ndpi:fuzz_ndpi_reader: Heap-buffer-overflow in ndpi_parse_packet_line_info

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5638729751592960 Project: ndpi Fuzzing Engine: afl Fuzz Target: fuzzndpireader Job Type: aflasanndpi Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x60b000000152 Crash State:...

Exploit for Observable Discrepancy in Linux Linux_Kernel

This is an offensive tool for fuzzing. It is a PoC exploit for CVE-2021-34556, but the primary focus is on fuzzing and testing the robustness of software. The tool is called AFLplusplus, which is an enhanced version of the original AFL American Fuzzy Lop tool. The target of the tool is not...

envoy:conn_manager_impl_fuzz_test: Heap-buffer-overflow in Envoy::Fuzz::replaceInvalidHostCharacters

Project: https://github.com/envoyproxy/envoy.git Detailed Report: https://oss-fuzz.com/testcase?key=5630167902060544 Project: envoy Fuzzing Engine: afl Fuzz Target: connmanagerimplfuzztest Job Type: aflasanenvoy Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

ndpi:fuzz_ndpi_reader: Segv on unknown address in process_ndpi_collected_info

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5715653119180800 Project: ndpi Fuzzing Engine: libFuzzer Fuzz Target: fuzzndpireader Job Type: libfuzzerasanndpi Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State:...

ndpi:fuzz_process_packet: Heap-buffer-overflow in ndpi_strnstr

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5681891455008768 Project: ndpi Fuzzing Engine: afl Fuzz Target: fuzzprocesspacket Job Type: aflasanndpi Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6040000002b8 Crash State...

Mitigating vulnerabilities in endpoint network stacks

The skyrocketing demand for tools that enable real-time collaboration, remote desktops for accessing company information, and other services that enable remote work underlines the tremendous importance of building and shipping secure products and services. While this is magnified as organizations...

skia:api_mock_gpu_canvas: Use-of-uninitialized-value in GrShape::simplifyRect

Project: https://skia.googlesource.com/skia.git Detailed Report: https://oss-fuzz.com/testcase?key=5162098826149888 Project: skia Fuzzing Engine: libFuzzer Fuzz Target: apimockgpucanvas Job Type: libfuzzermsanskia Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash Stat...

qt:qtbase_gui_painting_qcolorspace_fromiccprofile: Heap-buffer-overflow in QSpecialInteger<QBigEndianStorageType<unsigned int> >::operator unsigned int

Project: git://code.qt.io/qt/qt5.git Detailed Report: https://oss-fuzz.com/testcase?key=5699424467812352 Project: qt Fuzzing Engine: libFuzzer Fuzz Target: qtbaseguipaintingqcolorspacefromiccprofile Job Type: libfuzzerasani386qt Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash...

Fuzzing ImageIO

Posted by Samuel Groß, Project Zero This blog post discusses an old type of issue, vulnerabilities in image format parsers, in a newer context: on interactionless code paths in popular messenger apps. This research was focused on the Apple ecosystem and the image parsing API provided by it: the...

libzmq:decode_fuzzer: Stack-buffer-overflow in zmq_z85_decode

Project: https://github.com/zeromq/libzmq.git Detailed Report: https://oss-fuzz.com/testcase?key=5724808697610240 Project: libzmq Fuzzing Engine: libFuzzer Fuzz Target: decodefuzzer Job Type: libfuzzerasani386libzmq Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 1 Crash Address:...

ndpi:fuzz_process_packet: Heap-buffer-overflow in ndpi_netbios_name_interpret

Detailed Report: https://oss-fuzz.com/testcase?key=5729916529410048 Project: ndpi Fuzzing Engine: afl Fuzz Target: fuzzprocesspacket Job Type: aflasanndpi Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x60b000000210 Crash State: ndpinetbiosnameinterpret...

ndpi:fuzz_process_packet: Heap-buffer-overflow in ndpi_search_oracle

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5090959332474880 Project: ndpi Fuzzing Engine: afl Fuzz Target: fuzzprocesspacket Job Type: aflasanndpi Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x60a0000fbad1 Crash State...

Frida API Fuzzer - This Experimetal Fuzzer Is Meant To Be Used For API In-Memory Fuzzing

This experimental fuzzer is meant to be used for API in-memory fuzzing. The design is highly inspired and based on AFL/AFL++. ATM the mutator is quite simple, just the AFL's havoc and splice stages. I tested only the examples under tests/, this is a WIP project but is known to works at least on...

Open-Xchange: Multiple buffer over reads in mbox_from_parse

Vulnerabilities were found fuzzing mboxfromparse Different inputs reproducing the behavior are 0xe7,0xdf,0x1,0x0,0x30,0x3f,0x20,0x32,0x20,0x30,0x3a,0x32,0x39,0x20,0x3f,0x3f,0x3f,0x20,0x34,0x39,0x30,0x34,0xdb,0x32,0x32,0x3a,0x32,0x36,...

suricata:fuzz_siginit: Null-dereference READ with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5093448282800128 Project: suricata Fuzzing Engine: honggfuzz Fuzz Target: fuzzsiginit Job Type: honggfuzzasansuricata Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: NULL Sanitizer: address ASAN Cra...

arrow:parquet-arrow-fuzz: Heap-buffer-overflow in virtual thunk to parquet::ByteStreamSplitDecoder<parquet::PhysicalType<

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=4890562181464064 Project: arrow Fuzzing Engine: afl Fuzz Target: parquet-arrow-fuzz Job Type: aflasanarrow Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x60f0000003df Crash...

PSKernel-Primitives

This repository contains a collection of PowerShell primitives for fuzzing and exploitation. The primitives are designed to be used in a Windows environment and are intended for use in red teaming and penetration testing. The repository includes the following primitives: 1. Alloc-NullPage.ps1:...

ndpi:fuzz_ndpi_reader: Use-of-uninitialized-value in ndpi_strdup

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5112736746045440 Project: ndpi Fuzzing Engine: libFuzzer Fuzz Target: fuzzndpireader Job Type: libfuzzermsanndpi Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

ndpi:fuzz_ndpi_reader: Use-of-uninitialized-value in processClientServerHello

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5638243526901760 Project: ndpi Fuzzing Engine: libFuzzer Fuzz Target: fuzzndpireader Job Type: libfuzzermsanndpi Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

ndpi:fuzz_process_packet: Heap-buffer-overflow in ndpi_search_irc_tcp

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=4788353921974272 Project: ndpi Fuzzing Engine: afl Fuzz Target: fuzzprocesspacket Job Type: aflasanndpi Platform Id: linux Crash Type: Heap-buffer-overflow READ 7 Crash Address: 0x611000257ec0 Crash State...