tesseract-ocr/fuzzer-api: Heap-buffer-overflow in IntegerMatcher::UpdateTablesForFeature

Detailed report: https://oss-fuzz.com/testcase?key=5723894029221888 Project: tesseract-ocr Fuzzer: libFuzzertesseract-ocrfuzzer-api Fuzz target binary: fuzzer-api Job Type: libfuzzerasantesseract-ocr Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x627000344240 Crash...

[SECURITY] [DSA 4454-2] qemu regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-4454-2 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso June 06, 2019 https://www.debian.org/security/faq -...

gdal/ogr_fuzzer: Stack-buffer-overflow in nc4_get_att

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5635714995191808 Project: gdal Fuzzer: libFuzzergdalogrfuzzer Fuzz target binary: ogrfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Address:...

open62541/fuzz_binary_message: Use-of-uninitialized-value in __RefHead_ZIP_INSERT

Project: https://github.com/open62541/open62541.git Detailed report: https://oss-fuzz.com/testcase?key=5721711044984832 Project: open62541 Fuzzer: libFuzzeropen62541fuzzbinarymessage Fuzz target binary: fuzzbinarymessage Job Type: libfuzzermsanopen62541 Platform Id: linux Crash Type:...

DSA-4454-2 qemu - regression update

Bulletin has no description...

libarchive/libarchive_fuzzer: Crash in Ppmd7_DecodeSymbol

Project: https://github.com/libarchive/libarchive.git Detailed report: https://oss-fuzz.com/testcase?key=5678650441072640 Project: libarchive Fuzzer: libFuzzerlibarchivefuzzer Fuzz target binary: libarchivefuzzer Job Type: libfuzzerubsanlibarchive Platform Id: linux Crash Type: UNKNOWN READ Crash...

openssl/client: Stack-use-after-return in OSSL_PARAM_get_int32

Project: https://github.com/openssl/openssl.git Detailed report: https://oss-fuzz.com/testcase?key=5648601105039360 Project: openssl Fuzzer: aflopensslclient Fuzz target binary: client Job Type: aflasanopenssl Platform Id: linux Crash Type: Stack-use-after-return READ 4 Crash Address:...

njs/njs_process_script_fuzzer: Heap-buffer-overflow in nxt_vsprintf

Project: http://hg.nginx.org/njs Detailed report: https://oss-fuzz.com/testcase?key=5142265766346752 Project: njs Fuzzer: libFuzzernjsprocessscriptfuzzer Fuzz target binary: njsprocessscriptfuzzer Job Type: libfuzzerasannjs Platform Id: linux Crash Type: Heap-buffer-overflow READ 5 Crash Address:...

Apache Hadoop KMS ACL Regression Vulnerability

Apache Hadoop is prone to a KMS ACL regression vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apache:hadoop"; if...

wireshark/fuzzshark_ip_proto-udp: Heap-buffer-overflow in reassemble_continuation_state

Detailed report: https://oss-fuzz.com/testcase?key=5661584824729600 Project: wireshark Fuzzer: aflwiresharkfuzzsharkipproto-udp Fuzz target binary: fuzzsharkipproto-udp Job Type: aflasanwireshark Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address: 0x604002190634 Crash State:...

libxslt/xslt: Use-of-uninitialized-value in xmlStrlen

Project: https://gitlab.gnome.org/GNOME/libxslt.git Detailed report: https://oss-fuzz.com/testcase?key=5197371471822848 Project: libxslt Fuzzer: libFuzzerlibxsltxslt Fuzz target binary: xslt Job Type: libfuzzermsanlibxslt Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

envoy/header_parser_fuzz_test: Crash in Envoy::Router::StreamInfoHeaderFormatter::StreamInfoHeaderFormatter

Project: https://github.com/envoyproxy/envoy.git Detailed report: https://oss-fuzz.com/testcase?key=5702537941876736 Project: envoy Fuzzer: libFuzzerenvoyheaderparserfuzztest Fuzz target binary: headerparserfuzztest Job Type: libfuzzerubsanenvoy Platform Id: linux Crash Type: UNKNOWN READ Crash...

cryptofuzz/cryptofuzz-openssl-110-noasm: Use-of-uninitialized-value in bool std::__1::equal<std::__1::__wrap_iter<unsigned char const*>, std::__1::__wr

Project: https://github.com/guidovranken/cryptofuzz.git Detailed report: https://oss-fuzz.com/testcase?key=5713279621529600 Project: cryptofuzz Fuzzer: libFuzzercryptofuzzcryptofuzz-openssl-110-noasm Fuzz target binary: cryptofuzz-openssl-110-noasm Job Type: libfuzzermsancryptofuzz Platform Id:...

cras/rclient_message: Heap-buffer-overflow in cras_rclient_message_from_client

Detailed report: https://oss-fuzz.com/testcase?key=5764245750284288 Project: cras Fuzzer: libFuzzercrasrclientmessage Fuzz target binary: rclientmessage Job Type: libfuzzerasancras Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x602000000138 Crash State:...

nestegg/fuzz: Global-buffer-overflow in ne_find_element

Project: https://github.com/kinetiknz/nestegg.git Detailed report: https://oss-fuzz.com/testcase?key=5729846619013120 Project: nestegg Fuzzer: libFuzzernesteggfuzz Fuzz target binary: fuzz Job Type: libfuzzerasannestegg Platform Id: linux Crash Type: Global-buffer-overflow READ 8 Crash Address:...

readstat/fuzz_format_spss_commands: Stack-buffer-overflow in readstat_copy_quoted

Project: https://github.com/WizardMac/ReadStat.git Detailed report: https://oss-fuzz.com/testcase?key=5701415210582016 Project: readstat Fuzzer: libFuzzerreadstatfuzzformatspsscommands Fuzz target binary: fuzzformatspsscommands Job Type: libfuzzerasanreadstat Platform Id: linux Crash Type:...

cryptofuzz/cryptofuzz-openssl-102-noasm: Heap-buffer-overflow in RC4

Project: https://github.com/guidovranken/cryptofuzz.git Detailed report: https://oss-fuzz.com/testcase?key=5695841819426816 Project: cryptofuzz Fuzzer: libFuzzercryptofuzzcryptofuzz-openssl-102-noasm Fuzz target binary: cryptofuzz-openssl-102-noasm Job Type: libfuzzerasancryptofuzz Platform Id:...

unicorn/fuzz_emu_mips_32be: Heap-buffer-overflow in tlb_set_page_mips

Project: https://github.com/unicorn-engine/unicorn.git Detailed report: https://oss-fuzz.com/testcase?key=5645992751267840 Project: unicorn Fuzzer: aflunicornfuzzemumips32be Fuzz target binary: fuzzemumips32be Job Type: aflasanunicorn Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Cra...

Updated kernel packages fix security vulnerabilities

This kernel update provides the upstream 4.14.121. It adds additional fixes to the kernel side mitigations for the Microarchitectural Data Sampling MDS, also called ZombieLoad attack vulnerabilities. It also fixes the following security issues: A flaw was found in the Linux kernel's freescale...

hostap/ap-mgmt-fuzzer: Crash in copy_supp_rates

Project: git://w1.fi/srv/git/hostap.git Detailed report: https://oss-fuzz.com/testcase?key=5737950014341120 Project: hostap Fuzzer: libFuzzerhostapap-mgmt-fuzzer Fuzz target binary: ap-mgmt-fuzzer Job Type: libfuzzerubsanhostap Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...