6650 matches found
gdal: Stack-use-after-return in void SwapEndianness<long&, unsigned long>
Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=4542983628128256 Project: gdal Fuzzer: libFuzzergdalcadfuzzer Fuzz target binary: cadfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Stack-use-after-return READ 1 Crash Address:...
expat: Use-of-uninitialized-value in lookup
Project: https://github.com/libexpat/libexpat.git Detailed report: https://oss-fuzz.com/testcase?key=5244538350206976 Project: expat Fuzzer: libFuzzerexpatparseUSASCIIfuzzer Fuzz target binary: parseUSASCIIfuzzer Job Type: libfuzzermsanexpat Platform Id: linux Crash Type: Use-of-uninitialized-val...
curl: Use-of-uninitialized-value in getrn
Detailed report: https://oss-fuzz.com/testcase?key=6249722698268672 Project: curl Fuzzer: libFuzzercurlfuzzer Fuzz target binary: curlfuzzer Job Type: libfuzzermsancurl Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: getrn lhretrieve intthreadgetitem Sanitize...
libpsl: Stack-buffer-overflow in _psl_idna_toASCII
Project: https://github.com/rockdaboot/libpsl.git Detailed report: https://oss-fuzz.com/testcase?key=5165632150568960 Project: libpsl Fuzzer: libFuzzerlibpsliculoadfuzzer Fuzz target binary: libpsliculoadfuzzer Job Type: libfuzzerasanlibpsl Platform Id: linux Crash Type: Stack-buffer-overflow REA...
Fedora 24 : graphite2 (2017-e0a9e51dd5)
1.3.10 - Address floating point build parameters to give consistent positioning results across platforms - Various bug fixes 1.3.9 - Add Collision COLLISSPACE to allow for visible spaces in collision avoidance - Add segment and pass direction information to tracing output - Bug fix rule length...
postgis: Heap-buffer-overflow in ptarray_from_wkb_state
Project: https://git.osgeo.org/gitea/postgis/postgis.git Detailed report: https://oss-fuzz.com/testcase?key=6439724333924352 Project: postgis Fuzzer: libFuzzerpostgiswkbimportfuzzer Fuzz target binary: wkbimportfuzzer Job Type: libfuzzerasanpostgis Platform Id: linux Crash Type:...
gnutls: Use-of-uninitialized-value in ecc_256_modq
Project: https://gitlab.com/gnutls/gnutls.git Detailed report: https://oss-fuzz.com/testcase?key=6126560014761984 Project: gnutls Fuzzer: libFuzzergnutlsclientfuzzer Fuzz target binary: gnutlsclientfuzzer Job Type: libfuzzermsangnutls Platform Id: linux Crash Type: Use-of-uninitialized-value Cras...
gnutls: Use-of-uninitialized-value in nettle_pss_verify_mgf1
Project: https://gitlab.com/gnutls/gnutls.git Detailed report: https://oss-fuzz.com/testcase?key=5211986457526272 Project: gnutls Fuzzer: libFuzzergnutlsclientfuzzer Fuzz target binary: gnutlsclientfuzzer Job Type: libfuzzermsangnutls Platform Id: linux Crash Type: Use-of-uninitialized-value Cras...
gnutls: Use-of-uninitialized-value in nettle_pkcs1_encrypt
Project: https://gitlab.com/gnutls/gnutls.git Detailed report: https://oss-fuzz.com/testcase?key=6091382018015232 Project: gnutls Fuzzer: libFuzzergnutlsclientfuzzer Fuzz target binary: gnutlsclientfuzzer Job Type: libfuzzermsangnutls Platform Id: linux Crash Type: Use-of-uninitialized-value Cras...
dlplibs: Container-overflow in libvisio::VSDContentCollector::_generateBezierSegmentsFromNURBS
Detailed report: https://oss-fuzz.com/testcase?key=6337251178971136 Project: dlplibs Fuzzer: libFuzzerdlplibsvsdfuzzer Fuzz target binary: vsdfuzzer Job Type: libfuzzerasandlplibs Platform Id: linux Crash Type: Container-overflow READ 8 Crash Address: 0x606000000590 Crash State:...
librawspeed: Bad-cast to rawspeed::RawDecoder from invalid vptr;rawspeed::RawDecoderDecodeThread;rawspeed::RawDecoder::startTasks
Project: https://github.com/darktable-org/rawspeed.git Detailed report: https://oss-fuzz.com/testcase?key=4612305675354112 Project: librawspeed Fuzzer: libFuzzerlibrawspeedX3fParserFuzzer-GetDecoder-Decode Fuzz target binary: X3fParserFuzzer-GetDecoder-Decode Job Type: libfuzzerubsanlibrawspeed...
Ubuntu 14.04 LTS / 16.04 LTS : Samba vulnerability (USN-3348-1)
The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3348-1 advisory. It was discovered that Samba incorrectly handled dangling symlinks. A remote attacker could possibly use this issue to cause Samba to hang, resulting ...
USN-3348-1: Samba vulnerability
It was discovered that Samba incorrectly handled dangling symlinks. A remote attacker could possibly use this issue to cause Samba to hang, resulting in a denial of service. This issue only applied to Ubuntu 14.04 LTS and Ubuntu 16.04 LTS. CVE-2017-9461 In addition, this update fixes a regression...
USN-3348-1 samba vulnerability
It was discovered that Samba incorrectly handled dangling symlinks. A remote attacker could possibly use this issue to cause Samba to hang, resulting in a denial of service. This issue only applied to Ubuntu 14.04 LTS and Ubuntu 16.04 LTS. CVE-2017-9461 In addition, this update fixes a regression...
librawspeed: Crash in rawspeed::MosDecoder::decodeRawInternal
Project: https://github.com/darktable-org/rawspeed.git Detailed report: https://oss-fuzz.com/testcase?key=5697054913331200 Project: librawspeed Fuzzer: libFuzzerlibrawspeedTiffParserFuzzer-GetDecoder-Decode Fuzz target binary: TiffParserFuzzer-GetDecoder-Decode Job Type: libfuzzerasanlibrawspeed...
ffmpeg: Crash in ff_sbr_hf_apply_noise_3_sse2
Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=4649584649306112 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDAACfuzzer Fuzz target binary: ffmpegAVCODECIDAACfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: UNKNOWN READ Crash...
SUSE SLED12 / SLES12 Security Update : sudo (SUSE-SU-2017:1771-1)
This update for sudo fixes the following issues : - A regression in the fix for the CVE-2017-1000368 that broke sudo with the 'requiretty' flag bsc1045986 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempt...
SUSE SLES12 Security Update : sudo (SUSE-SU-2017:1778-1)
This update for sudo fixes the following issues : - A regression in the fix for the CVE-2017-1000368 that broke sudo with the 'requiretty' flag bsc1045986 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempt...