CBL Mariner 2.0 Security Update: kernel (CVE-2024-42161)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-42161 advisory. - In the Linux kernel, the following vulnerability has been resolved: bpf: Avoid uninitialized value in...

CVE-2024-42311

A flaw was found in the HFS filesystem in the Linux kernel due to uninitialized fields in the hfsinodeinfo structure. The .tzsecondswest, .cachedstart, and .cachedblocks fields are not initialized after calling hfsallocinode. This omission led to undefined behavior and potential security issues, ...

SUSE CVE-2024-42311

In the Linux kernel, the following vulnerability has been resolved: hfs: fix to initialize fields of hfsinodeinfo after hfsallocinode Syzbot reports uninitialized value access issue as below: loop0: detected capacity change from 0 to 64 ===================================================== BUG:...

OSV-2024-1031 Use-of-uninitialized-value in Http3FrameFactory::create

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42537939 Crash type: Use-of-uninitialized-value Crash state: Http3FrameFactory::create Http3FrameFactory::fastcreate fuzzhttp3frame.cc...

CVE-2024-42311

In the Linux kernel, the following vulnerability has been resolved: hfs: fix to initialize fields of hfsinodeinfo after hfsallocinode Syzbot reports uninitialized value access issue as below: loop0: detected capacity change from 0 to 64 ===================================================== BUG:...

DEBIAN-CVE-2024-42311

In the Linux kernel, the following vulnerability has been resolved: hfs: fix to initialize fields of hfsinodeinfo after hfsallocinode Syzbot reports uninitialized value access issue as below: loop0: detected capacity change from 0 to 64 ===================================================== BUG:...

AZL-48486 CVE-2024-42311 affecting package kernel for versions less than 5.15.167.1-1

In the Linux kernel, the following vulnerability has been resolved: hfs: fix to initialize fields of hfsinodeinfo after hfsallocinode Syzbot reports uninitialized value access issue as below: loop0: detected capacity change from 0 to 64 ===================================================== BUG:...

CVE-2024-42311

In the Linux kernel, the following vulnerability has been resolved: hfs: fix to initialize fields of hfsinodeinfo after hfsallocinode Syzbot reports uninitialized value access issue as below: loop0: detected capacity change from 0 to 64 ===================================================== BUG:...

CVE-2024-42311 hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()

In the Linux kernel, the following vulnerability has been resolved: hfs: fix to initialize fields of hfsinodeinfo after hfsallocinode Syzbot reports uninitialized value access issue as below: loop0: detected capacity change from 0 to 64 ===================================================== BUG:...

CVE-2024-42311

In the Linux kernel, the following vulnerability has been resolved: hfs: fix to initialize fields of hfsinodeinfo after hfsallocinode Syzbot reports uninitialized value access issue as below: loop0: detected capacity change from 0 to 64 ===================================================== BUG:...

CVE-2024-42311 hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()

In the Linux kernel, the following vulnerability has been resolved: hfs: fix to initialize fields of hfsinodeinfo after hfsallocinode Syzbot reports uninitialized value access issue as below: loop0: detected capacity change from 0 to 64 ===================================================== BUG:...

bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD

...

OSV-2024-1023 Use-of-uninitialized-value in pcpp::SomeIpLayer::parseSomeIpLayer

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=69526 Crash type: Use-of-uninitialized-value Crash state: pcpp::SomeIpLayer::parseSomeIpLayer pcpp::SomeIpLayer::parseNextLayer pcpp::Packet::setRawPacket...

OSV-2024-996 Use-of-uninitialized-value in cups_array_find

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=69548 Crash type: Use-of-uninitialized-value Crash state: cupsarrayfind cupsArrayFind cupsStrAlloc...

OSV-2024-994 Use-of-uninitialized-value in packet_parse

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=71124 Crash type: Use-of-uninitialized-value Crash state: packetparse packetget1 packetget...

OSV-2024-955 Use-of-uninitialized-value in pcpp::IPv6Address::toString

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42536479 Crash type: Use-of-uninitialized-value Crash state: pcpp::IPv6Address::toString pcpp::NDPNeighborSolicitationLayer::toString pcpp::Packet::toStringList...

OSV-2024-868 Use-of-uninitialized-value in evutil_inet_pton

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=69173 Crash type: Use-of-uninitialized-value Crash state: evutilinetpton bracketaddrok parseauthority...

OSV-2024-867 Use-of-uninitialized-value in std::__1::ostreambuf_iterator<char, std::__1::char_traits<char>> std::__1::__pad

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68801 Crash type: Use-of-uninitialized-value Crash state: std::1::ostreambufiterator std::1::pad std::1::basicostream& std::1::putchar ostream...

OSV-2024-856 Use-of-uninitialized-value in cups_fill

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=69604 Crash type: Use-of-uninitialized-value Crash state: cupsfill cupsFileRead ippReadIO...

OSV-2024-817 Use-of-uninitialized-value in pcapint_filter_with_aux_data

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68862 Crash type: Use-of-uninitialized-value Crash state: pcapintfilterwithauxdata fuzzboth.c pcapintfilterwithauxdata...