EUVD-2019-3440

Malware in sbrugna...

keycloak:SamlValidationUtilFuzzer: Security exception in java.base/java.lang.String.encodeWithEncoder

Detailed Report: https://oss-fuzz.com/testcase?key=5596315306491904 Project: keycloak Fuzzing Engine: libFuzzer Fuzz Target: SamlValidationUtilFuzzer Job Type: libfuzzerasankeycloak Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

logback:JoranFuzzer: Security exception in java.base/sun.nio.cs.CESU_8.newEncoder

Detailed Report: https://oss-fuzz.com/testcase?key=4625249081819136 Project: logback Fuzzing Engine: libFuzzer Fuzz Target: JoranFuzzer Job Type: libfuzzerasanlogback Platform Id: linux Crash Type: Security exception Crash Address: Crash State: java.base/sun.nio.cs.CESU8.newEncoder...

logback:JoranFuzzer: Security exception in java.base/java.nio.CharBuffer.wrap

Detailed Report: https://oss-fuzz.com/testcase?key=4660111271854080 Project: logback Fuzzing Engine: libFuzzer Fuzz Target: JoranFuzzer Job Type: libfuzzerasanlogback Platform Id: linux Crash Type: Security exception Crash Address: Crash State: java.base/java.nio.CharBuffer.wrap...

hsqldb:SqlStatementFuzzer: Security exception in java.base/java.lang.String.encodeWithEncoder

Detailed Report: https://oss-fuzz.com/testcase?key=6539901025189888 Project: hsqldb Fuzzing Engine: libFuzzer Fuzz Target: SqlStatementFuzzer Job Type: libfuzzerasanhsqldb Platform Id: linux Crash Type: Security exception Crash Address: Crash State: java.base/java.lang.String.encodeWithEncoder...

maven:ProjectArtifactMetadataFuzzer: Security exception in java.base/java.nio.CharBuffer.wrap

Detailed Report: https://oss-fuzz.com/testcase?key=6243951863988224 Project: maven Fuzzing Engine: libFuzzer Fuzz Target: ProjectArtifactMetadataFuzzer Job Type: libfuzzerasanmaven Platform Id: linux Crash Type: Security exception Crash Address: Crash State: java.base/java.nio.CharBuffer.wrap...

graphql-java:GraphqlFuzzer: Security exception in java.base/sun.nio.cs.CESU_8.newEncoder

Detailed Report: https://oss-fuzz.com/testcase?key=5111413412331520 Project: graphql-java Fuzzing Engine: libFuzzer Fuzz Target: GraphqlFuzzer Job Type: libfuzzerasangraphql-java Platform Id: linux Crash Type: Security exception Crash Address: Crash State: java.base/sun.nio.cs.CESU8.newEncoder...

hsqldb:SqlStatementFuzzer: Security exception in java.base/java.lang.StringCoding.encode

Detailed Report: https://oss-fuzz.com/testcase?key=4547077124521984 Project: hsqldb Fuzzing Engine: libFuzzer Fuzz Target: SqlStatementFuzzer Job Type: libfuzzerasanhsqldb Platform Id: linux Crash Type: Security exception Crash Address: Crash State: java.base/java.lang.StringCoding.encode...

archaius-core:DynamicPropertyFuzzer: Security exception in java.base/sun.nio.cs.CESU_8.newEncoder

Detailed Report: https://oss-fuzz.com/testcase?key=6180952485527552 Project: archaius-core Fuzzing Engine: libFuzzer Fuzz Target: DynamicPropertyFuzzer Job Type: libfuzzerasanarchaius-core Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

xstream:XmlFuzzer: Security exception in com.ctc.wstx.dtd.FullDTDReader.readContentSpec

Project: https://github.com/x-stream/xstream.git Detailed Report: https://oss-fuzz.com/testcase?key=6278204565880832 Project: xstream Fuzzing Engine: libFuzzer Fuzz Target: XmlFuzzer Job Type: libfuzzerasanxstream Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

CVE-2019-11772

In Eclipse OpenJ9 prior to 0.15, the String.getBytesint, int, byte, int method does not verify that the provided byte array is non-null nor that the provided index is in bounds when compiled by the JIT. This allows arbitrary writes to any 32-bit address or beyond the end of a byte array within Ja...

Arbitrary Code Execution

ibm java jdk is vulnerable to arbitrary code execution. Out-of-bounds access in the String.getBytes method allows an attacker to write arbitrary data to any 32-bit address or beyond the end of byte array within Java code run under a SecurityManager, resulting in code execution...

RHEL 8 : java-1.8.0-ibm (RHSA-2019:2590)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:2590 advisory. IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit. This update upgrades IBM Java SE ...

CVE-2019-11772

In Eclipse OpenJ9 prior to 0.15, the String.getBytesint, int, byte, int method does not verify that the provided byte array is non-null nor that the provided index is in bounds when compiled by the JIT. This allows arbitrary writes to any 32-bit address or beyond the end of a byte array within Ja...

CVE-2019-11772

In Eclipse OpenJ9 prior to 0.15, the String.getBytesint, int, byte, int method does not verify that the provided byte array is non-null nor that the provided index is in bounds when compiled by the JIT. This allows arbitrary writes to any 32-bit address or beyond the end of a byte array within Ja...

CVE-2019-11772: Out-of-bounds Write

In Eclipse OpenJ9 prior to 0.15, the String.getBytesint, int, byte, int method does not verify that the provided byte array is non-null nor that the provided index is in bounds when compiled by the JIT. This allows arbitrary writes to any 32-bit address or beyond the end of a byte array within Ja...

PT-2019-3218

Name of the Vulnerable Software and Affected Versions Eclipse OpenJ9 versions prior to 0.15 Description The issue is related to the String.getBytesint, int, byte, int method in Eclipse OpenJ9, which does not verify that the provided byte array is non-null nor that the provided index is in bounds...