Huawei EulerOS: Security Advisory for subversion (EulerOS-SA-2022-2172)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

wolfssl:cryptofuzz-sp-math: Heap-buffer-overflow in sp_ecc_secret_gen_256

Project: https://github.com/wolfssl/wolfssl.git Detailed Report: https://oss-fuzz.com/testcase?key=6008055086579712 Project: wolfssl Fuzzing Engine: honggfuzz Fuzz Target: cryptofuzz-sp-math Job Type: honggfuzzasanwolfssl Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address:...

wolfssl:cryptofuzz-disable-fastmath: Heap-buffer-overflow in sp_div

Project: https://github.com/wolfssl/wolfssl.git Detailed Report: https://oss-fuzz.com/testcase?key=5175334403702784 Project: wolfssl Fuzzing Engine: honggfuzz Fuzz Target: cryptofuzz-disable-fastmath Job Type: honggfuzzasanwolfssl Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash...

SUSE-SU-2022:2526-1 Security update for rubygem-rack

This update for rubygem-rack fixes the following issues: - CVE-2022-30122: Fixed crafted multipart POST request may cause a DoS bsc1200748 - CVE-2022-30123: Fixed crafted requests can cause shell escape sequences bsc1200750 The following non-security bug was fixed: - Fixed a regression in...

libucl:ucl_add_string_fuzzer: Heap-buffer-overflow in ucl_object_dtor_unref_single

Detailed Report: https://oss-fuzz.com/testcase?key=6178711182901248 Project: libucl Fuzzing Engine: libFuzzer Fuzz Target: ucladdstringfuzzer Job Type: libfuzzerasanlibucl Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x6050000008b0 Crash State: uclobjectdtorunrefsingl...

imagemagick:ping_bayer_fuzzer: Heap-buffer-overflow in ReadBlob

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5523942512656384 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: pingbayerfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type: Heap-buffer-overflow READ 6 Cra...

javaparser:parseFuzzer: Uncaught exception in com.github.javaparser.GeneratedJavaParser.Expression

Project: https://github.com/javaparser/javaparser.git Detailed Report: https://oss-fuzz.com/testcase?key=5389219706568704 Project: javaparser Fuzzing Engine: libFuzzer Fuzz Target: parseFuzzer Job Type: libfuzzerasanjavaparser Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash...

gdal:gdal_translate_fuzzer: Crash in GDALRasterBand::GetHistogram

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=5801425921245184 Project: gdal Fuzzing Engine: libFuzzer Fuzz Target: gdaltranslatefuzzer Job Type: libfuzzerubsangdal Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xfffffffc079434e0 Crash...

qemu:qemu-fuzz-i386-target-generic-fuzz-pc-i440fx: Heap-use-after-free in op_pci_write

Detailed Report: https://oss-fuzz.com/testcase?key=6490790737608704 Project: qemu Fuzzing Engine: libFuzzer Fuzz Target: qemu-fuzz-i386-target-generic-fuzz-pc-i440fx Job Type: libfuzzerasanqemu Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x7fa0a63978c8 Crash State:...

javaparser:parseFuzzer: Uncaught exception in com.github.javaparser.GeneratedJavaParser.Expression

Project: https://github.com/javaparser/javaparser.git Detailed Report: https://oss-fuzz.com/testcase?key=4651349693825024 Project: javaparser Fuzzing Engine: libFuzzer Fuzz Target: parseFuzzer Job Type: libfuzzerasanjavaparser Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash...

mruby:mruby_fuzzer: Heap-buffer-overflow in mrb_bint_to_s

Project: https://github.com/mruby/mruby.git Detailed Report: https://oss-fuzz.com/testcase?key=6327234775875584 Project: mruby Fuzzing Engine: libFuzzer Fuzz Target: mrubyfuzzer Job Type: libfuzzerasanmruby Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x602000007b33...

lz4:round_trip_frame_uncompressed_fuzzer: Use-of-uninitialized-value in LZ4_compress_fast_extState_fastReset

Project: https://github.com/lz4/lz4.git Detailed Report: https://oss-fuzz.com/testcase?key=5810591549227008 Project: lz4 Fuzzing Engine: libFuzzer Fuzz Target: roundtripframeuncompressedfuzzer Job Type: libfuzzermsanlz4 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Cras...

javaparser:parseFuzzer: Uncaught exception in com.github.javaparser.ast.expr.Name.accept

Project: https://github.com/javaparser/javaparser.git Detailed Report: https://oss-fuzz.com/testcase?key=5171561165881344 Project: javaparser Fuzzing Engine: libFuzzer Fuzz Target: parseFuzzer Job Type: libfuzzerasanjavaparser Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash...

grok:grk_decompress_fuzzer: Use-of-uninitialized-value with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6400484251926528 Project: grok Fuzzing Engine: libFuzzer Fuzz Target: grkdecompressfuzzer Job Type: libfuzzermsangrok Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: NULL Sanitizer: memory MSAN Recommended...

binutils:fuzz_nm: Heap-double-free in fuzz_display_file2

Detailed Report: https://oss-fuzz.com/testcase?key=5188764523167744 Project: binutils Fuzzing Engine: libFuzzer Fuzz Target: fuzznm Job Type: libfuzzerasanbinutils Platform Id: linux Crash Type: Heap-double-free Crash Address: 0x621000010500 Crash State: fuzzdisplayfile2 adanm.h listmatchingforma...

opensc:fuzz_pkcs11: Heap-buffer-overflow in sc_pkcs15_allocate_object_content

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=6478989509656576 Project: opensc Fuzzing Engine: afl Fuzz Target: fuzzpkcs11 Job Type: aflasanopensc Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x603000000112 Crash Stat...

lz4:round_trip_frame_uncompressed_fuzzer: Use-of-uninitialized-value in LZ4HC_compress_generic_noDictCtx

Project: https://github.com/lz4/lz4.git Detailed Report: https://oss-fuzz.com/testcase?key=6235198659887104 Project: lz4 Fuzzing Engine: libFuzzer Fuzz Target: roundtripframeuncompressedfuzzer Job Type: libfuzzermsanlz4 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Cras...

duckdb:parse_fuzz_test: Bad-cast to duckdb::BoundParameterExpression from duckdb::BoundCastExpression in duckdb::Planner::CreatePlan

Project: https://github.com/duckdb/duckdb.git Detailed Report: https://oss-fuzz.com/testcase?key=4800152795217920 Project: duckdb Fuzzing Engine: libFuzzer Fuzz Target: parsefuzztest Job Type: libfuzzerubsanduckdb Platform Id: linux Crash Type: Bad-cast Crash Address: 0x000004d6bfa0 Crash State:...

mruby:mruby_fuzzer: Crash in udiv

Project: https://github.com/mruby/mruby.git Detailed Report: https://oss-fuzz.com/testcase?key=4699215460171776 Project: mruby Fuzzing Engine: libFuzzer Fuzz Target: mrubyfuzzer Job Type: libfuzzerubsanmruby Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x0000011dbff8 Crash State:...

Ubuntu 18.04 LTS : PHP regression (USN-5479-3)

The remote Ubuntu 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5479-3 advisory. USN-5479-1 fixed vulnerabilities in PHP. Unfortunately that update for CVE-2022-31625 was incomplete for Ubuntu 18.04 LTS. This update fixes the problem. We...