binutils:fuzz_disassemble: Stack-buffer-overflow in bfd_put_bits

Detailed Report: https://oss-fuzz.com/testcase?key=5685956790452224 Project: binutils Fuzzing Engine: honggfuzz Fuzz Target: fuzzdisassemble Job Type: honggfuzzasanbinutils Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 1 Crash Address: 0x7fc07017e864 Crash State: bfdputbits...

Debian DLA-2233-2 : python-django regression update

It was discovered that there was a regression in the latest update to Django, the Python web development framework. The upstream fix for CVE-2020-13254 to address data leakages via malformed memcached keys could, in some situations, cause a traceback. Please see for more information. For Debian 8...

FreeBSD : GnuTLS -- flaw in TLS session ticket key construction (ef5b4f5f-a658-11ea-80d7-001cc0382b2f)

The GnuTLS project reports : It was found that GnuTLS 3.6.4 introduced a regression in the TLS protocol implementation. This caused the TLS server to not securely construct a session ticket encryption key considering the application supplied secret, allowing a MitM attacker to bypass authenticati...

imagemagick:ping_mvg_fuzzer: Use-of-uninitialized-value in ReadOneMNGImage

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=6605824029097984 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: pingmvgfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

ndpi:fuzz_process_packet: Use-of-uninitialized-value in ndpi_parse_packet_line_info

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5079402106060800 Project: ndpi Fuzzing Engine: libFuzzer Fuzz Target: fuzzprocesspacket Job Type: libfuzzermsanndpi Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

ndpi:fuzz_ndpi_reader: Heap-use-after-free in ndpi_http_check_content

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5716128734380032 Project: ndpi Fuzzing Engine: libFuzzer Fuzz Target: fuzzndpireader Job Type: libfuzzerasanndpi Platform Id: linux Crash Type: Heap-use-after-free READ 3 Crash Address: 0x62b000012b9a Cra...

file:magic_fuzzer: Heap-buffer-overflow in file_strncmp

Project: https://github.com/file/file.git Detailed Report: https://oss-fuzz.com/testcase?key=5748313340248064 Project: file Fuzzing Engine: libFuzzer Fuzz Target: magicfuzzer Job Type: libfuzzerasanfile Platform Id: linux Crash Type: Heap-buffer-overflow READ 13 Crash Address: 0x6020000005fc Cras...

pcapplusplus:FuzzTarget: Use-of-uninitialized-value in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch

Project: https://github.com/seladb/PcapPlusPlus.git Detailed Report: https://oss-fuzz.com/testcase?key=6305527331291136 Project: pcapplusplus Fuzzing Engine: libFuzzer Fuzz Target: FuzzTarget Job Type: libfuzzermsanpcapplusplus Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

dlplibs:wpsfuzzer: Crash in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch

Detailed Report: https://oss-fuzz.com/testcase?key=5351542550167552 Project: dlplibs Fuzzing Engine: honggfuzz Fuzz Target: wpsfuzzer Job Type: honggfuzzasandlplibs Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x602f0ae47960 Crash State: std::1::basicstring, std::1::allocatorch...

ndpi:fuzz_process_packet: Heap-buffer-overflow in ndpi_search_kerberos

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=4791365602115584 Project: ndpi Fuzzing Engine: afl Fuzz Target: fuzzprocesspacket Job Type: aflasanndpi Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x60e00000029d Crash State...

njs:njs_process_script_fuzzer: Heap-buffer-overflow in njs_string_prototype_split

Project: http://hg.nginx.org/njs Detailed Report: https://oss-fuzz.com/testcase?key=5647502740291584 Project: njs Fuzzing Engine: libFuzzer Fuzz Target: njsprocessscriptfuzzer Job Type: libfuzzerasannjs Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x625000048100 Crash...

cryptofuzz:cryptofuzz-libressl-noasm: Use-of-uninitialized-value in AES_encrypt

Project: https://github.com/guidovranken/cryptofuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=5704214830645248 Project: cryptofuzz Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-libressl-noasm Job Type: libfuzzermsancryptofuzz Platform Id: linux Crash Type:...

pcapplusplus:FuzzTarget: Crash in pcpp::Packet::setRawPacket

Project: https://github.com/seladb/PcapPlusPlus.git Detailed Report: https://oss-fuzz.com/testcase?key=5686789678563328 Project: pcapplusplus Fuzzing Engine: libFuzzer Fuzz Target: FuzzTarget Job Type: libfuzzerubsanpcapplusplus Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

opensc:fuzz_pkcs15_reader: Index-out-of-bounds in tcos_compute_signature

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=5769298181357568 Project: opensc Fuzzing Engine: libFuzzer Fuzz Target: fuzzpkcs15reader Job Type: libfuzzerubsanopensc Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...

CVE-2020-8167

A flaw was found in rubygem-actionview. A regression of CVE-2015-1840 causes Rails-ujs to send CSRF tokens to wrong domains. The highest threat from this vulnerability is to data integrity...

opensc:fuzz_pkcs15_reader: Stack-buffer-overflow in tcos_decipher

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=5226571123392512 Project: opensc Fuzzing Engine: libFuzzer Fuzz Target: fuzzpkcs15reader Job Type: libfuzzerasanopensc Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Address:...

pcapplusplus:FuzzTarget: Stack-buffer-overflow in pcpp::IDnsResource::decodeName

Project: https://github.com/seladb/PcapPlusPlus.git Detailed Report: https://oss-fuzz.com/testcase?key=5188876846235648 Project: pcapplusplus Fuzzing Engine: libFuzzer Fuzz Target: FuzzTarget Job Type: libfuzzerasanpcapplusplus Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 1 Crash...

pcapplusplus:FuzzTarget: Crash in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch

Project: https://github.com/seladb/PcapPlusPlus.git Detailed Report: https://oss-fuzz.com/testcase?key=4818312294039552 Project: pcapplusplus Fuzzing Engine: libFuzzer Fuzz Target: FuzzTarget Job Type: libfuzzerubsanpcapplusplus Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address:...

grok:grk_decompress_fuzzer: Heap-buffer-overflow in grk::t1_part1::T1Part1::decompress

Detailed Report: https://oss-fuzz.com/testcase?key=5700132833329152 Project: grok Fuzzing Engine: afl Fuzz Target: grkdecompressfuzzer Job Type: aflasangrok Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x61e0000c6a07 Crash State: grk::t1part1::T1Part1::decompress...

imagemagick:ping_mvg_fuzzer: Use-of-uninitialized-value in ReadOneMNGImage

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=4848610713010176 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: pingmvgfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...