openSUSE: Security Advisory for nmap (openSUSE-SU-2019:2198-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

openSUSE Security Update : nmap (openSUSE-2019-2198)

This update for nmap fixes the following issues : Security issue fixed : - CVE-2017-18594: Fixed a denial of service condition due to a double free when an SSH connection fails. bsc1148742 Non-security issue fixed : - Fixed a regression in the version scanner caused, by the fix for CVE-2018-15173...

graphicsmagick:coder_PTIF_fuzzer: Use-of-uninitialized-value in DisassociateAlphaRegion

Detailed Report: https://oss-fuzz.com/testcase?key=5756503184637952 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderPTIFfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: DisassociateAlphaRegion...

OPENSUSE-SU-2019:2200-1 Security update for nmap

This update for nmap fixes the following issues: Security issue fixed: - CVE-2017-18594: Fixed a denial of service condition due to a double free when an SSH connection fails. bsc1148742 Non-security issue fixed: - Fixed a regression in the version scanner caused, by the fix for CVE-2018-15173...

OPENSUSE-SU-2019:2198-1 Security update for nmap

This update for nmap fixes the following issues: Security issue fixed: - CVE-2017-18594: Fixed a denial of service condition due to a double free when an SSH connection fails. bsc1148742 Non-security issue fixed: - Fixed a regression in the version scanner caused, by the fix for CVE-2018-15173...

graphicsmagick:coder_TIFF_fuzzer: Use-of-uninitialized-value in ImportYUVAFromRGBA

Detailed Report: https://oss-fuzz.com/testcase?key=5658213688541184 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderTIFFfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: ImportYUVAFromRGBA Import...

Security update for nmap (important)

openSUSE Security Update: Security update for nmap Announcement ID: openSUSE-SU-2019:2198-1 Rating: important References: 1135350 1148742 Cross-References: CVE-2017-18594 CVE-2018-15173 Affected Products: openSUSE Leap 15.0 An update that fixes two vulnerabilities is now available. Description:...

Debian DLA-1931-2 : libgcrypt20 regression update

It was discovered that the fix to address an ECDSA timing attack in the libgcrypt20 cryptographic library was incomplete. For Debian 8 'Jessie', this issue has been fixed in libgcrypt20 version 1.6.3-2+deb8u8. Thanks to Albert Chin-A-Young for the report. We recommend that you upgrade your...

chakra: Crash in Js::InterpreterStackFrame::ProcessUnprofiledExtendedOpcodePrefix

Detailed Report: https://oss-fuzz.com/testcase?key=5691469460930560 Project: chakra Fuzzer: jsfuzzer Job Type: asanchakra Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x20007fff8002 Crash State: Js::InterpreterStackFrame::ProcessUnprofiledExtendedOpcodePrefix...

Ubuntu: Security Advisory (USN-4134-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 16.04 LTS / 18.04 LTS : IBus regression (USN-4134-2)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4134-2 advisory. USN-4134-1 fixed a vulnerability in IBus. The security fix introduced a regression when being used with Qt applications. This update reverts the...

glib:fuzz_bookmark: Use-of-uninitialized-value in g_date_time_get_week_number

Project: https://gitlab.gnome.org/GNOME/glib.git Detailed Report: https://oss-fuzz.com/testcase?key=5745896058257408 Project: glib Fuzzing Engine: libFuzzer Fuzz Target: fuzzbookmark Job Type: libfuzzermsanglib Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

ffmpeg:ffmpeg_AV_CODEC_ID_LIBFDK_AAC_fuzzer: Index-out-of-bounds in processDrcTime

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5699860921057280 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDLIBFDKAACfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Cra...

curl:curl_fuzzer_http: Use-of-uninitialized-value in Curl_rand_hex

Project: https://github.com/curl/curl.git Detailed Report: https://oss-fuzz.com/testcase?key=5638014398627840 Project: curl Fuzzing Engine: libFuzzer Fuzz Target: curlfuzzerhttp Job Type: libfuzzermsancurl Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

USN-4134-2 ibus regression

USN-4134-1 fixed a vulnerability in IBus. The security fix introduced a regression when being used with Qt applications. This update reverts the security fix pending further investigation. Original advisory details: Simon McVittie discovered that IBus did not enforce appropriate access controls o...

USN-4134-2: IBus regression

USN-4134-1 fixed a vulnerability in IBus. The security fix introduced a regression when being used with Qt applications. This update reverts the security fix pending further investigation. Original advisory details: Simon McVittie discovered that IBus did not enforce appropriate access controls o...

SUSE SLED15 / SLES15 Security Update : nmap (SUSE-SU-2019:2425-1)

This update for nmap fixes the following issues : Security issue fixed : CVE-2017-18594: Fixed a denial of service condition due to a double free when an SSH connection fails. bsc1148742 Non-security issue fixed: Fixed a regression in the version scanner caused, by the fix for CVE-2018-15173...

libhevc:hevc_dec_fuzzer: Stack-use-after-return in ihevcd_process_thread

Project: https://android.googlesource.com/platform/external/libhevc Detailed Report: https://oss-fuzz.com/testcase?key=5176835272343552 Project: libhevc Fuzzing Engine: libFuzzer Fuzz Target: hevcdecfuzzer Job Type: libfuzzerasani386libhevc Platform Id: linux Crash Type: Stack-use-after-return RE...

cryptofuzz:cryptofuzz-openssl-noasm: Use-of-uninitialized-value in CRYPTO_clear_free

Project: https://github.com/guidovranken/cryptofuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=5630642053709824 Project: cryptofuzz Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-openssl-noasm Job Type: libfuzzermsancryptofuzz Platform Id: linux Crash Type: Use-of-uninitialized-val...

libssh:libssh_server_fuzzer: Use-of-uninitialized-value in ssh_buffer_unpack_va

Project: https://git.libssh.org/projects/libssh.git Detailed Report: https://oss-fuzz.com/testcase?key=5661411098755072 Project: libssh Fuzzing Engine: libFuzzer Fuzz Target: libsshserverfuzzer Job Type: libfuzzermsanlibssh Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...