USN-4182-3: Intel Microcode regression

USN-4182-1 provided updated Intel Processor Microcode. A regression was discovered that caused some Skylake processors to hang after a warm reboot. This update reverts the microcode for that specific processor family. We apologize for the inconvenience. Original advisory details: Stephan van...

Ubuntu 16.04 LTS / 18.04 LTS : Intel Microcode regression (USN-4182-3)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-4182-3 advisory. USN-4182-1 provided updated Intel Processor Microcode. A regression was discovered that caused some Skylake processors to hang after a warm reboot. Th...

opensc:fuzz_pkcs15_reader: Heap-buffer-overflow in coolkey_get_attribute_bytes

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=5655953538285568 Project: opensc Fuzzing Engine: honggfuzz Fuzz Target: fuzzpkcs15reader Job Type: honggfuzzasanopensc Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address:...

matio:matio_fuzzer: Crash in H5O_sdspace_shared_decode

Detailed Report: https://oss-fuzz.com/testcase?key=5675535468593152 Project: matio Fuzzing Engine: afl Fuzz Target: matiofuzzer Job Type: aflasanmatio Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x6140000126c8 Crash State: H5Osdspaceshareddecode H5Oattrshareddecode H5Omsgiteraterea...

Fedora 31 : 1:grub2 (2019-e99ebf23c8)

Fix a grub hidden-menu regression and a bug in blscfg variable expansion ---- Security fix for CVE-2019-14865 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it...

Debian DLA-2017-2 : asterisk regression update

The backport of the CVE-2019-13161 fix caused a regression and has been reverted. For Debian 8 'Jessie', this problem has been fixed in version 1:11.13.1dfsg-2+deb8u8. We recommend that you upgrade your asterisk packages. NOTE: Tenable Network Security has extracted the preceding description bloc...

libreoffice:cgmfuzzer: Heap-buffer-overflow in CGM::ImplDoClass7

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=5129086141988864 Project: libreoffice Fuzzing Engine: libFuzzer Fuzz Target: cgmfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash...

llvm:clang-fuzzer: Segv on unknown address in clang::SourceManager::getFileIDLoaded

Detailed Report: https://oss-fuzz.com/testcase?key=5697366384705536 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-fuzzer Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: clang::SourceManager::getFileIDLoaded...

DLA-2017-2 asterisk - regression update

Bulletin has no description...

opensc:fuzz_pkcs15_reader: Heap-buffer-overflow in coolkey_get_attribute_bytes_alloc

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=5704639777603584 Project: opensc Fuzzing Engine: libFuzzer Fuzz Target: fuzzpkcs15reader Job Type: libfuzzerasanopensc Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address:...

DLA-1698-2 file - regression update

Bulletin has no description...

llvm:clang-fuzzer: Segv on unknown address in clang::Sema::ActOnTag

Detailed Report: https://oss-fuzz.com/testcase?key=5715582179868672 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-fuzzer Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: clang::Sema::ActOnTag...

llvm:clang-fuzzer: Segv on unknown address in clang::Sema::LookupQualifiedName

Detailed Report: https://oss-fuzz.com/testcase?key=5702033537761280 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-fuzzer Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: clang::Sema::LookupQualifiedName...

llvm:clang-fuzzer: Segv on unknown address in llvm::APInt::udiv

Detailed Report: https://oss-fuzz.com/testcase?key=5698461165158400 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-fuzzer Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: llvm::APInt::udiv...

yara:dotnet_fuzzer: Heap-use-after-free in dotnet_parse_tilde_2

Project: https://github.com/VirusTotal/yara.git Detailed Report: https://oss-fuzz.com/testcase?key=5195285818507264 Project: yara Fuzzing Engine: libFuzzer Fuzz Target: dotnetfuzzer Job Type: libfuzzerasanyara Platform Id: linux Crash Type: Heap-use-after-free READ 2 Crash Address: 0x6190000006f2...

llvm:clang-fuzzer: Segv on unknown address in llvm::detail::IEEEFloat::roundSignificandWithExponent

Detailed Report: https://oss-fuzz.com/testcase?key=5706795951849472 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-fuzzer Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: llvm::detail::IEEEFloat::roundSignificandWithExponen...

llvm:clang-fuzzer: Segv on unknown address in clang::StmtVisitorBase<llvm::make_const_ptr, RecordExprEvaluator, bool>::Visit

Detailed Report: https://oss-fuzz.com/testcase?key=5629817202671616 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-fuzzer Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: clang::StmtVisitorBase::Visit...

llvm:clang-fuzzer: Segv on unknown address in clang::Parser::tryParseCXXIdExpression

Detailed Report: https://oss-fuzz.com/testcase?key=5730465248182272 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-fuzzer Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: clang::Parser::tryParseCXXIdExpression...

zstd:dictionary_loader: Use-of-uninitialized-value in ZSTD_loadCEntropy

Project: https://github.com/facebook/zstd.git Detailed Report: https://oss-fuzz.com/testcase?key=5685433724043264 Project: zstd Fuzzing Engine: libFuzzer Fuzz Target: dictionaryloader Job Type: libfuzzermsanzstd Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

llvm:clang-fuzzer: Segv on unknown address in clang::Sema::SetCtorInitializers

Detailed Report: https://oss-fuzz.com/testcase?key=5704527068266496 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-fuzzer Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: clang::Sema::SetCtorInitializers...