6684 matches found
OSV-2024-135 Heap-buffer-overflow in BS_ReadByte
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66949 Crash type: Heap-buffer-overflow READ 1 Crash state: BSReadByte gfbsreadu8 dumpsei...
OSV-2024-120 Security exception in com.spotify.docker.client.shaded.com.fasterxml.jackson.databind.util.TokenBuffer
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66743 Crash type: Security exception Crash state: com.spotify.docker.client.shaded.com.fasterxml.jackson.databind.util.TokenBuffer java.base/java.lang.StringCoding.encode java.base/java.lang.String.getBytes...
OSV-2024-118 Heap-buffer-overflow in sav_process_row
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66805 Crash type: Heap-buffer-overflow WRITE 1 Crash state: savprocessrow savreaddata readstatparsesav...
Amazon Linux 2023 : openssl, openssl-devel, openssl-libs (ALAS2023-2024-520)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2024-520 advisory. A flaw was found in OpenSSL. When the EVPPKEYpubliccheck function is called in RSA public keys, a computation is done to confirm that the RSA modulus, n, is composite. For valid RSA keys, n is ...
OSV-2024-117 Security exception in com.spotify.docker.client.shaded.com.fasterxml.jackson.databind.util.TokenBuffer
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66745 Crash type: Security exception Crash state: com.spotify.docker.client.shaded.com.fasterxml.jackson.databind.util.TokenBuffer java.base/java.nio.charset.CharsetEncoder. java.base/sun.nio.cs.CESU8$Encoder...
OSV-2024-112 Stack-overflow in boost::read_graphviz_detail::parser::parse_subgraph
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66719 Crash type: Stack-overflow Crash state: boost::readgraphvizdetail::parser::parsesubgraph boost::readgraphvizdetail::parser::parseendpointrest boost::readgraphvizdetail::parser::parsestmt...
OSV-2024-104 Heap-buffer-overflow in mrb_memsearch
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66689 Crash type: Heap-buffer-overflow READ 3 Crash state: mrbmemsearch strconvertrange mrbstraref...
OSV-2024-102 Heap-buffer-overflow in mrb_memsearch
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66423 Crash type: Heap-buffer-overflow READ 2 Crash state: mrbmemsearch mrbstrsplitm mrbvmexec...
Design/Logic Flaw
When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module, undisclosed requests can cause NGINX worker processes to terminate. Note: The HTTP/3 QUIC module is not enabled by default and is considered experimental. For more information, refer to Support for QUIC and HTTP/3...
CVE-2024-24989 NGINX HTTP/3 QUIC vulnerability
When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module, undisclosed requests can cause NGINX worker processes to terminate. Note: The HTTP/3 QUIC module is not enabled by default and is considered experimental. For more information, refer to Support for QUIC and HTTP/3...
CVE-2024-24989
CVE-2024-24989 affects NGINX Plus and NGINX Open Source when configured with the HTTP/3 QUIC module. The underlying issue is in the HTTP/3 QUIC module, which can cause NGINX worker processes to terminate, yielding a denial-of-service condition. The vulnerability is tied to the HTTP/3 QUIC module ...
CVE-2024-24990
When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module, undisclosed requests can cause NGINX worker processes to terminate. Note: The HTTP/3 QUIC module is not enabled by default and is considered experimental. For more information, refer to Support for QUIC and HTTP/3...
OSV-2024-98 UNKNOWN READ in PackLinuxElf32::adjABS
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66287 Crash type: UNKNOWN READ Crash state: PackLinuxElf32::adjABS PackLinuxElf32::unasldynsym PackLinuxElf32::unshlib1...
OSV-2024-96 Heap-buffer-overflow in mrb_memsearch
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66426 Crash type: Heap-buffer-overflow READ 8 Crash state: mrbmemsearch strconvertrange mrbstraref...
OSV-2024-89 Security exception in com.puppycrawl.tools.checkstyle.JavaAstVisitor.getInnerBopAst
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66429 Crash type: Security exception Crash state: com.puppycrawl.tools.checkstyle.JavaAstVisitor.getInnerBopAst java.base/java.util.stream.ReferencePipeline$3$1.accept...
OSV-2024-88 Heap-use-after-free in fuzzer_execute_ex
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66538 Crash type: Heap-use-after-free READ 4 Crash state: fuzzerexecuteex ZENDDOFCALLSPECRETVALUNUSEDHANDLER fuzzerexecuteex...
OSV-2024-86 Security exception in org.threeten.bp.format.DateTimeFormatterBuilder$CompositePrinterParser.parse
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66533 Crash type: Security exception Crash state: org.threeten.bp.format.DateTimeFormatterBuilder$CompositePrinterParser.parse java.base/java.text.DateFormatSymbols.getProviderInstance...
OSV-2024-85 Security exception in com.github.javaparser.ast.validator.TreeVisitorValidator.accept
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66357 Crash type: Security exception Crash state: com.github.javaparser.ast.validator.TreeVisitorValidator.accept com.github.javaparser.ast.expr.FieldAccessExpr.getMetaModel...
OSV-2024-82 Heap-use-after-free in xmlValidatePopElement
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66154 Crash type: Heap-use-after-free READ 8 Crash state: xmlValidatePopElement xmlTextReaderValidatePop xmlTextReaderRead...