7558 matches found
libldb bug fix update
An update is available for libldb. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The libldb packages provide an extensible library that implements an LDAP-like...
ghostscript:gs_device_pxlcolor_fuzzer: Crash in chunk_free_object
Detailed Report: https://oss-fuzz.com/testcase?key=5175853493846016 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicepxlcolorfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00000045e066 Crash State: chunkfreeobject...
jackson-dataformat-xml:XmlDeserializerFuzzer: Security exception in com.fasterxml.jackson.databind.deser.BeanDeserializer.deserialize
Project: https://github.com/FasterXML/jackson-dataformat-xml.git Detailed Report: https://oss-fuzz.com/testcase?key=4668690686083072 Project: jackson-dataformat-xml Fuzzing Engine: libFuzzer Fuzz Target: XmlDeserializerFuzzer Job Type: libfuzzerasanjackson-dataformat-xml Platform Id: linux Crash...
BIT-ENVOY-2024-7207
A flaw was found in Envoy. It is possible to modify or manipulate headers from external clients when pass-through routes are used for the ingress gateway. This issue could allow a malicious user to forge what is logged by Envoy as a requested path and cause the Envoy proxy to make requests to...
readstat:fuzz_format_sav: Heap-buffer-overflow in extract_mr_data
Project: https://github.com/WizardMac/ReadStat.git Detailed Report: https://oss-fuzz.com/testcase?key=4906920979267584 Project: readstat Fuzzing Engine: libFuzzer Fuzz Target: fuzzformatsav Job Type: libfuzzerasanreadstat Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address:...
jackson-databind:ObjectReaderRandomClassFuzzer: Security exception in com.github.javaparser.GeneratedJavaParser.jj_3R_480
Project: https://github.com/FasterXML/jackson-databind.git Detailed Report: https://oss-fuzz.com/testcase?key=5942423769907200 Project: jackson-databind Fuzzing Engine: libFuzzer Fuzz Target: ObjectReaderRandomClassFuzzer Job Type: libfuzzerasanjackson-databind Platform Id: linux Crash Type:...
checkstyle:CheckstyleFuzzer: Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr
Project: https://github.com/checkstyle/checkstyle.git Detailed Report: https://oss-fuzz.com/testcase?key=5625951671615488 Project: checkstyle Fuzzing Engine: libFuzzer Fuzz Target: CheckstyleFuzzer Job Type: libfuzzerasancheckstyle Platform Id: linux Crash Type: Security exception Crash Address:...
CVE-2024-7207
Rejected reason: Duplicate of CVE-2024-45806...
apache-commons-configuration:YAMLConfigurationReadFuzzer: Security exception in org.yaml.snakeyaml.parser.ParserImpl$ParseBlockMappingValueComment.produce
Detailed Report: https://oss-fuzz.com/testcase?key=4883712972488704 Project: apache-commons-configuration Fuzzing Engine: libFuzzer Fuzz Target: YAMLConfigurationReadFuzzer Job Type: libfuzzerasanapache-commons-configuration Platform Id: linux Crash Type: Security exception Crash Address: Crash...
jackson-dataformats-binary:DeserializerFuzzer: Security exception in com.fasterxml.jackson.databind.deser.BeanDeserializer.deserialize
Detailed Report: https://oss-fuzz.com/testcase?key=6008948677738496 Project: jackson-dataformats-binary Fuzzing Engine: libFuzzer Fuzz Target: DeserializerFuzzer Job Type: libfuzzerasanjackson-dataformats-binary Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...
libheif:file_fuzzer: Heap-buffer-overflow in Op_RGB_to_YCbCr<unsigned char>::convert_colorspace
Project: https://github.com/strukturag/libheif.git Detailed Report: https://oss-fuzz.com/testcase?key=5087089471848448 Project: libheif Fuzzing Engine: afl Fuzz Target: filefuzzer Job Type: aflasanlibheif Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x52500000c10f Cra...
poco:jwt_decode_fuzzer: Use-of-uninitialized-value in Poco::Dynamic::Var::~Var
Project: https://github.com/pocoproject/poco.git Detailed Report: https://oss-fuzz.com/testcase?key=5129032620900352 Project: poco Fuzzing Engine: libFuzzer Fuzz Target: jwtdecodefuzzer Job Type: libfuzzermsanpoco Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash Stat...
SUSE: Security Advisory (SUSE-SU-2024:3208-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP10 : httpd (EulerOS-SA-2024-2440)
According to the versions of the httpd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Encoding problem in modproxy in Apache HTTP Server 2.4.59 and earlier allows request URLs with incorrect encoding to be sent to backend services,...
imagemagick:encoder_tiff64_fuzzer: Use-of-uninitialized-value in PixarLogDecode
Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5749361525456896 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encodertiff64fuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value...
llamacpp:fuzz_inference: Heap-buffer-overflow in gguf_get_tensor_offset
Detailed Report: https://oss-fuzz.com/testcase?key=4527906179579904 Project: llamacpp Fuzzing Engine: libFuzzer Fuzz Target: fuzzinference Job Type: libfuzzerasanllamacpp Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x518000000de8 Crash State: ggufgettensoroffset...
Patch Tuesday - September 2024
Microsoft is addressing 79 vulnerabilities this September 2024 Patch Tuesday. Microsoft has evidence of in-the-wild exploitation and/or public disclosure for four of the vulnerabilities published today; at time of writing, all four are listed on CISA KEV. Microsoft is also patching four critical...
Fedora: Security Advisory (FEDORA-2023-3256575fc8)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE CVE-2024-44951
In the Linux kernel, the following vulnerability has been resolved: serial: sc16is7xx: fix TX fifo corruption Sometimes, when a packet is received on channel A at almost the same time as a packet is about to be transmitted on channel B, we observe with a logic analyzer that the received packet on...