SUSE CVE-2024-37356

In the Linux kernel, the following vulnerability has been resolved: tcp: Fix shift-out-of-bounds in dctcpupdatealpha. In dctcpupdatealpha, we use a module parameter dctcpshiftg as follows: alpha -= minnotzeroalpha, alpha dctcpshiftg; ... deliveredce /sys/module/tcpdctcp/parameters/dctcpshiftg cat...

pcapplusplus:FuzzTarget: Use-of-uninitialized-value in pcpp::IPv6Address::toString

Project: https://github.com/seladb/PcapPlusPlus.git Detailed Report: https://oss-fuzz.com/testcase?key=6027683008413696 Project: pcapplusplus Fuzzing Engine: libFuzzer Fuzz Target: FuzzTarget Job Type: libfuzzermsanpcapplusplus Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

gpac:fuzz_probe_analyze: Crash in gsfdmx_read_data_pck

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=5351086341292032 Project: gpac Fuzzing Engine: afl Fuzz Target: fuzzprobeanalyze Job Type: aflasangpac Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x511100062f7f Crash State:...

imagemagick:encoder_dng_fuzzer: Use-of-uninitialized-value in LibRaw::kodak_NUMBER_load_raw

Detailed Report: https://oss-fuzz.com/testcase?key=6311467738005504 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderdngfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: LibRaw::kodakNUMBERloadraw...

CVE-2024-37356

In the Linux kernel, the following vulnerability has been resolved: tcp: Fix shift-out-of-bounds in dctcpupdatealpha. In dctcpupdatealpha, we use a module parameter dctcpshiftg as follows: alpha -= minnotzeroalpha, alpha dctcpshiftg; ... deliveredce /sys/module/tcpdctcp/parameters/dctcpshiftg cat...

CVE-2024-37356 tcp: Fix shift-out-of-bounds in dctcp_update_alpha().

In the Linux kernel, the following vulnerability has been resolved: tcp: Fix shift-out-of-bounds in dctcpupdatealpha. In dctcpupdatealpha, we use a module parameter dctcpshiftg as follows: alpha -= minnotzeroalpha, alpha dctcpshiftg; ... deliveredce /sys/module/tcpdctcp/parameters/dctcpshiftg cat...

CVE-2024-37356 tcp: Fix shift-out-of-bounds in dctcp_update_alpha().

In the Linux kernel, the following vulnerability has been resolved: tcp: Fix shift-out-of-bounds in dctcpupdatealpha. In dctcpupdatealpha, we use a module parameter dctcpshiftg as follows: alpha -= minnotzeroalpha, alpha dctcpshiftg; ... deliveredce /sys/module/tcpdctcp/parameters/dctcpshiftg cat...

apache-commons-jxpath:JXPathFuzzer: Security exception in java.base/java.lang.StringBuilder.append

Detailed Report: https://oss-fuzz.com/testcase?key=6290491126120448 Project: apache-commons-jxpath Fuzzing Engine: libFuzzer Fuzz Target: JXPathFuzzer Job Type: libfuzzerasanapache-commons-jxpath Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

unit:fuzz_json: Use-of-uninitialized-value in nxt_vsprintf

Detailed Report: https://oss-fuzz.com/testcase?key=5545917827055616 Project: unit Fuzzing Engine: libFuzzer Fuzz Target: fuzzjson Job Type: libfuzzermsanunit Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: nxtvsprintf nxtconfvldterror nxtconfvldtif Sanitizer:...

libcups:fuzzipp: Use-of-uninitialized-value in cups_array_find

Project: https://github.com/OpenPrinting/libcups.git Detailed Report: https://oss-fuzz.com/testcase?key=4844597682438144 Project: libcups Fuzzing Engine: libFuzzer Fuzz Target: fuzzipp Job Type: libfuzzermsanlibcups Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

libssh2:ssh2_client_fuzzer: Heap-double-free in libssh2_default_free

Project: https://github.com/cmeister2/libssh2.git https://github.com/libssh2/libssh2.git Detailed Report: https://oss-fuzz.com/testcase?key=5137089486716928 Project: libssh2 Fuzzing Engine: libFuzzer Fuzz Target: ssh2clientfuzzer Job Type: libfuzzerasanlibssh2 Platform Id: linux Crash Type:...

