Apache Tomcat - Authentication Bypass

Unchecked Error Condition vulnerability in Apache Tomcat. If Tomcat is configured to use a custom Jakarta Authentication formerly JASPIC ServerAuthContext component which may throw an exception during the authentication process without explicitly setting an HTTP status to indicate failure, the...

apache-poi:POIHSLFFuzzer: Security exception in org.apache.poi.util.IOUtils.safelyAllocate

Detailed Report: https://oss-fuzz.com/testcase?key=6666324122599424 Project: apache-poi Fuzzing Engine: libFuzzer Fuzz Target: POIHSLFFuzzer Job Type: libfuzzerasanapache-poi Platform Id: linux Crash Type: Security exception Crash Address: Crash State: org.apache.poi.util.IOUtils.safelyAllocate...

Linux kernel dm snapshot DoS

The vulnerability of the dm snapshot component in the Linux operating system’s kernel is related to improper locking of resources in the dmexceptiontableexit function. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2024-40632

Name of the Vulnerable Software and Affected Versions: fastjson2 affected versions not specified Description: A security exception crash has been reported. The crash involves the com.alibaba.fastjson2.JSONReader.readObject function, along with java.base/java.nio.charset.CharsetEncoder.replaceWith...

jsqlparser:JSqlParserFuzzer: Security exception in net.sf.jsqlparser.parser.CCJSqlParser.BitwiseAndOr

Detailed Report: https://oss-fuzz.com/testcase?key=6503703458152448 Project: jsqlparser Fuzzing Engine: libFuzzer Fuzz Target: JSqlParserFuzzer Job Type: libfuzzerasanjsqlparser Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

fastjson2:JsonFuzzer: Security exception in com.alibaba.fastjson2.JSONReader.readObject

Project: https://github.com/alibaba/fastjson2.git Detailed Report: https://oss-fuzz.com/testcase?key=4527111307591680 Project: fastjson2 Fuzzing Engine: libFuzzer Fuzz Target: JsonFuzzer Job Type: libfuzzerasanfastjson2 Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

checker-framework:UtilCheckerFuzzer: Security exception in java.base/java.util.Arrays.copyOf

Project: https://github.com/typetools/checker-framework.git Detailed Report: https://oss-fuzz.com/testcase?key=4580405811937280 Project: checker-framework Fuzzing Engine: libFuzzer Fuzz Target: UtilCheckerFuzzer Job Type: libfuzzerasanchecker-framework Platform Id: linux Crash Type: Security...

OSV-2024-1313 Security exception in org.apache.commons.codec.language.bm.Rule$Phoneme.<init>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=379008019 Crash type: Security exception Crash state: org.apache.commons.codec.language.bm.Rule$Phoneme. org.apache.commons.codec.language.bm.Rule$Phoneme. org.apache.commons.codec.language.bm.PhoneticEngine$PhonemeBuilder.app...

checker-framework:UtilCheckerFuzzer: Security exception in org.checkerframework.checker.formatter.util.FormatUtil.formatParameterCategories

Project: https://github.com/typetools/checker-framework.git Detailed Report: https://oss-fuzz.com/testcase?key=6590608346513408 Project: checker-framework Fuzzing Engine: libFuzzer Fuzz Target: UtilCheckerFuzzer Job Type: libfuzzerasanchecker-framework Platform Id: linux Crash Type: Security...

presto:SqlParserFuzzer: Security exception in java.base/java.util.HashMap.resize

Detailed Report: https://oss-fuzz.com/testcase?key=6173235923714048 Project: presto Fuzzing Engine: libFuzzer Fuzz Target: SqlParserFuzzer Job Type: libfuzzerasanpresto Platform Id: linux Crash Type: Security exception Crash Address: Crash State: java.base/java.util.HashMap.resize...

javassist:ClassFuzzer: Security exception in javassist.bytecode.AttributeInfo.<init>

Project: https://github.com/jboss-javassist/javassist.git Detailed Report: https://oss-fuzz.com/testcase?key=6749580815302656 Project: javassist Fuzzing Engine: libFuzzer Fuzz Target: ClassFuzzer Job Type: libfuzzerasanjavassist Platform Id: linux Crash Type: Security exception Crash Address: Cra...

OSV-2024-1311 Security exception in java.base/java.util.Arrays.copyOfRange

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=378836879 Crash type: Security exception Crash state: java.base/java.util.Arrays.copyOfRange java.base/java.lang.StringUTF16.newString java.base/java.lang.StringBuilder.toString...

apache-commons-codec:PhoneticEngineFuzzer: Security exception in org.apache.commons.codec.language.bm.Rule$Phoneme.<init>

Detailed Report: https://oss-fuzz.com/testcase?key=4557039046557696 Project: apache-commons-codec Fuzzing Engine: libFuzzer Fuzz Target: PhoneticEngineFuzzer Job Type: libfuzzerasanapache-commons-codec Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

PT-2024-41777

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=378836879 Crash type: Security exception Crash state: java.base/java.util.Arrays.copyOfRange java.base/java.lang.StringUTF16.newString java.base/java.lang.StringBuilder.toString...

xstream:XmlFuzzer: Security exception in java.base/java.util.Arrays.copyOfRange

Detailed Report: https://oss-fuzz.com/testcase?key=6185806706311168 Project: xstream Fuzzing Engine: libFuzzer Fuzz Target: XmlFuzzer Job Type: libfuzzerasanxstream Platform Id: linux Crash Type: Security exception Crash Address: Crash State: java.base/java.util.Arrays.copyOfRange...

CVE-2024-29076

Uncaught exception for some IntelR CST software before version 8.7.10803 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2024-29076

Uncaught exception for some IntelR CST software before version 8.7.10803 may allow an authenticated user to potentially enable denial of service via local access...

Intel CST security vulnerabilities

Intel CST is an application from Intel Corporation USA. A security vulnerability exists in Intel CST versions prior to 8.7.10803 that stems from a failure to properly catch an exception, which could result in a system denial of service...

kernel: dm snapshot: fix lockup in dm_exception_table_exit

In the Linux kernel, the following vulnerability has been resolved: dm snapshot: fix lockup in dmexceptiontableexit The Linux kernel CVE team has assigned CVE-2024-35805 to this issue. Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024051739-CVE-2024-35805-179f@gregkh/T...

CVE-2024-51750: Uncaught Exception

Element is a Matrix web client built using the Matrix React SDK. A malicious homeserver can send invalid messages over federation which can prevent Element Web and Desktop from rendering single messages or the entire room containing them. This was patched in Element Web and Desktop 1.11.85...