php:php-fuzz-tracing-jit: Segv on unknown address in zero

Detailed Report: https://oss-fuzz.com/testcase?key=5995746541830144 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-tracing-jit Job Type: libfuzzerasani386php Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: zero zendexecute fuzzerdorequestfrombuffer...

php:php-fuzz-function-jit: Crash in zero

Detailed Report: https://oss-fuzz.com/testcase?key=6415004149088256 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-function-jit Job Type: libfuzzerasanphp Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x00010a4d1dbf Crash State: zero zendexecute fuzzerdorequestfrombuff...

php:php-fuzz-function-jit: Heap-use-after-free in zend_jit_fetch_dim_w_helper

Detailed Report: https://oss-fuzz.com/testcase?key=5155906311028736 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-function-jit Job Type: libfuzzerasanphp Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x606000011f08 Crash State: zendjitfetchdimwhelper zero...

php:php-fuzz-tracing-jit: Heap-use-after-free in zend_jit_fast_concat_tmp_helper

Detailed Report: https://oss-fuzz.com/testcase?key=5746907494875136 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-tracing-jit Job Type: libfuzzerasani386php Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0xda80080c Crash State: zendjitfastconcattmphelper...

php:php-fuzz-function-jit: Segv on unknown address in ZEND_FREE_SPEC_TMPVAR_HANDLER

Detailed Report: https://oss-fuzz.com/testcase?key=4604600544526336 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-function-jit Job Type: libfuzzerasanphp Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: ZENDFREESPECTMPVARHANDLER fuzzerexecuteex...

SUSE SLES15: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2021:3969-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:3969-1 advisory. The SUSE Linux Enterprise 15 kernel was updated to receive various security and bugfixes. The following security bugs were fixed:...

php:php-fuzz-tracing-jit: Heap-use-after-free in ZEND_ASSIGN_DIM_SPEC_VAR_CV_OP_DATA_CONST_HANDLER

Detailed Report: https://oss-fuzz.com/testcase?key=6660036808540160 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-tracing-jit Job Type: libfuzzerasanphp Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address: 0x60d000000bb0 Crash State:...

php:php-fuzz-function-jit: Segv on unknown address in zend_fetch_debug_backtrace

Detailed Report: https://oss-fuzz.com/testcase?key=6102401535311872 Project: php Fuzzing Engine: honggfuzz Fuzz Target: php-fuzz-function-jit Job Type: honggfuzzasanphp Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: zendfetchdebugbacktrace...

Updated php packages fix security vulnerability

Header injection via defaultmimetype / defaultcharset mbstring may use pointer from some previous request Unexpected behavior with arrays and JIT Special character is breaking the path in xml function CVE-2021-21707 XMLReader::getParserProperty may throw with a valid property...

php:php-fuzz-tracing-jit: Heap-use-after-free in zval_ptr_dtor_nogc

Detailed Report: https://oss-fuzz.com/testcase?key=5757745240866816 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-tracing-jit Job Type: libfuzzerasanphp Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x6060000125c0 Crash State: zvalptrdtornogc...

php:php-fuzz-tracing-jit: Heap-use-after-free in zend_array_destroy

Detailed Report: https://oss-fuzz.com/testcase?key=5996386038972416 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-tracing-jit Job Type: libfuzzerasanphp Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x608000008d20 Crash State: zendarraydestroy rcdtorfunc...

Oracle Linux 8 : pcre (ELSA-2021-4373)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-4373 advisory. - Fix CVE-2019-20838 a subject buffer overread in JIT when UTF is disabled and \X or \R has a greater than 1 fixed quantifier bug 1852252 Tenable has...

Denial Of Service (DoS)

jbcs-httpd24 is vulnerable to denial of service DoS attacks. An attacker is able to perform a buffer over-read in JIT when UTF is disabled, and \X or \R has more than one fixed quantifier, resulting in a system hang...

php:php-fuzz-tracing-jit: Heap-buffer-overflow in emit_live_range

Detailed Report: https://oss-fuzz.com/testcase?key=5389752107401216 Project: php Fuzzing Engine: honggfuzz Fuzz Target: php-fuzz-tracing-jit Job Type: honggfuzzasanphp Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x61200001623d Crash State: emitliverange...

openSUSE 15 Security Update : pcre (openSUSE-SU-2021:1441-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:1441-1 advisory. - libpcre in PCRE before 8.43 allows a subject buffer over-read in JIT when UTF is disabled, and \X or \R has more than one fixed quantifie...

Mozilla Firefox And Thunderbird Type Confusion Vulnerability

Mozilla Firefox and Thunderbird contain a type confusion vulnerability due to incorrect alias information in the IonMonkey JIT compiler when setting array elements...

php:php-fuzz-tracing-jit: Crash in add_function_slow

Detailed Report: https://oss-fuzz.com/testcase?key=5824689268719616 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-tracing-jit Job Type: libfuzzerasanphp Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x18188000591a Crash State: addfunctionslow addfunction...

php:php-fuzz-tracing-jit: Heap-use-after-free in zval_ptr_dtor

Detailed Report: https://oss-fuzz.com/testcase?key=6748907644780544 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-tracing-jit Job Type: libfuzzerasanphp Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x613000001000 Crash State: zvalptrdtor...

php:php-fuzz-function-jit: Heap-use-after-free in zend_is_unwind_exit

Detailed Report: https://oss-fuzz.com/testcase?key=4803665358094336 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-function-jit Job Type: libfuzzerasani386php Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0xf6302a8c Crash State: zendisunwindexit...

php:php-fuzz-tracing-jit: Heap-use-after-free in ZEND_ASSIGN_DIM_SPEC_VAR_CV_OP_DATA_VAR_HANDLER

Detailed Report: https://oss-fuzz.com/testcase?key=6082614973300736 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-tracing-jit Job Type: libfuzzerasani386php Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0xf54145d0 Crash State:...