SUSE SLED15: libpcre1 / libpcre1-32bit / libpcre16-0 / libpcrecpp0 / etc (SUSE-SU-2021:3529-1)

The remote SUSE Linux SLED15 / SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:3529-1 advisory. Update pcre to version 8.45: - CVE-2020-14155: Fixed integer overflow via a large number after a '?C' substring bsc1172974. -...

SUSE-SU-2021:3529-1 Security update for pcre

This update for pcre fixes the following issues: Update pcre to version 8.45: - CVE-2020-14155: Fixed integer overflow via a large number after a '?C' substring bsc1172974. - CVE-2019-20838: Fixed buffer over-read in JIT compiler bsc1172973...

NewStart CGSL MAIN 6.02 : firefox Multiple Vulnerabilities (NS-SA-2021-0131)

The remote NewStart CGSL host, running version MAIN 6.02, has firefox packages installed that are affected by multiple vulnerabilities: - Further techniques that built on the slipstream research combined with a malicious webpage could have exposed both an internal network's hosts as well as...

PlayStation: bd-j exploit chain

Hey PlayStation! Below are 5 vulnerabilities chained together that allows an attacker to gain JIT capabilities and execute arbitrary payloads. The provided payload triggers a buffer overflow that causes a kernel panic. Please consider each of the vulnerabilities individually. AFAIK, this is the...

php:php-fuzz-tracing-jit: Segv on unknown address in zend_jit_trace_execute

Detailed Report: https://oss-fuzz.com/testcase?key=4508810148970496 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-tracing-jit Job Type: libfuzzerasanphp Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: zendjittraceexecute zendjittracehotroot...

openSUSE 15 Security Update : MozillaFirefox (openSUSE-SU-2021:1367-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:1367-1 advisory. - Uninitialized memory in a canvas object could have caused an incorrect free leading to memory corruption and a potentially exploitable...

CVE-2021-20320

A flaw was found in s390 eBPF JIT in bpfjitinsn in arch/s390/net/bpfjitcomp.c in the Linux kernel. In this flaw, a local attacker with special user privilege can circumvent the verifier and may lead to a confidentiality problem. Mitigation Mitigation for this issue is either not available or the...

SUSE SLES15: MozillaFirefox / MozillaFirefox-branding-SLE / MozillaFirefox-devel / etc (SUSE-SU-2021:3331-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:3331-1 advisory. This update contains the Firefox Extended Support Release 91.2.0 ESR. Firefox Extended Support Release 91.2.0 ESR Fixed: Various...

php:php-fuzz-function-jit: Heap-use-after-free in zend_is_callable_check_func

Detailed Report: https://oss-fuzz.com/testcase?key=5605771556028416 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-function-jit Job Type: libfuzzerasanphp Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x6040000276e0 Crash State: zendiscallablecheckfunc...

php:php-fuzz-function-jit: Crash in xbuf_format_converter

Detailed Report: https://oss-fuzz.com/testcase?key=4556619543871488 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-function-jit Job Type: libfuzzerasani386php Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7a756630 Crash State: xbufformatconverter phpprintftosmartstr...

php:php-fuzz-function-jit: Segv on unknown address in cleanup_unfinished_calls

Detailed Report: https://oss-fuzz.com/testcase?key=5556297714499584 Project: php Fuzzing Engine: honggfuzz Fuzz Target: php-fuzz-function-jit Job Type: honggfuzzasanphp Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: cleanupunfinishedcalls...

php:php-fuzz-function-jit: Heap-buffer-overflow in emit_live_range

Detailed Report: https://oss-fuzz.com/testcase?key=6677597522624512 Project: php Fuzzing Engine: afl Fuzz Target: php-fuzz-function-jit Job Type: aflasanphp Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x61300000073d Crash State: emitliverange zendcalcliveranges...

php:php-fuzz-function-jit: Heap-use-after-free in zval_ptr_dtor

Detailed Report: https://oss-fuzz.com/testcase?key=6222770686525440 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-function-jit Job Type: libfuzzerasanphp Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x615000582200 Crash State: zvalptrdtor zendhashdelelex...

php:php-fuzz-function-jit: Heap-use-after-free in zend_is_callable_at_frame

Detailed Report: https://oss-fuzz.com/testcase?key=6084900680237056 Project: php Fuzzing Engine: afl Fuzz Target: php-fuzz-function-jit Job Type: aflasanphp Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x61700002c898 Crash State: zendiscallableatframe zendiscallableex...

php:php-fuzz-function-jit: Crash in zend_jit_fetch_dim_rw_helper

Detailed Report: https://oss-fuzz.com/testcase?key=6370619185299456 Project: php Fuzzing Engine: honggfuzz Fuzz Target: php-fuzz-function-jit Job Type: honggfuzzasanphp Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000188429380 Crash State: zendjitfetchdimrwhelper zero zendexecute...

PT-2024-11422

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A potential memory leak has been resolved in the Linux kernel related to bpf and s390. The issue was fixed by ensuring that jit data is freed through kfree in the error path...

php:php-fuzz-function-jit: Heap-use-after-free in zval_ptr_dtor

Detailed Report: https://oss-fuzz.com/testcase?key=4720916240662528 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-function-jit Job Type: libfuzzerasanphp Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x60b000001b10 Crash State: zvalptrdtor zendhashdelelex...

php:php-fuzz-function-jit: Heap-buffer-overflow in zend_optimizer_pass3

Detailed Report: https://oss-fuzz.com/testcase?key=6302732173049856 Project: php Fuzzing Engine: afl Fuzz Target: php-fuzz-function-jit Job Type: aflasanphp Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x60f000000d2c Crash State: zendoptimizerpass3 zendoptimize...

php:php-fuzz-function-jit: Crash in zend_ssa_remove_nops

Detailed Report: https://oss-fuzz.com/testcase?key=4919685179637760 Project: php Fuzzing Engine: honggfuzz Fuzz Target: php-fuzz-function-jit Job Type: honggfuzzasanphp Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x1000df08700f Crash State: zendssaremovenops zenddfaoptimizeoparray...

php:php-fuzz-function-jit: Crash in ZEND_HANDLE_EXCEPTION_SPEC_HANDLER

Detailed Report: https://oss-fuzz.com/testcase?key=4850341603049472 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-function-jit Job Type: libfuzzerasani386php Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xbebebebe Crash State: ZENDHANDLEEXCEPTIONSPECHANDLER zero...