poppler:qt_annot_fuzzer: Use-of-uninitialized-value in FlateEncoder::getChar

Detailed Report: https://oss-fuzz.com/testcase?key=4906624897056768 Project: poppler Fuzzing Engine: libFuzzer Fuzz Target: qtannotfuzzer Job Type: libfuzzermsanpoppler Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: FlateEncoder::getChar PDFDoc::writeObject...

clamav:clamav_scanfile_PDF_fuzzer: Heap-buffer-overflow in pdf_nextobject

Detailed Report: https://oss-fuzz.com/testcase?key=5086732102467584 Project: clamav Fuzzing Engine: afl Fuzz Target: clamavscanfilePDFfuzzer Job Type: aflasanclamav Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x525000004900 Crash State: pdfnextobject findlength...

cups:fuzz_ipp: Use-of-uninitialized-value in cups_fill

Detailed Report: https://oss-fuzz.com/testcase?key=5131356341338112 Project: cups Fuzzing Engine: libFuzzer Fuzz Target: fuzzipp Job Type: libfuzzermsancups Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: cupsfill cupsFileRead ippReadIO Sanitizer: memory MSAN...

checkstyle:CheckstyleFuzzer: Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.statement

Project: https://github.com/checkstyle/checkstyle.git Detailed Report: https://oss-fuzz.com/testcase?key=5123711905103872 Project: checkstyle Fuzzing Engine: libFuzzer Fuzz Target: CheckstyleFuzzer Job Type: libfuzzerasancheckstyle Platform Id: linux Crash Type: Security exception Crash Address:...

cups:fuzz_ipp: Use-of-uninitialized-value in cups_array_find

Project: https://github.com/OpenPrinting/cups.git Detailed Report: https://oss-fuzz.com/testcase?key=6378705441062912 Project: cups Fuzzing Engine: libFuzzer Fuzz Target: fuzzipp Job Type: libfuzzermsancups Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

libcups:fuzzipp: Use-of-uninitialized-value in _cupsStrAlloc

Project: https://github.com/OpenPrinting/libcups.git Detailed Report: https://oss-fuzz.com/testcase?key=4637350360580096 Project: libcups Fuzzing Engine: libFuzzer Fuzz Target: fuzzipp Job Type: libfuzzermsanlibcups Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

lucene:QueryParserFuzzer: Security exception in org.apache.lucene.analysis.hi.HindiNormalizer.normalize

Detailed Report: https://oss-fuzz.com/testcase?key=6618435869016064 Project: lucene Fuzzing Engine: libFuzzer Fuzz Target: QueryParserFuzzer Job Type: libfuzzerasanlucene Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

spirv-tools:spvtools_as_fuzzer: Use-of-uninitialized-value in spvTextEncodeOperand

Project: https://github.com/KhronosGroup/SPIRV-Tools.git Detailed Report: https://oss-fuzz.com/testcase?key=4671284326760448 Project: spirv-tools Fuzzing Engine: libFuzzer Fuzz Target: spvtoolsasfuzzer Job Type: libfuzzermsanspirv-tools Platform Id: linux Crash Type: Use-of-uninitialized-value...

apache-commons-jxpath:JXPathFuzzer: Security exception in org.apache.commons.jxpath.ri.compiler.CoreFunction.toString

Detailed Report: https://oss-fuzz.com/testcase?key=6000136504279040 Project: apache-commons-jxpath Fuzzing Engine: libFuzzer Fuzz Target: JXPathFuzzer Job Type: libfuzzerasanapache-commons-jxpath Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...