SUSE SLED15 / SLES15 / openSUSE 15 Security Update : vim (SUSE-SU-2024:1287-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:1287-1 advisory. Updated to version 9.1.0111, fixes the following security problems - CVE-2023-48231:...

Juniper Networks Junos OS security vulnerabilities

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. A security vulnerability exists in Juniper Networks Junos OS and Junos OS Evolved that stems from mishandling of an...

Backdoor.Win32.Dumador.c MVID-2024-0679 Buffer Overflow

Discovery / credits: Malvuln John Page aka hyp3rlinx c 2024 Original source: https://malvuln.com/advisory/6cc630843cabf23621375830df474bc5.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Dumador.c Vulnerability: Remote Stack Buffer Overflow SEH Description: The...

PT-2024-9803

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the OpenRISC exception handling in the Linux kernel, which sends signals to user processes on floating point exceptions and trap instructions for debugging...

xstream:XmlFuzzer: Security exception in java.base/java.lang.StringUTF16.newBytesFor

Project: https://github.com/x-stream/xstream.git Detailed Report: https://oss-fuzz.com/testcase?key=4659540266123264 Project: xstream Fuzzing Engine: libFuzzer Fuzz Target: XmlFuzzer Job Type: libfuzzerasanxstream Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

SUSE CVE-2024-23076

JFreeChart v1.5.4 was discovered to contain a NullPointerException via the component /labels/BubbleXYItemLabelGenerator.java. NOTE: this is disputed by multiple third parties who believe there was not reasonable evidence to determine the existence of a vulnerability. The submission may have been...

jackson-databind:ObjectReaderRandomClassFuzzer: Security exception in com.github.javaparser.ast.validator.TreeVisitorValidator.accept

Project: https://github.com/FasterXML/jackson-databind.git Detailed Report: https://oss-fuzz.com/testcase?key=6633302183182336 Project: jackson-databind Fuzzing Engine: libFuzzer Fuzz Target: ObjectReaderRandomClassFuzzer Job Type: libfuzzerasanjackson-databind Platform Id: linux Crash Type:...

lucene:QueryParserFuzzer: Security exception in org.apache.lucene.analysis.hi.HindiNormalizer.normalize

Detailed Report: https://oss-fuzz.com/testcase?key=5835454818615296 Project: lucene Fuzzing Engine: libFuzzer Fuzz Target: QueryParserFuzzer Job Type: libfuzzerasanlucene Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

spring-data-mongodb:ParameterBindingJsonReaderFuzzer: Security exception in org.springframework.expression.spel.standard.InternalSpelExpressionParser.eatExp

Detailed Report: https://oss-fuzz.com/testcase?key=4764378348978176 Project: spring-data-mongodb Fuzzing Engine: libFuzzer Fuzz Target: ParameterBindingJsonReaderFuzzer Job Type: libfuzzerasanspring-data-mongodb Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

PyMongo < 4.6.3 Out-of-bounds Read

Versions of the package pymongo before 4.6.3 are vulnerable to Out-of-bounds Read in the bson module. Using the crafted payload the attacker could force the parser to deserialize unmanaged memory. The parser tries to interpret bytes next to buffer and throws an exception with string. If the...

CVE-2024-23080

Joda Time v2.12.5 was discovered to contain a NullPointerException via the component org.joda.time.format.PeriodFormat::wordBasedLocale. NOTE: this is disputed by multiple third parties who believe there was not reasonable evidence to determine the existence of a vulnerability. The submission may...

javaparser:parseFuzzer: Security exception in com.github.javaparser.GeneratedJavaParser.Expression

Project: https://github.com/javaparser/javaparser.git Detailed Report: https://oss-fuzz.com/testcase?key=5035130142916608 Project: javaparser Fuzzing Engine: libFuzzer Fuzz Target: parseFuzzer Job Type: libfuzzerasanjavaparser Platform Id: linux Crash Type: Security exception Crash Address: Crash...

Out Of Bounds Exception

JGraphT Core is vulnerable to an Out of Bounds Exception The vulnerability is due to missing input validation in the org.jgrapht.util.ArrayUtil::reverseint, int, int method. If the value of the parameter to is greater than the length of the array arr, an ArrayIndexOutOfBoundsException is raised...

NULL Pointer Exception

org.jfree: jfreechart is vulnerable to a NULL Pointer Exception. The vulnerability is due to missing null value checks in the chart.annotations.CategoryLineAnnotation class, which results in Denial of Service if a null value is passed to one of the plot parameter methods...

OSV-2024-248 Security exception in com.github.javaparser.CommentsInserter.insertComments

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67850 Crash type: Security exception Crash state: com.github.javaparser.CommentsInserter.insertComments java.base/java.util.Objects.equals com.github.javaparser.Position.equals...

Joda-Time security vulnerabilities

Joda-Time is a Joda open source replacement for the widely used Java date and time classes prior to Java SE 8. A security vulnerability exists in Joda-Time version v2.12.5 that stems from the presence of a null pointer exception...

JFreeChart security vulnerabilities

JFreeChart is a comprehensive free charting library for the Java platform from the individual developer David Gilbert. A security vulnerability exists in JFreeChart v1.5.4 that stems from the presence of a null pointer exception...

apache-poi:POIHSLFFuzzer: Security exception in org.apache.poi.util.IOUtils.copy

Detailed Report: https://oss-fuzz.com/testcase?key=5983273768517632 Project: apache-poi Fuzzing Engine: libFuzzer Fuzz Target: POIHSLFFuzzer Job Type: libfuzzerasanapache-poi Platform Id: linux Crash Type: Security exception Crash Address: Crash State: org.apache.poi.util.IOUtils.copy...

CVE-2024-23078

A flaw was found in the JGraphT Core. The affected version of this package contains a Null Pointer Exception via the org.jgrapht.alg.util.ToleranceDoubleComparator::compare component. Mitigation Mitigation for this issue is either not available or the currently available options don't meet the Re...

jsqlparser:JSqlParserFuzzer: Security exception in net.sf.jsqlparser.parser.CCJSqlParser.PrimaryExpression

Detailed Report: https://oss-fuzz.com/testcase?key=6742107240857600 Project: jsqlparser Fuzzing Engine: libFuzzer Fuzz Target: JSqlParserFuzzer Job Type: libfuzzerasanjsqlparser Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...