SUSE SLED15: helm / helm-bash-completion / helm-fish-completion / etc (SUSE-SU-2022:3666-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3666-1 advisory. helm was updated to version 3.9.4: CVE-2022-36055: Fixed denial of service through string value...

OSV-2022-1064 Security exception in org.codehaus.janino.Parser.parseAssignmentExpression

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52507 Crash type: Security exception Crash state: org.codehaus.janino.Parser.parseAssignmentExpression java.base/java.nio.charset.CharsetEncoder. java.base/java.nio.charset.CharsetEncoder...

OSV-2022-1063 Heap-use-after-free in xps_image_enum_finalize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52492 Crash type: Heap-use-after-free READ 8 Crash state: xpsimageenumfinalize allocrestorestepin dorestore...

OSV-2022-1058 Heap-buffer-overflow in AffixMgr::suffix_check

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52455 Crash type: Heap-buffer-overflow READ 1 Crash state: AffixMgr::suffixcheck AffixMgr::affixcheck AffixMgr::compoundcheck...

OSV-2022-1055 UNKNOWN READ in ndpi_search_irc_tcp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52435 Crash type: UNKNOWN READ Crash state: ndpisearchirctcp checkndpidetectionfunc ndpidetectionprocesspacket...

OSV-2022-1053 Heap-buffer-overflow in flb_parser_create

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52414 Crash type: Heap-buffer-overflow READ 1 Crash state: flbparsercreate flbparserconffile configrandomfuzzer.c...

OSV-2022-1049 Stack-buffer-overflow in AffixMgr::suffix_check

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52397 Crash type: Stack-buffer-overflow READ 1 Crash state: AffixMgr::suffixcheck AffixMgr::affixcheck AffixMgr::compoundcheck...

PT-2022-36682 · Git +1 · Hunspell

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a stack-buffer-overflow read, which was identified through an OSS-Fuzz report. The crash state involves several functions:...

OSV-2022-1046 Stack-buffer-overflow in Curl_output_aws_sigv4

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52349 Crash type: Stack-buffer-overflow WRITE Crash state: Curloutputawssigv4 outputauthheaders Curlhttpoutputauth...

OSV-2022-1045 Heap-buffer-overflow in onigenc_unicode_mbc_case_fold

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52330 Crash type: Heap-buffer-overflow READ 1 Crash state: onigencunicodembccasefold mbccasefold updatestringnodecasefold...

OSV-2022-1044 Heap-buffer-overflow in parse_via

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52326 Crash type: Heap-buffer-overflow READ 1 Crash state: parsevia gethdrfield parseheaders...

OSV-2022-1040 Heap-buffer-overflow in onig_node_str_cat

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52276 Crash type: Heap-buffer-overflow READ 3 Crash state: onignodestrcat setuptree setuptree...

OSV-2022-1028 Heap-buffer-overflow in AffixMgr::compound_check

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52195 Crash type: Heap-buffer-overflow READ 1 Crash state: AffixMgr::compoundcheck SuggestMgr::checkword SuggestMgr::testsug...

OSV-2022-1021 Stack-buffer-underflow in gs_type2_interpret

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52145 Crash type: Stack-buffer-underflow READ 4 Crash state: gstype2interpret gstype1glyphinfo pdficffglyphinfo...

CVE-2022-41852

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

CVE-2022-40160

DISPUTED This record was originally reported by the oss-fuzz project who failed to consider the security context in which JXPath is intended to be used and failed to contact the JXPath maintainers prior to requesting the CVE allocation. The CVE was then allocated by Google in breach of the CNA...

CVE-2022-40159

DISPUTED This record was originally reported by the oss-fuzz project who failed to consider the security context in which JXPath is intended to be used and failed to contact the JXPath maintainers prior to requesting the CVE allocation. The CVE was then allocated by Google in breach of the CNA...

Design/Logic Flaw

DISPUTED This record was originally reported by the oss-fuzz project who failed to consider the security context in which JXPath is intended to be used and failed to contact the JXPath maintainers prior to requesting the CVE allocation. The CVE was then allocated by Google in breach of the CNA...

UBUNTU-CVE-2022-40160

DISPUTED This record was originally reported by the oss-fuzz project who failed to consider the security context in which JXPath is intended to be used and failed to contact the JXPath maintainers prior to requesting the CVE allocation. The CVE was then allocated by Google in breach of the CNA...

CVE-2022-40158

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...