CVE-2017-8048

In Cloud Foundry capi-release versions 1.33.0 and later, prior to 1.42.0 and cf-release versions 268 and later, prior to 274, the original fix for CVE-2017-8033 introduces an API regression that allows a space developer to execute arbitrary code on the Cloud Controller VM by pushing a specially...

CVE-2017-8048

In Cloud Foundry capi-release versions 1.33.0 and later, prior to 1.42.0 and cf-release versions 268 and later, prior to 274, the original fix for CVE-2017-8033 introduces an API regression that allows a space developer to execute arbitrary code on the Cloud Controller VM by pushing a specially...

Design/Logic Flaw

In Cloud Foundry capi-release versions 1.33.0 and later, prior to 1.42.0 and cf-release versions 268 and later, prior to 274, the original fix for CVE-2017-8033 introduces an API regression that allows a space developer to execute arbitrary code on the Cloud Controller VM by pushing a specially...

CVE-2017-8048: Undefined Security Weakness

In Cloud Foundry capi-release versions 1.33.0 and later, prior to 1.42.0 and cf-release versions 268 and later, prior to 274, the original fix for CVE-2017-8033 introduces an API regression that allows a space developer to execute arbitrary code on the Cloud Controller VM by pushing a specially...

CVE-2017-8048

In Cloud Foundry capi-release versions 1.33.0 and later, prior to 1.42.0 and cf-release versions 268 and later, prior to 274, the original fix for CVE-2017-8033 introduces an API regression that allows a space developer to execute arbitrary code on the Cloud Controller VM by pushing a specially...

PT-2017-18090

Name of the Vulnerable Software and Affected Versions Cloud Foundry capi-release versions 1.33.0 through 1.41.x Cloud Foundry cf-release versions 268 through 273 Description The issue allows a space developer to execute arbitrary code on the Cloud Controller VM by pushing a specially crafted...

wireshark: Global-buffer-overflow in dissect_gtpv2_ie_common

Project: https://code.wireshark.org/review/wireshark https://gitlab.com/wireshark/wireshark.git Detailed report: https://oss-fuzz.com/testcase?key=5241250057814016 Project: wireshark Fuzzer: aflwiresharkfuzzsharkipproto-udp Fuzz target binary: fuzzsharkipproto-udp Job Type: aflasanwireshark...

librawspeed: Use-of-uninitialized-value in rawspeed::RawImageData::checkMemIsInitialized

Project: https://github.com/darktable-org/rawspeed.git Detailed report: https://oss-fuzz.com/testcase?key=6413887396118528 Project: librawspeed Fuzzer: libFuzzerlibrawspeedCiffParserFuzzer-GetDecoder-Decode Fuzz target binary: CiffParserFuzzer-GetDecoder-Decode Job Type: libfuzzermsanlibrawspeed...

zstd: Heap-buffer-overflow in ZSTD_storeLastLiterals

Project: https://github.com/facebook/zstd.git Detailed report: https://oss-fuzz.com/testcase?key=4855313356292096 Project: zstd Fuzzer: libFuzzerzstdblockroundtrip Fuzz target binary: blockroundtrip Job Type: libfuzzerasanzstd Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Addres...

TCP Stream Replay Tool: TCPCopy

Although the real live flow is important for the test of Internet server applications, it is hard to simulate it as online environments are too complex. To support more realistic testing of Internet server applications, we develop a live flow reproduction tool – TCPCopy, which could generate the...

CVE-2017-12236

A vulnerability in the implementation of the Locator/ID Separation Protocol LISP in Cisco IOS XE 3.2 through 16.5 could allow an unauthenticated, remote attacker using an x tunnel router to bypass authentication checks performed when registering an Endpoint Identifier EID to a Routing Locator RLO...

librawspeed: Use-after-poison in void rawspeed::LJpegDecompressor::decodeN<2>

Project: https://github.com/darktable-org/rawspeed.git Detailed report: https://oss-fuzz.com/testcase?key=6010819949101056 Project: librawspeed Fuzzer: afllibrawspeedFiffParserFuzzer-GetDecoder-Decode Fuzz target binary: FiffParserFuzzer-GetDecoder-Decode Job Type: aflasanlibrawspeed Platform Id:...

librawspeed: Use-of-uninitialized-value in rawspeed::RawImageData::checkMemIsInitialized

Project: https://github.com/darktable-org/rawspeed.git Detailed report: https://oss-fuzz.com/testcase?key=5848500820508672 Project: librawspeed Fuzzer: libFuzzerlibrawspeedTiffParserFuzzer-GetDecoder-Decode Fuzz target binary: TiffParserFuzzer-GetDecoder-Decode Job Type: libfuzzermsanlibrawspeed...

wpantund: Heap-use-after-free in in6_addr_to_string

Project: https://github.com/openthread/wpantund.git Detailed report: https://oss-fuzz.com/testcase?key=5244068697210880 Project: wpantund Fuzzer: libFuzzerwpantundwpantund-fuzz Fuzz target binary: wpantund-fuzz Job Type: libfuzzerasanwpantund Platform Id: linux Crash Type: Heap-use-after-free REA...

CVE-2017-8048: Cloud Controller API regression | Cloud Foundry

Severity Critical Vendor Cloud Foundry Foundation Affected Cloud Foundry Products and Versions capi-release versions 1.33.0 and later, prior to 1.42.0 cf-release versions 268 and later, prior to 274 Please note: due to a bug in 274, it is not recommended for production use. Deployments should use...

openssl: Index-out-of-bounds in tls1_set_ec_id

Project: https://github.com/openssl/openssl.git Detailed report: https://oss-fuzz.com/testcase?key=5555118181187584 Project: openssl Fuzzer: libFuzzeropensslclient Fuzz target binary: client Job Type: libfuzzerubsanopenssl Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash...

librawspeed: Use-after-poison in rawspeed::NikonDecompressor::decompress

Project: https://github.com/darktable-org/rawspeed.git Detailed report: https://oss-fuzz.com/testcase?key=5062035266076672 Project: librawspeed Fuzzer: afllibrawspeedTiffDecoderFuzzer-NefDecoder Fuzz target binary: TiffDecoderFuzzer-NefDecoder Job Type: aflasanlibrawspeed Platform Id: linux Crash...

gdal: Index-out-of-bounds in unpk_g2ncep

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5096432585408512 Project: gdal Fuzzer: libFuzzergdalfilesystemfuzzer Fuzz target binary: gdalfilesystemfuzzer Job Type: libfuzzerubsangdal Platform Id: linux Crash Type: Index-out-of-bounds Crash Address...

libreoffice: Crash in wwSprmParser::GetSprmId

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5055253344944128 Project: libreoffice Fuzzer: libFuzzerlibreofficeww2fuzzer Fuzz target binary: ww2fuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: UNKNOWN READ Crash...

ffmpeg: Global-buffer-overflow in initSlotBasedRotation

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=4898065225875456 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDLIBFDKAACfuzzer Fuzz target binary: ffmpegAVCODECIDLIBFDKAACfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type:...