net-snmp/agentx_parse_fuzzer: Heap-buffer-overflow in agentx_parse_string

Project: git://git.code.sf.net/p/net-snmp/code Detailed report: https://oss-fuzz.com/testcase?key=5639564196052992 Project: net-snmp Fuzzer: libFuzzernet-snmpagentxparsefuzzer Fuzz target binary: agentxparsefuzzer Job Type: libfuzzerasannet-snmp Platform Id: linux Crash Type: Heap-buffer-overflow...

wpantund/wpantund-fuzz: Crash in (__has_construct<std::__1::allocator<unsigned

Project: https://github.com/openthread/wpantund.git Detailed report: https://oss-fuzz.com/testcase?key=5700079681273856 Project: wpantund Fuzzer: libFuzzerwpantundwpantund-fuzz Fuzz target binary: wpantund-fuzz Job Type: libfuzzerubsanwpantund Platform Id: linux Crash Type: UNKNOWN READ Crash...

libvpx/vpx_dec_fuzzer_vp8: Crash in subpixel_ssse3.asm:1165

Project: https://chromium.googlesource.com/webm/libvpx Detailed report: https://oss-fuzz.com/testcase?key=5145943336288256 Project: libvpx Fuzzer: libFuzzerlibvpxvpxdecfuzzervp8 Fuzz target binary: vpxdecfuzzervp8 Job Type: libfuzzerasanlibvpx Platform Id: linux Crash Type: UNKNOWN READ Crash...

lwan/request_fuzzer: Negative-size-param in parse_proxy_protocol_v2

Project: git://github.com/lpereira/lwan Detailed report: https://oss-fuzz.com/testcase?key=5091179189764096 Project: lwan Fuzzer: libFuzzerlwanrequestfuzzer Fuzz target binary: requestfuzzer Job Type: libfuzzerasanlwan Platform Id: linux Crash Type: Negative-size-param Crash Address: Crash State:...

SUSE SLED12 / SLES12 Security Update : samba (SUSE-SU-2019:1037-1)

This update for samba fixes the following issues : Security issue fixed : CVE-2019-3880: Fixed a path/symlink traversal vulnerability, which allowed an unprivileged user to save registry files outside a share bsc1131060. Non-security issues fixed: Fix vfsceph ftruncate and fallocate handling...

DLA-1762-2 systemd - regression update

Bulletin has no description...

wget2/wget_options_fuzzer: Heap-buffer-overflow in _iri_unescape_inline

Project: https://gitlab.com/gnuwget/wget2.git Detailed report: https://oss-fuzz.com/testcase?key=5668230217072640 Project: wget2 Fuzzer: libFuzzerwget2wgetoptionsfuzzer Fuzz target binary: wgetoptionsfuzzer Job Type: libfuzzerasanwget2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1...

chakra: Stack-use-after-return in Js::NarrowStringToWide

Detailed report: https://oss-fuzz.com/testcase?key=5668803167387648 Project: chakra Fuzzer: jsfuzzer Job Type: asanchakra Platform Id: linux Crash Type: Stack-use-after-return READ Crash Address: 0x7f9fb8b97920 Crash State: Js::NarrowStringToWide Js::WabtInterface::EntryConvertWast2Wasm...

Debian DLA-1762-2 : systemd regression update

In the recently uploaded systemd security update 215-17+deb8u12 via DLA-1762-1, a regression was discovered in the fix for CVE-2017-18078. The observation of Debian jessie LTS users was, that after upgrading to +deb8u12 temporary files would not have the correct ownerships and permissions anymore...

openvswitch/odp_target: Heap-buffer-overflow in format_generic_odp_key

Project: https://github.com/openvswitch/ovs.git Detailed report: https://oss-fuzz.com/testcase?key=5649993425223680 Project: openvswitch Fuzzer: libFuzzeropenvswitchodptarget Fuzz target binary: odptarget Job Type: libfuzzerasanopenvswitch Platform Id: linux Crash Type: Heap-buffer-overflow READ ...

