Apache HTTP Server < 2.4.58 'mod_macro' Out-of-bounds Read Vulnerability - Windows

Apache HTTP Server is prone to an out-of-bounds read vulnerability in modmacro. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

OSV-2023-1025 Heap-buffer-overflow in ucl_hash_destroy

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63299 Crash type: Heap-buffer-overflow READ 8 Crash state: uclhashdestroy uclobjectdtorunrefsingle uclobjectdtorunref...

OSV-2023-1016 Use-of-uninitialized-value in Render_Single_Pass

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63241 Crash type: Use-of-uninitialized-value Crash state: RenderSinglePass RenderGlyph ftblackrender...

OSV-2023-1014 Security exception in org.jsoup.parser.HtmlTreeBuilder.process

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63242 Crash type: Security exception Crash state: org.jsoup.parser.HtmlTreeBuilder.process org.jsoup.parser.HtmlTreeBuilderState$14.handleMissingTr org.jsoup.parser.HtmlTreeBuilderState$14.process...

OSV-2023-1009 Security exception in net.jsign.bouncycastle.asn1.ASN1StreamParser.readVector

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63217 Crash type: Security exception Crash state: net.jsign.bouncycastle.asn1.ASN1StreamParser.readVector net.jsign.bouncycastle.asn1.ASN1StreamParser.loadTaggedIL net.jsign.bouncycastle.asn1.BERTaggedObjectParser.getLoadedObj...

OSV-2023-1008 Heap-use-after-free in gx_image_enum_begin

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63185 Crash type: Heap-use-after-free WRITE 8 Crash state: gximageenumbegin gxbeginimage1 gxdefaultbegintypedimage...

OSV-2023-1004 Heap-buffer-overflow in ndpi_snprintf

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63179 Crash type: Heap-buffer-overflow WRITE 11 Crash state: ndpisnprintf ndpiserializestringint32 fuzzserialization.cpp...

OSV-2023-1001 Security exception in java.base/java.lang.String.repeat

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63154 Crash type: Security exception Crash state: java.base/java.lang.String.repeat org.springframework.expression.spel.ast.OpMultiply.getValueInternal org.springframework.expression.spel.ast.MethodReference.getArguments...

OSV-2023-1000 Heap-use-after-free in xmlParserPrintFileContextInternal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63157 Crash type: Heap-use-after-free READ 1 Crash state: xmlParserPrintFileContextInternal xmlReportError xmlRaiseError...

OSV-2023-999 Heap-buffer-overflow in xmlParseCommentComplex

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63127 Crash type: Heap-buffer-overflow WRITE 1 Crash state: xmlParseCommentComplex xmlParseComment xmlParseMisc...

OSV-2023-993 Stack-buffer-overflow in entersafe_reverse_buffer

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63104 Crash type: Stack-buffer-overflow READ 1 Crash state: entersafereversebuffer entersafegenkey entersafecardctlNUMBER...

OSV-2023-990 Heap-use-after-free in __xmlRaiseError

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63092 Crash type: Heap-use-after-free READ 8 Crash state: xmlRaiseError xmlFatalErr xmlStringDecodeEntitiesInt...

OSV-2023-989 Heap-buffer-overflow in load_sections_64

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63074 Crash type: Heap-buffer-overflow READ Crash state: loadsections64 parseclasses64 classes...

OSV-2023-988 Heap-buffer-overflow in xmlCopyCharMultiByte

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63086 Crash type: Heap-buffer-overflow WRITE 1 Crash state: xmlCopyCharMultiByte xmlParseCommentComplex xmlParseComment...

OSV-2023-980 UNKNOWN READ in skip_chunk

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63051 Crash type: UNKNOWN READ Crash state: skipchunk httpcb fuzz.c...

OSV-2023-978 UNKNOWN READ in google::ParseTemplateArg

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63034 Crash type: UNKNOWN READ Crash state: google::ParseTemplateArg google::ParseTemplateArg google::ParseEncoding...

OSV-2023-976 Heap-buffer-overflow in Flow::dissectMDNS

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63060 Crash type: Heap-buffer-overflow READ 2 Crash state: Flow::dissectMDNS NetworkInterface::processPacket NetworkInterface::dissectPacket...

OSV-2023-974 UNKNOWN READ in r_str_ncpy

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63030 Crash type: UNKNOWN READ Crash state: rstrncpy Elf64loadsymbolsfrom Elf64loadsymbols...

OSV-2023-970 Heap-use-after-free in gx_device_forward_finalize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63013 Crash type: Heap-use-after-free READ 8 Crash state: gxdeviceforwardfinalize gxdevicefinalize allocrestorestepin...

OSV-2023-969 Heap-use-after-free in xmlStaticCopyNode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62996 Crash type: Heap-use-after-free READ 4 Crash state: xmlStaticCopyNode xmlDocCopyNode xmlParseReference...