OSV-2024-867 Use-of-uninitialized-value in std::__1::ostreambuf_iterator<char, std::__1::char_traits<char>> std::__1::__pad

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68801 Crash type: Use-of-uninitialized-value Crash state: std::1::ostreambufiterator std::1::pad std::1::basicostream& std::1::putchar ostream...

OSV-2024-856 Use-of-uninitialized-value in cups_fill

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=69604 Crash type: Use-of-uninitialized-value Crash state: cupsfill cupsFileRead ippReadIO...

OSV-2024-817 Use-of-uninitialized-value in pcapint_filter_with_aux_data

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68862 Crash type: Use-of-uninitialized-value Crash state: pcapintfilterwithauxdata fuzzboth.c pcapintfilterwithauxdata...

OSV-2024-816 Use-of-uninitialized-value in pcpp::SSLClientHelloMessage::ClientHelloTLSFingerprint::toString

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=69006 Crash type: Use-of-uninitialized-value Crash state: pcpp::SSLClientHelloMessage::ClientHelloTLSFingerprint::toString pcpp::SSLClientHelloMessage::ClientHelloTLSFingerprint::toStringAndMD5...

OSV-2024-812 Use-of-uninitialized-value in pcpp::PcapFileWriterDevice::writePacket

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68839 Crash type: Use-of-uninitialized-value Crash state: pcpp::PcapFileWriterDevice::writePacket FuzzWriter.cpp...

OSV-2024-805 Use-of-uninitialized-value in pcpp::NflogLayer::parseNextLayer

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42537198 Crash type: Use-of-uninitialized-value Crash state: pcpp::NflogLayer::parseNextLayer pcpp::Packet::setRawPacket FuzzTarget.cpp...

OSV-2024-764 Use-of-uninitialized-value in _cupsStrAlloc

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=69562 Crash type: Use-of-uninitialized-value Crash state: cupsStrAlloc ippReadIO fuzzipp.c...

PT-2024-40893 · Git +1 · Gpsd

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the packet parse function, which calls packet get1 and then packet get. No information i...

PT-2024-40863 · Cups · Cups

Name of the Vulnerable Software and Affected Versions: CUPS affected versions not specified Description: The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the cups fill function, which is called by cupsFileRead and ippReadIO. Recommendations: At the...

PT-2024-40867 · Git +1 · Pcapplusplus

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of "Use-of-uninitialized-value". Technical details include a crash state involving std:: 1::ostreambuf iterator and...

PT-2024-41494 · Git +1 · Pcapplusplus

Name of the Vulnerable Software and Affected Versions: libpcap affected versions not specified Description: The software contains a use-of-uninitialized-value issue within the pcpp::NflogLayer::parseNextLayer and pcpp::Packet::setRawPacket functions, as reported by OSS-Fuzz. This issue occurs...

PT-2024-40840 · Git +1 · Cups

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the cupsStrAlloc function, which is called by ippReadIO ...

PT-2024-40853 · Git +1 · Gpsd

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of "Use-of-uninitialized-value" as reported by OSS-Fuzz. The crash occurs in the packet parse function, located in t...

kernel: ipv6: Fix potential uninit-value access in __ip6_make_skb()

In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix potential uninit-value access in ip6makeskb As it was done in commit fc1092f51567 "ipv4: Fix uninit-value access in ipmakeskb" for IPv4, check FLOWIFLAGKNOWNNH on fl6-flowi6flags instead of testing HDRINCL on the socket...

kernel: net: bridge: xmit: make sure we have at least eth header len bytes

A vulnerability was found in the Linux kernel in the net: bridge component, where the xmit function in the bridge device could trigger an uninitialized value error if a short skb less than the required ETHHLEN bytes is sent. This condition could cause unexpected behavior due to insufficient check...

kernel: net: bridge: xmit: make sure we have at least eth header len bytes

A vulnerability was found in the Linux kernel in the net: bridge component, where the xmit function in the bridge device could trigger an uninitialized value error if a short skb less than the required ETHHLEN bytes is sent. This condition could cause unexpected behavior due to insufficient check...

kernel: net: bridge: xmit: make sure we have at least eth header len bytes

A vulnerability was found in the Linux kernel in the net: bridge component, where the xmit function in the bridge device could trigger an uninitialized value error if a short skb less than the required ETHHLEN bytes is sent. This condition could cause unexpected behavior due to insufficient check...

kernel: ipv4: Fix uninit-value access in __ip_make_skb()

In the Linux kernel, the following vulnerability has been resolved: ipv4: Fix uninit-value access in ipmakeskb KMSAN reported uninit-value access in ipmakeskb 1. ipmakeskb tests HDRINCL to know if the skb has icmphdr. However, HDRINCL can cause a race condition. If calling setsockopt2 with...

kernel: ipv4: Fix uninit-value access in __ip_make_skb()

In the Linux kernel, the following vulnerability has been resolved: ipv4: Fix uninit-value access in ipmakeskb KMSAN reported uninit-value access in ipmakeskb 1. ipmakeskb tests HDRINCL to know if the skb has icmphdr. However, HDRINCL can cause a race condition. If calling setsockopt2 with...

kernel: net: bridge: xmit: make sure we have at least eth header len bytes

A vulnerability was found in the Linux kernel in the net: bridge component, where the xmit function in the bridge device could trigger an uninitialized value error if a short skb less than the required ETHHLEN bytes is sent. This condition could cause unexpected behavior due to insufficient check...