vitess:read_query_results_fuzzer: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4818321429102592 Project: vitess Fuzzing Engine: libFuzzer Fuzz Target: readqueryresultsfuzzer Job Type: libfuzzerasanvitess Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00001a393558 Crash State: NULL Sanitizer: address ASAN...

vitess:write_packet_fuzzer: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5699802240253952 Project: vitess Fuzzing Engine: libFuzzer Fuzz Target: writepacketfuzzer Job Type: libfuzzerasanvitess Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0000271bfa39 Crash State: NULL Sanitizer: address ASAN Recommende...

vitess:read_query_results_fuzzer: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5428449725513728 Project: vitess Fuzzing Engine: libFuzzer Fuzz Target: readqueryresultsfuzzer Job Type: libfuzzerasanvitess Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0000163946ac Crash State: NULL Sanitizer: address ASAN...

vitess:write_packet_fuzzer: Null-dereference READ in pthread_create

Detailed Report: https://oss-fuzz.com/testcase?key=5860885638807552 Project: vitess Fuzzing Engine: libFuzzer Fuzz Target: writepacketfuzzer Job Type: libfuzzerasanvitess Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: pthreadcreate...

vitess:normalizer_fuzzer: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5148071425081344 Project: vitess Fuzzing Engine: libFuzzer Fuzz Target: normalizerfuzzer Job Type: libfuzzerasanvitess Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000032ffeb14 Crash State: NULL Sanitizer: address ASAN Recommended...

vitess:fuzz: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5259061357576192 Project: vitess Fuzzing Engine: libFuzzer Fuzz Target: fuzz Job Type: libfuzzerasanvitess Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x7ffd19be27b2 Crash State: NULL Sanitizer: address ASAN Recommended Security...

Fedora: Security Advisory for golang-vitess (FEDORA-2020-bd764dd275)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 31 : golang-vitess / hugo (2020-bd764dd275)

"Rebuilt to fix GHSA-jf24-p9p9-4rjh Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Fedora Security Advisory FEDORA-2020-bd764dd275. include"compat.inc"; if description scriptid134140; scriptversion"1.1"; scriptcvsdate"Date: 2020/02/28";...

[SECURITY] Fedora 31 Update: golang-vitess-3.0-4.20190701git948c251.fc31

Vitess is a database clustering system for horizontal scaling of MySQL thro ugh generalized sharding. By encapsulating shard-routing logic, Vitess allows application code and database queries to remain agnostic to the distribution of data onto multip le shards. With Vitess, you can even split and...

Timing Attack

github.com/youtube/vitess is vulnerable to timing attack. The usage of an insecure password comparison function entry.Password == password in vitess/go/mysql/authserverstatic.go allows a remote attacker to determine a user's password by analyzing the server response. This is due to early aborting...

AZL-40850 CVE-2017-14623 affecting package vitess for versions less than 19.0.4-2

In the ldap.v2 aka go-ldap package through 2.5.0 for Go, an attacker may be able to login with an empty password. This issue affects an application using this package if these conditions are met: 1 it relies only on the return error of the Bind function call to determine whether a user is...