Microsoft Operating Systems BlueKeep Vulnerability

Summary The Cybersecurity and Infrastructure Security Agency CISA is issuing this Activity Alert to provide information on a vulnerability, known as “BlueKeep,” that exists in the following Microsoft Windows Operating Systems OSs, including both 32- and 64-bit versions, as well as all Service Pac...

llvm/llvm-isel-fuzzer--aarch64-O2: Heap-use-after-free in CodeGenPrepare::optimizeInst

Project: https://github.com/llvm/llvm-project.git Detailed report: https://oss-fuzz.com/testcase?key=5676435362021376 Project: llvm Fuzzer: libFuzzerllvmllvm-isel-fuzzer--aarch64-O2 Fuzz target binary: llvm-isel-fuzzer--aarch64-O2 Job Type: libfuzzerasanllvm Platform Id: linux Crash Type:...

ffmpeg/ffmpeg_AV_CODEC_ID_IFF_ILBM_fuzzer: Crash in extract_header

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5080476840099840 Project: ffmpeg Fuzzer: aflffmpegAVCODECIDIFFILBMfuzzer Fuzz target binary: ffmpegAVCODECIDIFFILBMfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: UNKNOWN WRITE Crash Addres...

libarchive/libarchive_fuzzer: Crash in crc32

Project: https://github.com/libarchive/libarchive.git Detailed report: https://oss-fuzz.com/testcase?key=5668631809097728 Project: libarchive Fuzzer: libFuzzerlibarchivefuzzer Fuzz target binary: libarchivefuzzer Job Type: libfuzzerasanlibarchive Platform Id: linux Crash Type: UNKNOWN READ Crash...

leptonica/pix_rotate_shear_fuzzer: Use-of-uninitialized-value in TIFFYCbCrtoRGB

Project: https://github.com/DanBloomberg/leptonica.git Detailed report: https://oss-fuzz.com/testcase?key=5674093799538688 Project: leptonica Fuzzer: libFuzzerleptonicapixrotateshearfuzzer Fuzz target binary: pixrotateshearfuzzer Job Type: libfuzzermsanleptonica Platform Id: linux Crash Type:...

imagemagick/encoder_heic_fuzzer: Stack-buffer-overflow in std::__1::shared_ptr<heif::HeifPixelImage>::~shared_ptr

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5638446846050304 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderheicfuzzer Fuzz target binary: encoderheicfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type:...

ffmpeg/ffmpeg_AV_CODEC_ID_LIBVORBIS_fuzzer: Crash in oggvorbis_decode_init

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5764908467093504 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDLIBVORBISfuzzer Fuzz target binary: ffmpegAVCODECIDLIBVORBISfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: UNKNOWN...

ffmpeg/ffmpeg_AV_CODEC_ID_WMV3IMAGE_fuzzer: Index-out-of-bounds in vc1_decode_ac_coeff

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5648992869810176 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDWMV3IMAGEfuzzer Fuzz target binary: ffmpegAVCODECIDWMV3IMAGEfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type:...

ffmpeg/ffmpeg_AV_CODEC_ID_ATRAC9_fuzzer: Index-out-of-bounds in apply_band_extension

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5671602181636096 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDATRAC9fuzzer Fuzz target binary: ffmpegAVCODECIDATRAC9fuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type:...

imagemagick/ping_dng_fuzzer: Heap-buffer-overflow in LibRaw::get2

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5755410549571584 Project: imagemagick Fuzzer: libFuzzerimagemagickpingdngfuzzer Fuzz target binary: pingdngfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type:...

Cisco NX-OSS Command Line Interface Access

The vulnerability of the command-line interface of the Cisco NX-OSS network operating system devices relates to insufficient checking of arguments passed in commands. Exploiting this vulnerability can allow attackers to gain access to internal services...

radare2/ia_fuzz: Heap-use-after-free in cin_get

Project: https://github.com/radare/radare2.git Detailed report: https://oss-fuzz.com/testcase?key=5695184991420416 Project: radare2 Fuzzer: libFuzzerradare2iafuzz Fuzz target binary: iafuzz Job Type: libfuzzerasanradare2 Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address:...

UPDATE: OWASP Dependency-Check 5.0.0

PenTestIT RSS Feed My first post about this open source OWASP project was about an older version. About 18 hours ago, a new version was released. This post discusses the changes made to the open source software composition analysis utility in the latest release yesterday. This is the OWASP...

libpcap/fuzz_filter: Heap-double-free in opt_cleanup

Project: https://github.com/the-tcpdump-group/libpcap.git Detailed report: https://oss-fuzz.com/testcase?key=5641391398453248 Project: libpcap Fuzzer: afllibpcapfuzzfilter Fuzz target binary: fuzzfilter Job Type: aflasanlibpcap Platform Id: linux Crash Type: Heap-double-free Crash Address:...

ffmpeg/ffmpeg_DEMUXER_fuzzer: Heap-buffer-overflow in read_vblock

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5731062396747776 Project: ffmpeg Fuzzer: libFuzzerffmpegDEMUXERfuzzer Fuzz target binary: ffmpegDEMUXERfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Cra...

gdal/gdal_fuzzer: Stack-buffer-overflow in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5104504850087936 Project: gdal Fuzzer: libFuzzergdalfuzzer Fuzz target binary: gdalfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Stack-buffer-overflow READ Crash Address: 0x7f60356ed3...

njs/njs_process_script_fuzzer: Stack-use-after-return in compile_regex

Project: http://hg.nginx.org/njs Detailed report: https://oss-fuzz.com/testcase?key=5682963594870784 Project: njs Fuzzer: libFuzzernjsprocessscriptfuzzer Fuzz target binary: njsprocessscriptfuzzer Job Type: libfuzzerasannjs Platform Id: linux Crash Type: Stack-use-after-return READ 2 Crash Addres...

gdal/ogr_fuzzer: Crash in uffd_cleanup

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5644867838935040 Project: gdal Fuzzer: libFuzzergdalogrfuzzer Fuzz target binary: ogrfuzzer Job Type: libfuzzerubsangdal Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x000000006f6f Crash...

tesseract-ocr/fuzzer-api: Heap-buffer-overflow in IntegerMatcher::UpdateTablesForFeature

Detailed report: https://oss-fuzz.com/testcase?key=5723894029221888 Project: tesseract-ocr Fuzzer: libFuzzertesseract-ocrfuzzer-api Fuzz target binary: fuzzer-api Job Type: libfuzzerasantesseract-ocr Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x627000344240 Crash...

gdal/ogr_fuzzer: Stack-buffer-overflow in nc4_get_att

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5635714995191808 Project: gdal Fuzzer: libFuzzergdalogrfuzzer Fuzz target binary: ogrfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Address:...