CVE-2021-44507

An issue was discovered in FIS GT.M through V7.0-000 related to the YottaDB code base. A lack of parameter validation in calls to memcpy in strtok in srunix/ztimeoutroutines.c allows attackers to attempt to read from a NULL pointer...

CVE-2021-44481

An issue was discovered in YottaDB through r1.32 and V7.0-000. A lack of parameter validation in calls to memcpy in checkandsettimeout in srunix/ztimeoutroutines.c allows attackers to attempt to read from a NULL pointer...

UBUNTU-CVE-2021-44507

An issue was discovered in FIS GT.M through V7.0-000 related to the YottaDB code base. A lack of parameter validation in calls to memcpy in strtok in srunix/ztimeoutroutines.c allows attackers to attempt to read from a NULL pointer...

CVE-2021-44481

An issue was discovered in YottaDB through r1.32 and V7.0-000. A lack of parameter validation in calls to memcpy in checkandsettimeout in srunix/ztimeoutroutines.c allows attackers to attempt to read from a NULL pointer...

PT-2022-12154

Name of the Vulnerable Software and Affected Versions FIS GT.M versions prior to V7.0-000 Description The issue is related to a lack of parameter validation in calls to memcpy in the str tok function, located in the sr unix/ztimeoutroutines.c file, which is connected to the YottaDB code base. Thi...

PT-2022-12128

Name of the Vulnerable Software and Affected Versions YottaDB versions through r1.32 and V7.0-000 Description An issue was discovered in YottaDB, where a lack of parameter validation in calls to memcpy in check and set timeout in sr unix/ztimeoutroutines.c allows attackers to attempt to read from...

CVE-2021-44481: Improper Input Validation

An issue was discovered in YottaDB through r1.32 and V7.0-000. A lack of parameter validation in calls to memcpy in checkandsettimeout in srunix/ztimeoutroutines.c allows attackers to attempt to read from a NULL pointer...

Exploring a New Class of Kernel Exploit Primitive

The security landscape is dynamic, changing often and as a result, attack surfaces evolve. MSRC receives a wide variety of cases spanning different products, bug types and exploit primitives. One particularly interesting primitive we see is an arbitrary kernel pointer read. These often happen whe...

Exploring a New Class of Kernel Exploit Primitive

The security landscape is dynamic, changing often and as a result, attack surfaces evolve. MSRC receives a wide variety of cases spanning different products, bug types and exploit primitives. One particularly interesting primitive we see is an arbitrary kernel pointer read. These often happen whe...

helm:fuzz_download_index_file: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6520776096874496 Project: helm Fuzzing Engine: libFuzzer Fuzz Target: fuzzdownloadindexfile Job Type: libfuzzerasanhelm Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000010ac066e Crash State: NULL Sanitizer: address ASAN Recommende...

SUSE-SU-2022:0358-1 Security update for clamav

This update for clamav fixes the following issues: - CVE-2022-20698: Fixed invalid pointer read allowing denial of service crash. bsc1194731...

testing-native-go-fuzzing:fuzz_equals_sql_node: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5697531139457024 Project: testing-native-go-fuzzing Fuzzing Engine: libFuzzer Fuzz Target: fuzzequalssqlnode Job Type: libfuzzerasantesting-native-go-fuzzing Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000035cf4028 Crash State:...

fluxcd:fuzz_azure_devops: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4845932087214080 Project: fluxcd Fuzzing Engine: libFuzzer Fuzz Target: fuzzazuredevops Job Type: libfuzzerasanfluxcd Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000000243000 Crash State: NULL Sanitizer: address ASAN Recommended...

DEBIAN-CVE-2022-20698

A vulnerability in the OOXML parsing module in Clam AntiVirus ClamAV Software version 0.104.1 and LTS version 0.103.4 and prior versions could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to improper checks that m...

CVE-2022-20698

A vulnerability in the OOXML parsing module in Clam AntiVirus ClamAV Software version 0.104.1 and LTS version 0.103.4 and prior versions could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to improper checks that m...

CVE-2022-20698: Improper Input Validation

A vulnerability in the OOXML parsing module in Clam AntiVirus ClamAV Software version 0.104.1 and LTS version 0.103.4 and prior versions could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to improper checks that m...

PT-2022-1458

Name of the Vulnerable Software and Affected Versions Clam AntiVirus versions 0.103.4 and prior versions Clam AntiVirus version 0.104.1 Description The issue is related to insufficient input validation in the OOXML parsing module. An attacker could exploit this by sending a specially crafted OOXM...

FreeBSD : clamav -- invalid pointer read that may cause a crash (2a6106c6-73e5-11ec-8fa2-0800270512f4)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 2a6106c6-73e5-11ec-8fa2-0800270512f4 advisory. - A vulnerability in the OOXML parsing module in Clam AntiVirus ClamAV Software version 0.104.1 and LTS...

clamav -- invalid pointer read that may cause a crash

Laurent Delosieres reports: Fix for invalid pointer read that may cause a crash. This issue affects 0.104.1, 0.103.4 and prior when ClamAV is compiled with libjson-c and the CLSCANGENERALCOLLECTMETADATA scan option the clamscan --gen-json option is enabled...

vlc:vlc-demux-dec-libfuzzer: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5453819813691392 Project: vlc Fuzzing Engine: libFuzzer Fuzz Target: vlc-demux-dec-libfuzzer Job Type: libfuzzerubsanvlc Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x02e1ffa00020 Crash State: NULL Sanitizer: undefined UBSAN...