Shallow copy bug in geth

Impact This is a Consensus vulnerability, which can be used to cause a chain-split where vulnerable nodes reject the canonical chain. Geth’s pre-compiled dataCopy at 0x00...04 contract did a shallow copy on invocation. An attacker could deploy a contract that - writes X to an EVM memory region R,...

GHSA-69V6-XC2J-R2JF Shallow copy bug in geth

Impact This is a Consensus vulnerability, which can be used to cause a chain-split where vulnerable nodes reject the canonical chain. Geth’s pre-compiled dataCopy at 0x00...04 contract did a shallow copy on invocation. An attacker could deploy a contract that - writes X to an EVM memory region R,...

PT-2021-29278

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.12.10 Description A bug was found in the ext4 es cache extent function, where ext4 split extent at failed. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-25284

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.12.10 Description: A bug was found in the ext4 es cache extent function, where ext4 split extent at failed. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kerne...

PT-2021-29205

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.194 Description A bug was found in the ext4 es cache extent function, where ext4 split extent at failed. The actual impact and attack plausibility of this issue have not yet been proven. Recommendations For...

PT-2021-25224

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.125 Description A bug was found in the ext4 es cache extent function, where ext4 split extent at failed. The actual impact and attack plausibility of this issue have not yet been proven. Recommendations For...

PT-2021-25249

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.43 Description A bug was found in the ext4 es cache extent function, where ext4 split extent at failed. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-25211

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.194 Description A bug was found in the ext4 es cache extent function, where ext4 split extent at failed. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

UVI-2021-1000731 ext4: fix bug on in ext4_es_cache_extent as ext4_split_extent_at failed

ext4: fix bug on in ext4escacheextent as ext4splitextentat failed This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.236 by commit...

UVI-2021-1000723 ext4: fix bug on in ext4_es_cache_extent as ext4_split_extent_at failed

ext4: fix bug on in ext4escacheextent as ext4splitextentat failed This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.272 by commit...

PT-2021-25202

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.236 Description A bug was found in the ext4 es cache extent function, where ext4 split extent at failed. The actual impact and attack plausibility of this issue have not yet been proven. Recommendations For...

PT-2021-29180

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.4.272 Description A bug was found in the ext4 es cache extent function, where ext4 split extent at failed. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-29188

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.272 Description A bug was found in the ext4 es cache extent function, where ext4 split extent at failed. The actual impact and attack plausibility of this issue have not yet been proven. Recommendations For...

PT-2021-29196

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.236 Description A bug was found in the ext4 es cache extent function, where ext4 split extent at failed. The actual impact and attack plausibility of this issue have not yet been proven. Recommendations For...

PT-2021-25194

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.272 Description A bug was found in the ext4 es cache extent function, where ext4 split extent at failed. The actual impact and attack plausibility of this issue have not yet been proven. Recommendations For...

njs:njs_process_script_fuzzer: Crash in njs_string_new

Project: http://hg.nginx.org/njs Detailed Report: https://oss-fuzz.com/testcase?key=4691222710059008 Project: njs Fuzzing Engine: libFuzzer Fuzz Target: njsprocessscriptfuzzer Job Type: libfuzzerasannjs Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x6180bebecbce Crash State:...

njs:njs_process_script_fuzzer: Use-of-uninitialized-value in njs_string_prototype_split

Project: http://hg.nginx.org/njs Detailed Report: https://oss-fuzz.com/testcase?key=6607010525872128 Project: njs Fuzzing Engine: libFuzzer Fuzz Target: njsprocessscriptfuzzer Job Type: libfuzzermsannjs Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

How to split entire organization backup job on per-service basis

Challenge It might be required to create a backup job that would only process a particular Microsoft Office 365 service. This might help to improve backup performance of each service as well as to isolate performance issue to a particular service. Solution This example demonstrates creating a...

GHSA-H4PC-GX2W-F2XV Heap OOB read in TFLite

Impact A specially crafted TFLite model could trigger an OOB read on heap in the TFLite implementation of SplitV: cc const int inputsize = SizeOfDimensioninput, axisvalue; If axisvalue is not a value between 0 and NumDimensionsinput, then the SizeOfDimension function will access data outside the...

GHSA-97WF-P777-86JQ Division by zero in TFLite's implementation of Split

Impact The implementation of the Split TFLite operator is vulnerable to a division by zero error: cc TFLITEENSUREMSGcontext, inputsize % numsplits == 0, "Not an even split"; const int slicesize = inputsize / numsplits; An attacker can craft a model such that numsplits would be 0. Patches We have...