spring-data-mongodb:ParameterBindingJsonReaderFuzzer: Security exception in org.springframework.expression.spel.ast.OpPlus.getValueInternal

Project: https://github.com/spring-projects/spring-data-mongodb.git Detailed Report: https://oss-fuzz.com/testcase?key=5521154232418304 Project: spring-data-mongodb Fuzzing Engine: libFuzzer Fuzz Target: ParameterBindingJsonReaderFuzzer Job Type: libfuzzerasanspring-data-mongodb Platform Id: linu...

Design/Logic Flaw

Uncaught exception in the firmware for some IntelR Server Board M50CYP Family before version R01.01.0005 may allow a privileged user to potentially enable a denial of service via local access...

CVE-2022-25917

The CVE-2022-25917 issue affects Intel Server Board M50CYP Family firmware prior to R01.01.0005. The root cause is an uncaught exception in the device firmware that may allow a privileged local user to cause a denial of service, impacting availability. Public documents cite this vulnerability in ...

hsqldb:SqlStatementFuzzer: Security exception in java.base/java.lang.StringCoding.encode

Detailed Report: https://oss-fuzz.com/testcase?key=4547077124521984 Project: hsqldb Fuzzing Engine: libFuzzer Fuzz Target: SqlStatementFuzzer Job Type: libfuzzerasanhsqldb Platform Id: linux Crash Type: Security exception Crash Address: Crash State: java.base/java.lang.StringCoding.encode...

CVE-2022-44793

A flaw was found in Net-SNMP. This issue occurs because the handleipv6IpForwarding in agent/mibgroup/ip-mib/ipscalars.c in Net-SNMP has a NULL Pointer Exception that could allow a remote attacker to cause the instance to crash via a crafted UDP packet, resulting in a denial of service...

PT-2022-17603 · Intel · Intel Server Board M50Cyp Family

Name of the Vulnerable Software and Affected Versions: IntelR Server Board M50CYP Family versions prior to R01.01.0005 Description: The issue is related to an uncaught exception in the firmware, which may allow a privileged user to potentially enable a denial of service via local access...

CVE-2022-40225

A vulnerability has been identified in SIPLUS TIM 1531 IRC 6AG1543-1MX00-7XE0 All versions V2.4.8, TIM 1531 IRC 6GK7543-1MX00-0XE0 All versions V2.4.8. Casting an internal value could lead to floating point exception under certain circumstances. This could allow an attacker to cause a denial of...

snakeyaml:DefaultYamlFuzzer: Security exception in java.base/java.util.AbstractMap.hashCode

Detailed Report: https://oss-fuzz.com/testcase?key=4784049394941952 Project: snakeyaml Fuzzing Engine: libFuzzer Fuzz Target: DefaultYamlFuzzer Job Type: libfuzzerasansnakeyaml Platform Id: linux Crash Type: Security exception Crash Address: Crash State: java.base/java.util.AbstractMap.hashCode...

PT-2022-25293

Name of the Vulnerable Software and Affected Versions SIPLUS TIM 1531 IRC 6AG1543-1MX00-7XE0 versions prior to V2.4.8 TIM 1531 IRC 6GK7543-1MX00-0XE0 versions prior to V2.4.8 Description A vulnerability has been identified that could lead to a floating point exception under certain circumstances...

spring-data-keyvalue:KeyValueTemplateFuzzer: Security exception in java.base/java.util.regex.Pattern$Ques.match

Project: https://github.com/spring-projects/spring-data-keyvalue.git Detailed Report: https://oss-fuzz.com/testcase?key=5460015372959744 Project: spring-data-keyvalue Fuzzing Engine: libFuzzer Fuzz Target: KeyValueTemplateFuzzer Job Type: libfuzzerasanspring-data-keyvalue Platform Id: linux Crash...

spring-data-keyvalue:KeyValueTemplateFuzzer: Security exception in java.base/java.util.regex.Pattern$Ques.match

Detailed Report: https://oss-fuzz.com/testcase?key=4860083301646336 Project: spring-data-keyvalue Fuzzing Engine: libFuzzer Fuzz Target: KeyValueTemplateFuzzer Job Type: libfuzzerasanspring-data-keyvalue Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

handle_ipv6IpForwarding in agent/mibgroup/ip-mib/ip_scalars.c in Net-SNMP 5.4.3 through 5.9.3 has a NULL Pointer Exception bug that can be used by a remote attacker to cause the instance to crash via a crafted UDP packet resulting in Denial of Service.

...

tomcat:ELEvaluationFuzzer: Security exception in org.apache.el.parser.AstGreaterThan.getValue

Detailed Report: https://oss-fuzz.com/testcase?key=5080868679188480 Project: tomcat Fuzzing Engine: libFuzzer Fuzz Target: ELEvaluationFuzzer Job Type: libfuzzerasantomcat Platform Id: linux Crash Type: Security exception Crash Address: Crash State: org.apache.el.parser.AstGreaterThan.getValue...

CVE-2022-20414

In setImpl of AlarmManagerService.java, there is a possible way to put a device into a boot loop due to an uncaught exception. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

archaius-core:DynamicPropertyFuzzer: Security exception in java.base/sun.nio.cs.CESU_8.newEncoder

Detailed Report: https://oss-fuzz.com/testcase?key=6180952485527552 Project: archaius-core Fuzzing Engine: libFuzzer Fuzz Target: DynamicPropertyFuzzer Job Type: libfuzzerasanarchaius-core Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

spring-data-keyvalue:KeyValueTemplateFuzzer: Security exception in com.code_intelligence.jazzer.sanitizers.RegexInjection.hookInternal

Project: https://github.com/spring-projects/spring-data-keyvalue.git Detailed Report: https://oss-fuzz.com/testcase?key=5685393655988224 Project: spring-data-keyvalue Fuzzing Engine: libFuzzer Fuzz Target: KeyValueTemplateFuzzer Job Type: libfuzzerasanspring-data-keyvalue Platform Id: linux Crash...

spring-data-keyvalue:KeyValueTemplateFuzzer: Security exception in java.base/jdk.internal.misc.Unsafe.allocateUninitializedArray0

Project: https://github.com/spring-projects/spring-data-keyvalue.git Detailed Report: https://oss-fuzz.com/testcase?key=5153566394548224 Project: spring-data-keyvalue Fuzzing Engine: libFuzzer Fuzz Target: KeyValueTemplateFuzzer Job Type: libfuzzerasanspring-data-keyvalue Platform Id: linux Crash...

spring-data-keyvalue:KeyValueTemplateFuzzer: Security exception in java.base/java.lang.String.repeat

Project: https://github.com/spring-projects/spring-data-keyvalue.git Detailed Report: https://oss-fuzz.com/testcase?key=4959233536032768 Project: spring-data-keyvalue Fuzzing Engine: libFuzzer Fuzz Target: KeyValueTemplateFuzzer Job Type: libfuzzerasanspring-data-keyvalue Platform Id: linux Crash...

Denial Of Service (DoS)

keylime is vulnerable to denial of service. The vulnerability is due to a lack of proper exception handling in the request function of tornadorequests.py which allows an attacker to crash the application via malicious input...

CVE-2022-20414: Improper Handling of Exceptional Conditions

In setImpl of AlarmManagerService.java, there is a possible way to put a device into a boot loop due to an uncaught exception. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...