wget2/libwget_iri_fuzzer: Heap-buffer-overflow in _iri_unescape_inline

Project: https://gitlab.com/gnuwget/wget2.git Detailed report: https://oss-fuzz.com/testcase?key=5641953338720256 Project: wget2 Fuzzer: libFuzzerwget2libwgetirifuzzer Fuzz target binary: libwgetirifuzzer Job Type: libfuzzerasanwget2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Cras...

wget2/libwget_metalink_parse_fuzzer: Heap-buffer-overflow in _iri_unescape_inline

Project: https://gitlab.com/gnuwget/wget2.git Detailed report: https://oss-fuzz.com/testcase?key=5138114927919104 Project: wget2 Fuzzer: libFuzzerwget2libwgetmetalinkparsefuzzer Fuzz target binary: libwgetmetalinkparsefuzzer Job Type: libfuzzerasanwget2 Platform Id: linux Crash Type:...

graphicsmagick/coder_TIFF_fuzzer: Use-of-uninitialized-value in TIFFYCbCrtoRGB

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=5640694644867072 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderTIFFfuzzer Fuzz target binary: coderTIFFfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type:...

skia/sksl2glsl: Crash in SkSL::Constructor::getVecComponent

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5656782862548992 Project: skia Fuzzer: libFuzzerskiasksl2glsl Fuzz target binary: sksl2glsl Job Type: libfuzzermsanskia Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000300000037 Cras...

dlplibs/wqfuzzer: Stack-buffer-overflow in WPSEmbeddedObject::operator=

Detailed report: https://oss-fuzz.com/testcase?key=5119335720288256 Project: dlplibs Fuzzer: libFuzzerdlplibswqfuzzer Fuzz target binary: wqfuzzer Job Type: libfuzzerasandlplibs Platform Id: linux Crash Type: Stack-buffer-overflow READ 8 Crash Address: 0x7f774d6f6158 Crash State:...

libarchive/libarchive_fuzzer: Index-out-of-bounds in parse_file_extra_owner

Project: https://github.com/libarchive/libarchive.git Detailed report: https://oss-fuzz.com/testcase?key=5657800803352576 Project: libarchive Fuzzer: libFuzzerlibarchivefuzzer Fuzz target binary: libarchivefuzzer Job Type: libfuzzerubsanlibarchive Platform Id: linux Crash Type: Index-out-of-bound...

kimageformats/kimgio_xcf_fuzzer: Negative-size-param in QImage::fill

Project: git://anongit.kde.org/kimageformats Detailed report: https://oss-fuzz.com/testcase?key=5753651588497408 Project: kimageformats Fuzzer: aflkimageformatskimgioxcffuzzer Fuzz target binary: kimgioxcffuzzer Job Type: aflasankimageformats Platform Id: linux Crash Type: Negative-size-param Cra...

karchive/karchive_fuzzer: Use-of-uninitialized-value in qstrlen

Project: git://anongit.kde.org/karchive Detailed report: https://oss-fuzz.com/testcase?key=5640360216231936 Project: karchive Fuzzer: libFuzzerkarchivefuzzer Fuzz target binary: karchivefuzzer Job Type: libfuzzermsankarchive Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

pcre2/pcre2_fuzzer: Stack-buffer-overflow in get_grouplength

Project: svn://vcs.exim.org/pcre2/code/trunk Detailed report: https://oss-fuzz.com/testcase?key=5643597614940160 Project: pcre2 Fuzzer: libFuzzerpcre2fuzzer Fuzz target binary: pcre2fuzzer Job Type: libfuzzerasanpcre2 Platform Id: linux Crash Type: Stack-buffer-overflow READ 4 Crash Address:...

zstd/stream_decompress: Heap-buffer-overflow in MEM_read32

Project: https://github.com/facebook/zstd.git Detailed report: https://oss-fuzz.com/testcase?key=5648063105859584 Project: zstd Fuzzer: libFuzzerzstdstreamdecompress Fuzz target binary: streamdecompress Job Type: libfuzzerasanzstd Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash...