PT-2021-28332

Name of the Vulnerable Software and Affected Versions: re2 affected versions not specified Description: The issue is related to a stack-buffer-overflow read, which occurs in the re2::DFA::InlinedSearchLoop function. This function is part of the re2::DFA::Search and re2::Prog::SearchDFA calls...

re2:re2_fuzzer: Stack-buffer-overflow in bool re2::DFA::InlinedSearchLoop<true, true, true>

Project: https://code.googlesource.com/re2 Detailed Report: https://oss-fuzz.com/testcase?key=5733284528128000 Project: re2 Fuzzing Engine: libFuzzer Fuzz Target: re2fuzzer Job Type: libfuzzerasani386re2 Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address: 0xfff929ef Crash...

mysql:8.0 security update

mysql 8.0.21-1 - Rebase to 8.0.21 - Use bundled libzstd and libevent for RHSCL and RHEL-8.0.0 - Check that we have correct versions in bundled Provides - Remove re2 bundled dependency 8.0.20-1 - Rebase to 8.0.20 8.0.19-2 - Specify all perl dependencies 8.0.19-1 - Rebase to 8.0.19 8.0.18-1 - Rebas...

Security update for chromium, re2 (important)

openSUSE Security Update: Security update for chromium, re2 Announcement ID: openSUSE-SU-2020:0233-1 Rating: important References: 1162833 Cross-References: CVE-2019-18197 CVE-2019-19880 CVE-2019-19923 CVE-2019-19925 CVE-2019-19926 CVE-2020-6381 CVE-2020-6382 CVE-2020-6385 CVE-2020-6387...

CVE-2018-16272

The wpasupplicant system service in Samsung Galaxy Gear series allows an unprivileged process to fully control the Wi-Fi interface, due to the lack of its D-Bus security policy configurations. This affects Tizen-based firmwares including Samsung Galaxy Gear series before build RE2...

CVE-2018-16263

The PulseAudio system service in Tizen allows an unprivileged process to control its A2DP MediaEndpoint, due to improper D-Bus security policy configurations. This affects Tizen before 5.0 M1, and Tizen-based firmwares including Samsung Galaxy Gear series before build RE2...

CVE-2018-16269

The wnoti system service in Samsung Galaxy Gear series allows an unprivileged process to take over the internal notification message data, due to improper D-Bus security policy configurations. This affects Tizen-based firmwares including Samsung Galaxy Gear series before build RE2...

Design/Logic Flaw

The PulseAudio system service in Tizen allows an unprivileged process to control its A2DP MediaEndpoint, due to improper D-Bus security policy configurations. This affects Tizen before 5.0 M1, and Tizen-based firmwares including Samsung Galaxy Gear series before build RE2...

Security update for chromium, re2 (important)

openSUSE Security Update: Security update for chromium, re2 Announcement ID: openSUSE-SU-2020:0010-1 Rating: important References: 1154806 Cross-References: CVE-2019-13699 CVE-2019-13700 CVE-2019-13701 CVE-2019-13702 CVE-2019-13703 CVE-2019-13704 CVE-2019-13705 CVE-2019-13706 CVE-2019-13707...

openSUSE Security Update : chromium / re2 (openSUSE-2019-2420)

This update for chromium, re2 fixes the following issues : Chromium was updated to 78.0.3904.70 boo1154806 : - CVE-2019-13699: Use-after-free in media - CVE-2019-13700: Buffer overrun in Blink - CVE-2019-13701: URL spoof in navigation - CVE-2019-13702: Privilege elevation in Installer -...

Security update for chromium, re2 (important)

openSUSE Security Update: Security update for chromium, re2 Announcement ID: openSUSE-SU-2019:2424-1 Rating: important References: 1154806 Cross-References: CVE-2019-13699 CVE-2019-13700 CVE-2019-13701 CVE-2019-13702 CVE-2019-13703 CVE-2019-13704 CVE-2019-13705 CVE-2019-13706 CVE-2019-13707...

Security update for chromium, re2 (important)

openSUSE Security Update: Security update for chromium, re2 Announcement ID: openSUSE-SU-2019:2425-1 Rating: important References: 1154806 Cross-References: CVE-2019-13699 CVE-2019-13700 CVE-2019-13701 CVE-2019-13702 CVE-2019-13703 CVE-2019-13704 CVE-2019-13705 CVE-2019-13706 CVE-2019-13707...

openSUSE: Security Advisory for chromium, re2 (openSUSE-SU-2019:2420-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Security update for chromium, re2 (important)

openSUSE Security Update: Security update for chromium, re2 Announcement ID: openSUSE-SU-2019:2420-1 Rating: important References: 1154806 Cross-References: CVE-2019-13699 CVE-2019-13700 CVE-2019-13701 CVE-2019-13702 CVE-2019-13703 CVE-2019-13704 CVE-2019-13705 CVE-2019-13706 CVE-2019-13707...

Security update for chromium (important)

This update for Chromium to version 69.0.3497.81 fixes multiple issues. Security issues fixed boo1107235: - CVE-2018-16065: Out of bounds write in V8 - CVE-2018-16066:Out of bounds read in Blink - CVE-2018-16067: Out of bounds read in WebAudio - CVE-2018-16068: Out of bounds write in Mojo -...

openSUSE Security Update : Chromium (openSUSE-2018-290)

This update for Chromium to version 65.0.3325.181 fixes the following issue : - boo1086124: Various security relevant fixes from audits, fuzzing and other initiatives Additionally, re2 was updated to the 2018-03-01 version. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text...

re2: Use-of-uninitialized-value in re2::Prog::Optimize

Project: https://code.googlesource.com/re2 Detailed report: https://oss-fuzz.com/testcase?key=6666938535116800 Project: re2 Fuzzer: libFuzzerre2fuzzer Fuzz target binary: re2fuzzer Job Type: libfuzzermsanre2 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

re2: Use-of-uninitialized-value in re2::Prog::MarkSuccessors

Project: https://code.googlesource.com/re2 Detailed report: https://oss-fuzz.com/testcase?key=5285093406932992 Project: re2 Fuzzer: libFuzzerre2fuzzer Fuzz target binary: re2fuzzer Job Type: libfuzzermsanre2 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...