binutils:fuzz_disassemble: Stack-buffer-overflow in buffer_read_memory

Detailed Report: https://oss-fuzz.com/testcase?key=5715112182939648 Project: binutils Fuzzing Engine: libFuzzer Fuzz Target: fuzzdisassemble Job Type: libfuzzerasanbinutils Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 16 Crash Address: 0x7ffcabe23898 Crash State: bufferreadmemory...

ffmpeg:ffmpeg_AV_CODEC_ID_WMALOSSLESS_fuzzer: Index-out-of-bounds in revert_acfilter

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5762574335606784 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDWMALOSSLESSfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: Index-out-of-bounds Crash Address:...

gdal:ogr_fuzzer: Heap-use-after-free in VSIFSeekL

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=5631257522470912 Project: gdal Fuzzing Engine: libFuzzer Fuzz Target: ogrfuzzer Job Type: libfuzzerasani386gdal Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0xf4e04dd0 Crash...

openthread:ncp-uart-received-fuzzer: Stack-buffer-overflow in ot::MeshCoP::Commissioner::GeneratePskc

Project: https://github.com/openthread/openthread.git Detailed Report: https://oss-fuzz.com/testcase?key=5163475521503232 Project: openthread Fuzzing Engine: libFuzzer Fuzz Target: ncp-uart-received-fuzzer Job Type: libfuzzerasanopenthread Platform Id: linux Crash Type: Stack-buffer-overflow WRIT...

dlplibs:wdbfuzzer: Crash in QuattroParserInternal::State::getColor

Detailed Report: https://oss-fuzz.com/testcase?key=5735536765698048 Project: dlplibs Fuzzing Engine: libFuzzer Fuzz Target: wdbfuzzer Job Type: libfuzzerasandlplibs Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000004c748bc Crash State: QuattroParserInternal::State::getColor...

openthread:radio-receive-done-fuzzer: Stack-buffer-overflow in ot::Message::Write

Project: https://github.com/openthread/openthread.git Detailed Report: https://oss-fuzz.com/testcase?key=5110937602490368 Project: openthread Fuzzing Engine: afl Fuzz Target: radio-receive-done-fuzzer Job Type: aflasanopenthread Platform Id: linux Crash Type: Stack-buffer-overflow READ 11 Crash...

ffmpeg:ffmpeg_AV_CODEC_ID_AGM_fuzzer: Crash in copy_block8

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5644115983466496 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDAGMfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x628ffffff640...

Ubuntu 18.04 LTS : Thunderbird regression (USN-4202-2)

The remote Ubuntu 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4202-2 advisory. USN-4202-1 fixed vulnerabilities in Thunderbird. After upgrading, Thunderbird created a new profile for some users. This update fixes the problem. We apologize fo...

Security update for permissions (moderate)

openSUSE Security Update: Security update for permissions Announcement ID: openSUSE-SU-2019:2672-1 Rating: moderate References: 1093414 1150734 1157198 Cross-References: CVE-2019-3688 CVE-2019-3690 Affected Products: openSUSE Leap 15.1 An update that solves two vulnerabilities and has one errata ...

USN-4202-2 thunderbird regression

USN-4202-1 fixed vulnerabilities in Thunderbird. After upgrading, Thunderbird created a new profile for some users. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that a specially crafted S/MIME message with an inner encryption laye...

matio:matio_fuzzer: Segv on unknown address in H5O_chunk_deserialize

Detailed Report: https://oss-fuzz.com/testcase?key=5124816558620672 Project: matio Fuzzing Engine: libFuzzer Fuzz Target: matiofuzzer Job Type: libfuzzerasanmatio Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: H5Ochunkdeserialize H5Ocachechkload H5Cprotect...

ffmpeg:ffmpeg_BSF_MP3_HEADER_DECOMPRESS_fuzzer: Global-buffer-overflow in mp3_header_decompress

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5651002950942720 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegBSFMP3HEADERDECOMPRESSfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Global-buffer-overflow READ 2 Crash...

ffmpeg:ffmpeg_BSF_HEVC_MP4TOANNEXB_fuzzer: Heap-buffer-overflow in hevc_mp4toannexb_filter

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5169193398042624 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegBSFHEVCMP4TOANNEXBfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Addres...

llvm:clang-fuzzer: Segv on unknown address in llvm::APInt::udiv

Detailed Report: https://oss-fuzz.com/testcase?key=5711340262129664 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-fuzzer Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: llvm::APInt::udiv llvm::APInt::sdiv...

ffmpeg:ffmpeg_AV_CODEC_ID_VC1IMAGE_fuzzer: Heap-buffer-overflow in sprite_h_c

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5389219325542400 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDVC1IMAGEfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

SUSE SLED12 / SLES12 Security Update : permissions (SUSE-SU-2019:3183-1)

This update for permissions fixes the following issues : Security issues fixed : CVE-2019-3688: Changed wrong ownership in /usr/sbin/pinger to root:squid which could have allowed a squid user to gain persistence by changing the binary bsc1093414. CVE-2019-3690: Fixed a privilege escalation throug...

SUSE SLES15 Security Update : dpdk (SUSE-SU-2019:3179-1)

This update of dpdk to version 18.11.3 provides the following fixes : dpdk was updated to 18.11.3 fate327817, bsc1145713, jscECO-274, fate325916, fate325951 fate326025, fate326992, bsc1134968, jscSLE-4715 Security issue fixed : CVE-2019-14818: Fixed a memory leak vulnerability caused by a maliciu...

llvm:clang-fuzzer: Segv on unknown address in clang::CXXRecordDecl::data

Detailed Report: https://oss-fuzz.com/testcase?key=5673340807413760 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-fuzzer Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: clang::CXXRecordDecl::data getDefaultInitValue...

USN-4182-4 intel-microcode regression

USN-4182-2 provided updated Intel Processor Microcode. A regression was discovered that caused some Skylake processors to hang after a warm reboot. This update reverts the microcode for that specific processor family. We apologize for the inconvenience. Original advisory details: Stephan van...

USN-4182-4: Intel Microcode regression

USN-4182-2 provided updated Intel Processor Microcode. A regression was discovered that caused some Skylake processors to hang after a warm reboot. This update reverts the microcode for that specific processor family. We apologize for the inconvenience. Original advisory details: Stephan van...