OSV-2020-18 Heap-buffer-overflow in ndpi_search_openvpn

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22244 Crash type: Heap-buffer-overflow READ 8 Crash state: ndpisearchopenvpn checkndpiudpflowfunc ndpidetectionprocesspacket...

OSV-2020-10 Heap-use-after-free in ndpi_workflow_process_packet

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20164 Crash type: Heap-use-after-free READ 2 Crash state: ndpiworkflowprocesspacket fuzzndpireader.c noderelease...

OSV-2020-8 Heap-buffer-overflow in findNextBorderPixel

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23433 Crash type: Heap-buffer-overflow READ 4 Crash state: findNextBorderPixel pixGetHoleBorder pixGetCCBorders...

OSV-2020-1 Use-of-uninitialized-value in numaCrossingsByThreshold

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22764 Crash type: Use-of-uninitialized-value Crash state: numaCrossingsByThreshold numaSelectCrossingThreshold pixExtractBarcodeCrossings...

OSV-2020-3 UNKNOWN WRITE in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22962 Crash type: UNKNOWN WRITE Crash state: std::1::basicstring, std::1::allocator, std::1::allocatorch pcpp::IDnsResource::IDnsResource...

unicorn:fuzz_emu_arm64_arm: Use-of-uninitialized-value in float64_to_float32_aarch64

Project: https://github.com/unicorn-engine/unicorn.git Detailed Report: https://oss-fuzz.com/testcase?key=5113167238922240 Project: unicorn Fuzzing Engine: libFuzzer Fuzz Target: fuzzemuarm64arm Job Type: libfuzzermsanunicorn Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address...

usrsctp:fuzzer_connect: Heap-buffer-overflow in sctp_handle_packet_dropped

Project: https://github.com/weinrank/usrsctp.git https://github.com/sctplab/usrsctp.git Detailed Report: https://oss-fuzz.com/testcase?key=5387560242380800 Project: usrsctp Fuzzing Engine: afl Fuzz Target: fuzzerconnect Job Type: aflasanusrsctp Platform Id: linux Crash Type: Heap-buffer-overflow...

leptonica:pix_rotate_shear_fuzzer: Heap-buffer-overflow in pixReadFromTiffStream

Project: https://github.com/DanBloomberg/leptonica.git Detailed Report: https://oss-fuzz.com/testcase?key=6297621508653056 Project: leptonica Fuzzing Engine: honggfuzz Fuzz Target: pixrotateshearfuzzer Job Type: honggfuzzasanleptonica Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Cra...

haproxy:fuzz_cfg_parser: Heap-buffer-overflow in readcfgfile

Project: https://github.com/haproxy/haproxy.git Detailed Report: https://oss-fuzz.com/testcase?key=5702089866215424 Project: haproxy Fuzzing Engine: libFuzzer Fuzz Target: fuzzcfgparser Job Type: libfuzzerasanhaproxy Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address:...

CVE-2020-4062

In Conjur OSS Helm Chart before 2.0.0, a recently identified critical vulnerability resulted in the installation of the Conjur Postgres database with an open port. This allows an attacker to gain full read & write access to the Conjur Postgres database, including escalating the attacker's...

CVE-2020-4062

In Conjur OSS Helm Chart before 2.0.0, a recently identified critical vulnerability resulted in the installation of the Conjur Postgres database with an open port. This allows an attacker to gain full read & write access to the Conjur Postgres database, including escalating the attacker's...

Design/Logic Flaw

In Conjur OSS Helm Chart before 2.0.0, a recently identified critical vulnerability resulted in the installation of the Conjur Postgres database with an open port. This allows an attacker to gain full read & write access to the Conjur Postgres database, including escalating the attacker's...

CVE-2020-4062 Improper Access Control in Conjur OSS Helm Chart

In Conjur OSS Helm Chart before 2.0.0, a recently identified critical vulnerability resulted in the installation of the Conjur Postgres database with an open port. This allows an attacker to gain full read & write access to the Conjur Postgres database, including escalating the attacker's...

CVE-2020-4062

In Conjur OSS Helm Chart before 2.0.0, a critical issue leads to installing Conjur’s Postgres database with an open port. An attacker who knows the Postgres IP and port and has access to the Kubernetes cluster can gain full read/write access to the database, escalate privileges, and write policie...

ghostscript:gstoraster_fuzzer: Use-of-uninitialized-value in load_truetype_glyph

Detailed Report: https://oss-fuzz.com/testcase?key=6276535945527296 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzermsanghostscript Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: loadtruetypeglyph TTLoadGlyph...

imagemagick:ping_tiff_fuzzer: Stack-buffer-overflow in _TIFFVGetField

Detailed Report: https://oss-fuzz.com/testcase?key=5456669504176128 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: pingtifffuzzer Job Type: libfuzzerasani386imagemagick Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 4 Crash Address: 0xffa45c90 Crash State: TIFFVGetField...

json-c:tokener_parse_ex_fuzzer: Global-buffer-overflow in json_tokener_parse_ex

Project: https://github.com/json-c/json-c.git Detailed Report: https://oss-fuzz.com/testcase?key=6193200317595648 Project: json-c Fuzzing Engine: libFuzzer Fuzz Target: tokenerparseexfuzzer Job Type: libfuzzerasani386json-c Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Addres...

cras:rclient_message: Heap-buffer-overflow in cras_channel_remix_conv_create

Detailed Report: https://oss-fuzz.com/testcase?key=5362336956416000 Project: cras Fuzzing Engine: libFuzzer Fuzz Target: rclientmessage Job Type: libfuzzerasancras Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x603000000598 Crash State: craschannelremixconvcreate...

imagemagick:crop_fuzzer: Index-out-of-bounds in LibRaw::ahd_interpolate_r_and_b_in_rgb_and_convert_to_cielab

Detailed Report: https://oss-fuzz.com/testcase?key=5389744954671104 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: cropfuzzer Job Type: libfuzzerubsanimagemagick Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...

pcapplusplus:FuzzTarget: Crash in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch

Project: https://github.com/seladb/PcapPlusPlus.git Detailed Report: https://oss-fuzz.com/testcase?key=4722039406723072 Project: pcapplusplus Fuzzing Engine: libFuzzer Fuzz Target: FuzzTarget Job Type: libfuzzerubsanpcapplusplus Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address:...