samba:fuzz_nmblib_parse_packet: Heap-buffer-overflow in parse_nmb_name

Project: https://gitlab.com/samba-team/samba.git Detailed Report: https://oss-fuzz.com/testcase?key=5644827043823616 Project: samba Fuzzing Engine: libFuzzer Fuzz Target: fuzznmblibparsepacket Job Type: libfuzzerasansamba Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

samba:fuzz_nmblib_parse_packet: Heap-buffer-overflow in parse_nmb_name

Project: https://gitlab.com/samba-team/samba.git Detailed Report: https://oss-fuzz.com/testcase?key=5108333216530432 Project: samba Fuzzing Engine: libFuzzer Fuzz Target: fuzznmblibparsepacket Job Type: libfuzzerasansamba Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

libreoffice:ppmfuzzer: Crash in PBMReader::ImplReadBody

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=5656169784016896 Project: libreoffice Fuzzing Engine: libFuzzer Fuzz Target: ppmfuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

opensc:fuzz_pkcs15_reader: Heap-buffer-overflow in bebytes2ulong

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=5725365263925248 Project: opensc Fuzzing Engine: libFuzzer Fuzz Target: fuzzpkcs15reader Job Type: libfuzzerasanopensc Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

arrow:arrow-ipc-stream-fuzz: Crash in arrow::ipc::internal::FieldFromFlatbuffer

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=5712457209479168 Project: arrow Fuzzing Engine: afl Fuzz Target: arrow-ipc-stream-fuzz Job Type: aflasanarrow Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x61e100356534 Crash State:...

Stable Channel Update for Desktop

The stable channel has been updated to 79.0.3945.130 for Windows, Mac, and Linux, which will roll out over the coming days/weeks. A list of all changes is available in the log. Interested in switching release channels? Find out how. If you find a new issue, please let us know by filing a bug. The...

samba:fuzz_ndr_drsuapi_TYPE_OUT: Heap-buffer-overflow in lzxpress_decompress

Project: https://gitlab.com/samba-team/samba.git Detailed Report: https://oss-fuzz.com/testcase?key=5724999789051904 Project: samba Fuzzing Engine: libFuzzer Fuzz Target: fuzzndrdrsuapiTYPEOUT Job Type: libfuzzerasansamba Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2020:0053-1 Rating: important References: 1160337 Cross-References: CVE-2019-5844 CVE-2019-5845 CVE-2019-5846 CVE-2020-6377 Affected Products: openSUSE Backports SLE-15-SP1 An update that fixes four vulnerabilitie...

unicorn:fuzz_emu_arm64_arm: Crash in tcg_constant_folding_aarch64

Project: https://github.com/unicorn-engine/unicorn.git Detailed Report: https://oss-fuzz.com/testcase?key=5728787291963392 Project: unicorn Fuzzing Engine: afl Fuzz Target: fuzzemuarm64arm Job Type: aflasanunicorn Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x115561997039 Crash...

openSUSE Security Update : chromium (openSUSE-2020-6)

This update for chromium version 79.0.3945.117 fixes the following issues : - CVE-2020-6377: Fixed a use-after-free in audio - Various fixes from internal audits, fuzzing and other initiatives C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted...

OPENSUSE-SU-2020:0006-1 Security update for chromium

This update for chromium version 79.0.3945.117 fixes the following issues: - CVE-2020-6377: Fixed a use-after-free in audio - Various fixes from internal audits, fuzzing and other initiatives...

xerces-c:parse_target: Index-out-of-bounds in xercesc_3_2::XMLReader::getNextCharIfNot

Detailed Report: https://oss-fuzz.com/testcase?key=5168997247221760 Project: xerces-c Fuzzing Engine: libFuzzer Fuzz Target: parsetarget Job Type: libfuzzerubsanxerces-c Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State: xercesc32::XMLReader::getNextCharIfNot...

imagemagick:encoder_psd_fuzzer: Use-of-uninitialized-value in RoundToUnity

Detailed Report: https://oss-fuzz.com/testcase?key=5664114030673920 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderpsdfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: RoundToUnity CompositeImage...

keystone:fuzz_asm_sparc64be: Heap-buffer-overflow in ELFSparcAsmBackend::applyFixup

Detailed Report: https://oss-fuzz.com/testcase?key=5081419969986560 Project: keystone Fuzzing Engine: afl Fuzz Target: fuzzasmsparc64be Job Type: aflasankeystone Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6070000000d1 Crash State: ELFSparcAsmBackend::applyFixup...

imagemagick:encoder_heic_fuzzer: Crash in slice_segment_header::operator=

Detailed Report: https://oss-fuzz.com/testcase?key=5689229497860096 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzerasani386imagemagick Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xbebebebe Crash State: slicesegmentheader::operator=...

curl: Heap Buffer Overflow (READ of size 1) in ourWriteOut

Summary: Whilst fuzzing the curl command line tool built from commit 779b415 with AFL, ASAN and libdislocator, a heap buffer overflow was triggered when a crafted curl configuration file was loaded. Steps To Reproduce: echo "LXdAAAou" | base64 -d test0070.conf ./curl -q -K test0070.conf...

php:php-fuzz-mbstring: Use-of-uninitialized-value in distance_multiply

Detailed Report: https://oss-fuzz.com/testcase?key=5711688620048384 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-mbstring Job Type: libfuzzermsanphp Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: distancemultiply mmlrangemultiply nodecharlen1...

samba:fuzz_ndr_nbt_TYPE_STRUCT: Heap-buffer-overflow in ndr_push_bytes

Detailed Report: https://oss-fuzz.com/testcase?key=5690460391866368 Project: samba Fuzzing Engine: libFuzzer Fuzz Target: fuzzndrnbtTYPESTRUCT Job Type: libfuzzerasansamba Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address: 0x608000000200 Crash State: ndrpushbytes...

Automatic API Attack Tool - Customizable API Attack Tool Takes An API Specification As An Input, Generates And Runs Attacks That Are Based On It As An Output

Imperva's customizable API attack tool takes an API specification as an input, and generates and runs attacks that are based on it as an output. The tool is able to parse an API specification and create fuzzing attack scenarios based on what is defined in the API specification. Each endpoint is...

Pbtk - A Toolset For Reverse Engineering And Fuzzing Protobuf-based Apps

Protobuf is a serialization format developed by Google and used in an increasing number of Android, web, desktop and more applications. It consists of a language for declaring data structures , which is then compiled to code or another kind of structure depending on the target implementation. pbt...