curl/curl_fuzzer_http: NULL

Project: https://github.com/curl/curl.git Detailed report: https://oss-fuzz.com/testcase?key=5101396595572736 Project: curl Fuzzer: libFuzzercurlfuzzerhttp Fuzz target binary: curlfuzzerhttp Job Type: libfuzzerubsancurl Platform Id: linux Crash Type: Null-dereference READ Crash Address:...

DEBIAN-CVE-2017-5465

An out-of-bounds read while processing SVG content in "ConvolvePixel". This results in a crash and also allows for otherwise inaccessible memory being copied into SVG graphic content, which could then displayed. This vulnerability affects Thunderbird 52.1, Firefox ESR 45.9, Firefox ESR 52.1, and...

UBUNTU-CVE-2018-11375

The instlds function in radare2 2.5.0 allows remote attackers to cause a denial of service heap-based out-of-bounds read and application crash via a crafted binary file...

UBUNTU-CVE-2018-1301

A specially crafted request could have crashed the Apache HTTP Server prior to version 2.4.30, due to an out of bound access after a size limit is reached by reading the HTTP header. This vulnerability is considered very hard if not impossible to trigger in non-debug mode both log and build level...

UBUNTU-CVE-2018-1000005

libcurl 7.49.0 to and including 7.57.0 contains an out bounds read in code handling HTTP/2 trailers. It was reported https://github.com/curl/curl/pull/2231 that reading an HTTP/2 trailer could mess up future trailers since the stored size was one byte less than required. The problem is that the...

openSUSE Security Update : openssl (openSUSE-2017-1324)

This update for openssl fixes the following issues : Security issues fixed : - CVE-2017-3735: openssl1,openssl: Malformed X.509 IPAdressFamily could cause OOB read bsc1056058 - CVE-2017-3736: openssl: bnsqrx8xinternal carry bug on x8664 bsc1066242 - Out of bounds read+crash in DESfcrypt bsc106536...

ALPINE-CVE-2017-1000257

An IMAP FETCH response line indicates the size of the returned data, in number of bytes. When that response says the data is zero bytes, libcurl would pass on that non-existing data with a pointer and the size zero to the deliver-data function. libcurl's deliver-data function treats zero as a mag...

libarchive Denial of Service Vulnerability (CNVD-2017-27308)

libarchive is a multi-format archive and compression library. A denial of service vulnerability exists in the archivereadsupportformatlha.c file in libarchive version 3.3.2. An attacker can exploit this vulnerability to cause a denial of service out-of-bounds read and crash...

UBUNTU-CVE-2017-12954

The gig::Region::GetSampleFromWavePool function in gig.cpp in libgig 4.0.0 allows remote attackers to cause a denial of service invalid memory read and application crash via a crafted gig file...

minidjvu denial of service vulnerability (CNVD-2017-25770)

minidjvu is a command-line utility for encoding and decoding single-page black-and-white DjVu files with the ability to compress multiple pages, taking advantage of similarities between pages. A denial of service vulnerability exists in the mdjvubitmapgetboundingbox function in base/4bitmap.c in...

DEBIAN-CVE-2017-11663

The WMSetupMidiEvent function in internalmidi.c:2315 in WildMIDI 0.4.2 can cause a denial of service invalid memory read and application crash via a crafted mid file...

UBUNTU-CVE-2017-11662

The WMParseNewMidi function in fmidi.c in WildMIDI 0.4.2 can cause a denial of service invalid memory read and application crash via a crafted mid file...

DEBIAN-CVE-2017-11358

The readsamples function in hcom.c in Sound eXchange SoX 14.4.2 allows remote attackers to cause a denial of service invalid memory read and application crash via a crafted hcom file...

DEBIAN-CVE-2017-9412

The unpackreadsamples function in frontend/getaudio.c in LAME 3.99.5 allows remote attackers to cause a denial of service invalid memory read and application crash via a crafted wav file...

ImageMagick Denial of Service Vulnerability (CNVD-2017-18362)

ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick Studio. The software can read, convert and write pictures in a variety of formats. A denial of service vulnerability exists in the 'WriteUILImage' function in the coders/uil.c file in ImageMagick versi...

CVE-2017-10995

The mnggetlong function in coders/png.c in ImageMagick 7.0.6-0 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted MNG image...

UBUNTU-CVE-2017-9218

The mp4ffreadstsd function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 FAAD2 2.7 allows remote attackers to cause a denial of service invalid memory read and application crash via a crafted mp4 file...

DEBIAN-CVE-2017-9218

The mp4ffreadstsd function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 FAAD2 2.7 allows remote attackers to cause a denial of service invalid memory read and application crash via a crafted mp4 file...

PT-2017-7546 · Lame +2 · Lame +2

Name of the Vulnerable Software and Affected Versions: LAME version 3.99.5 Description: The issue allows remote attackers to cause a denial of service, resulting in an invalid read and application crash, by exploiting a crafted audio file with a negative sample rate. This is due to a problem in t...

UBUNTU-CVE-2017-8313

Heap out-of-bound read in ParseJSS in VideoLAN VLC before 2.2.5 due to missing check of string termination allows attackers to read data beyond allocated memory and potentially crash the process via a crafted subtitles file...