276096 Project: http-pattern-matcher Fuzzing Engine: libFuzzer Fuzz Target: httptemplatefuzztest Job Type: libfuzzerasanhttp-pattern-matcher Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x588ff322bd85 Crash State: NULL...

http-pattern-matcher:http_template_fuzz_test: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6624741750276096 Project: http-pattern-matcher Fuzzing Engine: libFuzzer Fuzz Target: httptemplatefuzztest Job Type: libfuzzerasanhttp-pattern-matcher Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x588ff322bd85 Crash State: NULL...

http-pattern-matcher:http_template_fuzz_test: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6624741750276096 Project: http-pattern-matcher Fuzzing Engine: libFuzzer Fuzz Target: httptemplatefuzztest Job Type: libfuzzerasanhttp-pattern-matcher Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x588ff322bd85 Crash State: NULL...

jq:jq_fuzz_fixed: Crash with empty stacktrace

Project: https://github.com/jqlang/jq.git Detailed Report: https://oss-fuzz.com/testcase?key=5316154545471488 Project: jq Fuzzing Engine: libFuzzer Fuzz Target: jqfuzzfixed Job Type: libfuzzerubsanjq Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00002647e200 Crash State: NULL...

libhevc:hevc_dec_fuzzer: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6689348804214784 Project: libhevc Fuzzing Engine: libFuzzer Fuzz Target: hevcdecfuzzer Job Type: libfuzzerasani386libhevc Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN Crash...

libxml2: Hashing of empty dict strings isn't deterministic

A flaw was found in libxml2. This issue occurs when hashing empty strings which aren't null-terminated, xmlDictComputeFastKey could produce inconsistent results, which may lead to various logic or memory errors, including double free errors...

haproxy: Proxy forwards malformed empty Content-Length headers

A flaw was found in HAProxy. Empty Content-Length headers are forwarded, which could cause an HTTP/1 server behind it to interpret the payload as an extra request. This may render the HTTP/1 server vulnerable to attacks in some uncommon cases...

Denial Of Service

librttopo.so is vulnerable to Denial Of Service. The vulnerability is due to mishandling of empty geometries. The remote attackers can perform a DoS via a crafted STAsX3D input which leads to server termination...

HNAP1 Interface D-Link DIR-822 Router Access

The vulnerability of the HNAP1 interface of D-Link DIR-822 microprogrammed router software is related to the absence of authentication for the critical function. Exploiting this vulnerability allows a malicious actor to access administrator accounts with empty passwords...