USN-3575-2: QEMU regression

USN-3575-1 fixed vulnerabilities in QEMU. The fix for CVE-2017-11334 caused a regression in Xen environments. This update removes the problematic fix pending further investigation. We apologize for the inconvenience. Original advisory details: It was discovered that QEMU incorrectly handled guest...

USN-3575-2 qemu regression

USN-3575-1 fixed vulnerabilities in QEMU. The fix for CVE-2017-11334 caused a regression in Xen environments. This update removes the problematic fix pending further investigation. We apologize for the inconvenience. Original advisory details: It was discovered that QEMU incorrectly handled guest...

gdal/avcbin_fuzzer: Index-out-of-bounds in _AVCBinReadOpenTable

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5104654284226560 Project: gdal Fuzzer: libFuzzergdalavcbinfuzzer Fuzz target binary: avcbinfuzzer Job Type: libfuzzerubsangdal Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash Stat...

graphicsmagick/coder_PCT_fuzzer: Unknown signal in AcquireCacheNexus

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=5096248131452928 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderPCTfuzzer Fuzz target binary: coderPCTfuzzer Job Type: libfuzzerubsangraphicsmagick Platform Id: linux Crash Type:...

chakra: Crash in Js::JavascriptOperators::GetAndAssertIsConstructorSuperCall

Detailed report: https://oss-fuzz.com/testcase?key=6448634108313600 Project: chakra Fuzzer: jsfuzzer Job Type: asanchakra Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7f0a0000000c Crash State: Js::JavascriptOperators::GetAndAssertIsConstructorSuperCall...

gdal/envi_fuzzer: Heap-buffer-overflow in ENVIDataset::ReadHeader

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5710112736935936 Project: gdal Fuzzer: libFuzzergdalenvifuzzer Fuzz target binary: envifuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

gdal/ehdr_fuzzer: Heap-buffer-overflow in EHdrRasterBand::IReadBlock

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=6240695363829760 Project: gdal Fuzzer: libFuzzergdalehdrfuzzer Fuzz target binary: ehdrfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

libreoffice/pptfuzzer: Bad-cast to SdrObjectSvxMSDffManager::SolveSolver in SdrPowerPointImport::ImportPage

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=6233996204703744 Project: libreoffice Fuzzer: libFuzzerlibreofficepptfuzzer Fuzz target binary: pptfuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type: Bad-cast Crash...

gdal/avce00_fuzzer: Crash in AVCE00ParseNextTxtLine

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5817524097646592 Project: gdal Fuzzer: libFuzzergdalavce00fuzzer Fuzz target binary: avce00fuzzer Job Type: libfuzzerubsangdal Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x7fd1d2060e40...

resiprocate/fuzzStack: Heap-buffer-overflow in resip::ParseBuffer::qVal

Project: https://github.com/resiprocate/resiprocate.git Detailed report: https://oss-fuzz.com/testcase?key=6234261284716544 Project: resiprocate Fuzzer: aflresiprocatefuzzStack Fuzz target binary: fuzzStack Job Type: aflasanresiprocate Platform Id: linux Crash Type: Heap-buffer-overflow READ 1...

open62541/fuzz_binary_message: Heap-use-after-free in NodeId_deleteMembers

Project: https://github.com/open62541/open62541.git Detailed report: https://oss-fuzz.com/testcase?key=5776306856787968 Project: open62541 Fuzzer: aflopen62541fuzzbinarymessage Fuzz target binary: fuzzbinarymessage Job Type: aflasanopen62541 Platform Id: linux Crash Type: Heap-use-after-free READ...

gdal/avce00_fuzzer: Heap-buffer-overflow in OGRAVCLayer::TranslateFeature

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=6029746216370176 Project: gdal Fuzzer: libFuzzergdalavce00fuzzer Fuzz target binary: avce00fuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address:...

gdal/avce00_fuzzer: Crash in OGRSpatialReference::importFromESRI

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5742772473561088 Project: gdal Fuzzer: aflgdalavce00fuzzer Fuzz target binary: avce00fuzzer Job Type: aflasangdal Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000200000001 Crash State:...

gdal/avce00_fuzzer: Heap-use-after-free in OGRAVCLayer::AppendTableDefinition

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5310171959001088 Project: gdal Fuzzer: aflgdalavce00fuzzer Fuzz target binary: avce00fuzzer Job Type: aflasangdal Platform Id: linux Crash Type: Heap-use-after-free READ 2 Crash Address: 0x611000000faa...

imagemagick/encoder_mvg_fuzzer: Use-of-uninitialized-value in EllipsePoints

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=4848801824112640 Project: imagemagick Fuzzer: libFuzzerimagemagickencodermvgfuzzer Fuzz target binary: encodermvgfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

gdal/avce00_fuzzer: Heap-buffer-overflow in _AVCE00ParseTableRecord

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=4682677992030208 Project: gdal Fuzzer: libFuzzergdalavce00fuzzer Fuzz target binary: avce00fuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address:...

[SECURITY] [DSA 4120-2] linux regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-4120-2 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso March 03, 2018 https://www.debian.org/security/faq -...

ffmpeg/ffmpeg_AV_CODEC_ID_TRUEHD_fuzzer: Index-out-of-bounds in generate_2_noise_channels

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5191383498358784 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDTRUEHDfuzzer Fuzz target binary: ffmpegAVCODECIDTRUEHDfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type:...

imagemagick/encoder_mvg_fuzzer: Crash in TracePoint

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5950563343663104 Project: imagemagick Fuzzer: libFuzzerimagemagickencodermvgfuzzer Fuzz target binary: encodermvgfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

gdal/avce00_fuzzer: Heap-buffer-overflow in CSLFindString

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5678028005834752 Project: gdal Fuzzer: libFuzzergdalavce00fuzzer Fuzz target binary: avce00fuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...