CVE-2022-36055 Denial of service in Helm

Helm is a tool for managing Charts. Charts are packages of pre-configured Kubernetes resources. Fuzz testing, provided by the CNCF, identified input to functions in the strvals package that can cause an out of memory panic. The strvals package contains a parser that turns strings in to Go...

CVE-2022-36055 Denial of service in Helm

Helm is a tool for managing Charts. Charts are packages of pre-configured Kubernetes resources. Fuzz testing, provided by the CNCF, identified input to functions in the strvals package that can cause an out of memory panic. The strvals package contains a parser that turns strings in to Go...

Helm 资源管理错误漏洞

Helm is a Kubernetes package manager. Helm version 3.9.3 and earlier are vulnerable to a resource management error that stems from a fuzz test provided by CNCF that identifies input to a function in the strvals package that could cause an out-of-memory panic. No detailed vulnerability details are...

OSV-2022-808 Use-of-uninitialized-value in _dbus_marshal_write_basic

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50762 Crash type: Use-of-uninitialized-value Crash state: dbusmarshalwritebasic dbustypewriterwritebasic writebasicfield...

Helm Vulnerable to denial of service through string value parsing

Fuzz testing, by Ada Logics and sponsored by the CNCF, identified input to functions in the strvals package that can cause an out of memory panic. Out of memory panics cannot be recovered from. Applications that use functions from the strvals package in the Helm SDK can have a Denial of Service...

GHSA-7HFP-QFW3-5JXH Helm Vulnerable to denial of service through string value parsing

Fuzz testing, by Ada Logics and sponsored by the CNCF, identified input to functions in the strvals package that can cause an out of memory panic. Out of memory panics cannot be recovered from. Applications that use functions from the strvals package in the Helm SDK can have a Denial of Service...

OSV-2022-805 Global-buffer-overflow in get_unpack_proc

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50731 Crash type: Global-buffer-overflow READ 8 Crash state: getunpackproc xpsbegintypedimage defaultsubclassbegintypedimage...

OSV-2022-804 Heap-buffer-overflow in _cmsMAT3per

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50725 Crash type: Heap-buffer-overflow READ 8 Crash state: cmsMAT3per OptimizeMatrixShaper cmsOptimizePipeline...

OSV-2022-803 Segv on unknown address in gs_fapi_ft_get_scaled_font

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50720 Crash type: Segv on unknown address Crash state: gsfapiftgetscaledfont gsfapipreparefont gsfapipassfont...

Denial of service through string value parsing

Fuzz testing, by Ada Logics and sponsored by the CNCF, identified input to functions in the strvals package that can cause an out of memory panic. Out of memory panics cannot be recovered from. Applications that use functions from the strvals package in the Helm SDK can have a Denial of Service...

OSV-2022-802 Heap-use-after-free in UA_Server_networkCallback

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50699 Crash type: Heap-use-after-free READ 4 Crash state: UAServernetworkCallback fuzzbinarymessage.cc UAmemoryManagerfree...

PT-2022-37228 · Git +1 · Open62541

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-use-after-free READ 4 crash has been reported. The crash occurs in the UA Server networkCallback function and involves the fuzz binary message.cc...

OSV-2022-799 Incorrect-function-pointer-type in grk::BufferedStream::read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50661 Crash type: Incorrect-function-pointer-type Crash state: grk::BufferedStream::read grk::FileFormatDecompress::readboxhdr grk::FileFormatDecompress::readHeaderProcedureImpl...

OSV-2022-798 Heap-use-after-free in cmsFreeNamedColorList

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50665 Crash type: Heap-use-after-free READ 8 Crash state: cmsFreeNamedColorList TypeNamedColorFree cmsCloseProfile...

OSV-2022-795 UNKNOWN READ in pcl::PLYReader::read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50663 Crash type: UNKNOWN READ Crash state: pcl::PLYReader::read plyio.h...

OSV-2022-791 Security exception in java.base/java.util.Arrays.copyOf

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50631 Crash type: Security exception Crash state: java.base/java.util.Arrays.copyOf java.base/java.lang.AbstractStringBuilder.ensureCapacityInternal java.base/java.lang.AbstractStringBuilder.append...

OSV-2022-786 Heap-double-free in read_config

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50645 Crash type: Heap-double-free Crash state: readconfig readglob readconfig...

OSV-2022-785 Heap-buffer-overflow in resize_packet

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50617 Crash type: Heap-buffer-overflow WRITE Crash state: resizepacket FuzzResizePacket fuzzrfc1035.c...

OSV-2022-784 Segv on unknown address in FreeCodePages

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50593 Crash type: Segv on unknown address Crash state: FreeCodePages m3FreeEnvironment fuzzer.c...

OSV-2022-782 Security exception in java.base/java.lang.StringBuffer.append

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50600 Crash type: Security exception Crash state: java.base/java.lang.StringBuffer.append org.apache.commons.jxpath.ri.compiler.CoreFunction.toString java.base/java.lang.String.valueOf...