libspectre:spectre_read_fuzzer: Use-of-uninitialized-value in ps_gettext

Detailed Report: https://oss-fuzz.com/testcase?key=5093015021289472 Project: libspectre Fuzzing Engine: libFuzzer Fuzz Target: spectrereadfuzzer Job Type: libfuzzermsanlibspectre Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: psgettext psscan documentload...

CVE-2023-2263

The Rockwell Automation Kinetix 5700 DC Bus Power Supply Series A is vulnerable to CIP fuzzing. The new ENIP connections cannot be established if impacted by this vulnerability, which prohibits operational capabilities of the device resulting in a denial-of-service attack...

CVE-2023-2263

The Rockwell Automation Kinetix 5700 DC Bus Power Supply Series A is vulnerable to CIP fuzzing. The new ENIP connections cannot be established if impacted by this vulnerability, which prohibits operational capabilities of the device resulting in a denial-of-service attack...

Design/Logic Flaw

The Rockwell Automation Kinetix 5700 DC Bus Power Supply Series A is vulnerable to CIP fuzzing. The new ENIP connections cannot be established if impacted by this vulnerability, which prohibits operational capabilities of the device resulting in a denial-of-service attack...

CVE-2023-2263 Rockwell Automation Kinetix 5700 DC Bus Power Supply Series A – CIP Message Attack Could Cause Denial-Of-Service

The Rockwell Automation Kinetix 5700 DC Bus Power Supply Series A is vulnerable to CIP fuzzing. The new ENIP connections cannot be established if impacted by this vulnerability, which prohibits operational capabilities of the device resulting in a denial-of-service attack...

CVE-2023-2263 Rockwell Automation Kinetix 5700 DC Bus Power Supply Series A – CIP Message Attack Could Cause Denial-Of-Service

The Rockwell Automation Kinetix 5700 DC Bus Power Supply Series A is vulnerable to CIP fuzzing. The new ENIP connections cannot be established if impacted by this vulnerability, which prohibits operational capabilities of the device resulting in a denial-of-service attack...

CVE-2023-2263

CVE-2023-2263 affects the Rockwell Automation Kinetix 5700 DC Bus Power Supply Series A. Vulnerability stems from CIP fuzzing that prevents establishing new ENIP connections, leading to operation disruption and a denial-of-service on the device. According to multiple sources, CVSSv3 base score is...

PT-2023-18597 · Rockwell Automation · Kinetix 5700 Dc Bus Power Supply Series A

Name of the Vulnerable Software and Affected Versions: Rockwell Automation Kinetix 5700 DC Bus Power Supply Series A affected versions not specified Description: The issue concerns a vulnerability to CIP fuzzing, which affects the establishment of new ENIP connections. If impacted, this...

CVE-2023-2263: Uncontrolled Resource Consumption

The Rockwell Automation Kinetix 5700 DC Bus Power Supply Series A is vulnerable to CIP fuzzing. The new ENIP connections cannot be established if impacted by this vulnerability, which prohibits operational capabilities of the device resulting in a denial-of-service attack...

checkstyle:CheckstyleFuzzer: Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr

Project: https://github.com/checkstyle/checkstyle.git Detailed Report: https://oss-fuzz.com/testcase?key=5090801838063616 Project: checkstyle Fuzzing Engine: libFuzzer Fuzz Target: CheckstyleFuzzer Job Type: libfuzzerasancheckstyle Platform Id: linux Crash Type: Security exception Crash Address:...

checkstyle:CheckstyleFuzzer: Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr

Project: https://github.com/checkstyle/checkstyle.git Detailed Report: https://oss-fuzz.com/testcase?key=5844302545420288 Project: checkstyle Fuzzing Engine: libFuzzer Fuzz Target: CheckstyleFuzzer Job Type: libfuzzerasancheckstyle Platform Id: linux Crash Type: Security exception Crash Address:...

opensc:fuzz_pkcs15_decode: Heap-double-free in sc_pkcs15_free_object_content

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=6607943066583040 Project: opensc Fuzzing Engine: honggfuzz Fuzz Target: fuzzpkcs15decode Job Type: honggfuzzasanopensc Platform Id: linux Crash Type: Heap-double-free Crash Address: 0x606000000020 Cra...

checkstyle:CheckstyleFuzzer: Security exception in org.antlr.v4.runtime.atn.PredictionContext.fromRuleContext

Project: https://github.com/checkstyle/checkstyle.git Detailed Report: https://oss-fuzz.com/testcase?key=4718948302848000 Project: checkstyle Fuzzing Engine: libFuzzer Fuzz Target: CheckstyleFuzzer Job Type: libfuzzerasancheckstyle Platform Id: linux Crash Type: Security exception Crash Address:...

pdfbox:PDFStreamParserFuzzer: Security exception in org.apache.pdfbox.pdfparser.PDFStreamParser.parseNextToken

Project: https://github.com/apache/pdfbox.git Detailed Report: https://oss-fuzz.com/testcase?key=6214593083736064 Project: pdfbox Fuzzing Engine: libFuzzer Fuzz Target: PDFStreamParserFuzzer Job Type: libfuzzerasanpdfbox Platform Id: linux Crash Type: Security exception Crash Address: Crash State...

clamav:clamav_dbload_CDB_fuzzer: Memcpy-param-overlap in repeat

Detailed Report: https://oss-fuzz.com/testcase?key=6252099016196096 Project: clamav Fuzzing Engine: libFuzzer Fuzz Target: clamavdbloadCDBfuzzer Job Type: libfuzzerasanclamav Platform Id: linux Crash Type: Memcpy-param-overlap Crash Address: 0x7f5707fe9a48,0x7f570f7eb530 and 0x7f57007e7f68,...

WPAxFuzz - A Full-Featured Open-Source Wi-Fi Fuzzer

This tool is capable of fuzzing either any management, control or data frame of the 802.11 protocol or the SAE exchange. For the management, control or data frames, you can choose either the "standard" mode where all of the frames transmitted have valid size values or the "random" mode where the...

ffmpeg:ffmpeg_DEMUXER_fuzzer: Heap-buffer-overflow in cbs_h266_read_nal_unit

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5870590815502336 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegDEMUXERfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address:...

libjpeg-turbo:transform_fuzzer_2_1_x: Heap-buffer-overflow in flush_bits

Detailed Report: https://oss-fuzz.com/testcase?key=6132209715904512 Project: libjpeg-turbo Fuzzing Engine: libFuzzer Fuzz Target: transformfuzzer21x Job Type: libfuzzerasani386libjpeg-turbo Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0xf1310800 Crash State: flushbit...

jsign:AuthenticodeAppxSignerFuzzer: Security exception in net.jsign.appx.Zip64EndOfCentralDirectoryRecord.read

Project: https://github.com/ebourg/jsign.git Detailed Report: https://oss-fuzz.com/testcase?key=6359562199105536 Project: jsign Fuzzing Engine: libFuzzer Fuzz Target: AuthenticodeAppxSignerFuzzer Job Type: libfuzzerasanjsign Platform Id: linux Crash Type: Security exception Crash Address: Crash...

imagemagick:enhance_fuzzer: Use-of-uninitialized-value in EnhanceImage

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=4862836426539008 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: enhancefuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...