llvm:clang-objc-fuzzer: Global-buffer-overflow in clang::Lexer::tryReadUCN

Detailed Report: https://oss-fuzz.com/testcase?key=5120846479491072 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-objc-fuzzer Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Address: 0x00000ccf823c Crash State: clang::Lexer::tryReadUCN...

Ubuntu 16.04 LTS / 18.04 LTS : Pam-python regression (USN-4552-3)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-4552-3 advisory. USN-4552-1 and USN-4552-2 fixed a vulnerability in Pam-python. The update introduced a regression which prevented PAM modules written in Python from...

grok:grk_decompress_fuzzer: Crash in grk::SparseBuffer<6u, 6u>::read_or_write

Detailed Report: https://oss-fuzz.com/testcase?key=6267600499376128 Project: grok Fuzzing Engine: afl Fuzz Target: grkdecompressfuzzer Job Type: aflasangrok Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000000003c2c Crash State: grk::SparseBuffer::readorwrite grk::SparseBuffer::rea...

USN-4552-3: Pam-python regression

USN-4552-1 and USN-4552-2 fixed a vulnerability in Pam-python. The update introduced a regression which prevented PAM modules written in Python from importing python modules from site-specific directories. We apologize for the inconvenience. Original advisory details: Malte Kraus discovered that...

USN-4552-3 pam-python regression

USN-4552-1 and USN-4552-2 fixed a vulnerability in Pam-python. The update introduced a regression which prevented PAM modules written in Python from importing python modules from site-specific directories. We apologize for the inconvenience. Original advisory details: Malte Kraus discovered that...

skia:sksl2metal: Use-of-uninitialized-value in std::__1::default_delete<SkSL::Symbol const>::operator

Project: https://skia.googlesource.com/skia.git Detailed Report: https://oss-fuzz.com/testcase?key=5139847045709824 Project: skia Fuzzing Engine: libFuzzer Fuzz Target: sksl2metal Job Type: libfuzzermsanskia Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

mupdf:pdf_fuzzer: Crash in template_affine_N_near_fb0

Project: git://git.ghostscript.com/mupdf.git Detailed Report: https://oss-fuzz.com/testcase?key=4867473373134848 Project: mupdf Fuzzing Engine: honggfuzz Fuzz Target: pdffuzzer Job Type: honggfuzzasanmupdf Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x7ff23addb19e Crash State:...

qemu:qemu-fuzz-i386-target-generic-fuzz-xhci: Index-out-of-bounds in xhci_runtime_write

Detailed Report: https://oss-fuzz.com/testcase?key=5747786781556736 Project: qemu Fuzzing Engine: libFuzzer Fuzz Target: qemu-fuzz-i386-target-generic-fuzz-xhci Job Type: libfuzzerubsanqemu Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State: xhciruntimewrite...

qemu:qemu-fuzz-i386-target-generic-fuzz-pc-q35: Heap-buffer-overflow in lduw_he_p

Detailed Report: https://oss-fuzz.com/testcase?key=5734439902248960 Project: qemu Fuzzing Engine: libFuzzer Fuzz Target: qemu-fuzz-i386-target-generic-fuzz-pc-q35 Job Type: libfuzzerasanqemu Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address: 0x6030000e1f82 Crash State:...

binutils:fuzz_bfd: Heap-buffer-overflow in _bfd_vms_save_sized_string

Detailed Report: https://oss-fuzz.com/testcase?key=5191938237792256 Project: binutils Fuzzing Engine: honggfuzz Fuzz Target: fuzzbfd Job Type: honggfuzzasanbinutils Platform Id: linux Crash Type: Heap-buffer-overflow READ 12 Crash Address: 0x615000000280 Crash State: bfdvmssavesizedstring...

libyal:libfshfs_volume_fuzzer: Use-of-uninitialized-value in libfshfs_catalog_btree_key_read_data

Detailed Report: https://oss-fuzz.com/testcase?key=6322965261844480 Project: libyal Fuzzing Engine: libFuzzer Fuzz Target: libfshfsvolumefuzzer Job Type: libfuzzermsanlibyal Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: libfshfscatalogbtreekeyreaddata...

fluent-bit:flb-it-fuzz-utils_fuzzer_OSSFUZZ: Heap-buffer-overflow in flb_utils_time_to_seconds

Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=5087208312406016 Project: fluent-bit Fuzzing Engine: libFuzzer Fuzz Target: flb-it-fuzz-utilsfuzzerOSSFUZZ Job Type: libfuzzerasanfluent-bit Platform Id: linux Crash Type: Heap-buffer-overflow REA...

grok:grk_decompress_fuzzer: Heap-buffer-overflow in grk::Subband::Subband

Detailed Report: https://oss-fuzz.com/testcase?key=5719298213150720 Project: grok Fuzzing Engine: libFuzzer Fuzz Target: grkdecompressfuzzer Job Type: libfuzzerasangrok Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6140000001d0 Crash State: grk::Subband::Subband...

skia:sksl2metal: Heap-use-after-free in std::__1::default_delete<SkSL::Symbol const>::operator

Project: https://skia.googlesource.com/skia.git Detailed Report: https://oss-fuzz.com/testcase?key=5725747140100096 Project: skia Fuzzing Engine: libFuzzer Fuzz Target: sksl2metal Job Type: libfuzzerasanskia Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x7fec30211960...

libyal:libfshfs_volume_fuzzer: Heap-buffer-overflow in libfshfs_catalog_btree_file_get_directory_entry_from_leaf_node_by_thread_record

Detailed Report: https://oss-fuzz.com/testcase?key=6246736336781312 Project: libyal Fuzzing Engine: honggfuzz Fuzz Target: libfshfsvolumefuzzer Job Type: honggfuzzasanlibyal Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x61c000000774 Crash State:...

Regression in JWT Signature Validation

Overview Affected versions of this package are vulnerable to Regression in JWT Signature Validation. It improperly validates the JWT token signature when using the jwtvalidator.verify method. Improper validation of the JWT token signature can allow an attacker to bypass authentication and...

CVE-2020-15240 Regression in JWT Signature Validation

omniauth-auth0 rubygems versions = 2.3.0 and 2.4.1 improperly validate the JWT token signature when using the jwtvalidator.verify method. Improper validation of the JWT token signature can allow an attacker to bypass authentication and authorization. You are affected by this vulnerability if all ...

libyal:libfshfs_volume_fuzzer: Heap-buffer-overflow in libfshfs_catalog_btree_file_get_thread_record_from_leaf_node

Detailed Report: https://oss-fuzz.com/testcase?key=6247200516210688 Project: libyal Fuzzing Engine: afl Fuzz Target: libfshfsvolumefuzzer Job Type: aflasanlibyal Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x61c000000774 Crash State:...

Important: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

Important: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 8.1 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...