OracleVM 3.3 / 3.4 : bind (OVMSA-2017-0100)

The remote OracleVM system is missing necessary patches to address critical security updates : - Fix DNSKEY that encountered a CNAME 1447869, ISC change 3391 - Fix CVE-2017-3136 ISC change 4575 - Fix CVE-2017-3137 ISC change 4578 - Fix and test caching CNAME before DNAME ISC change 4558 - Fix...

DLA-924-2 tomcat7 - regression update

Bulletin has no description...

ffmpeg: Stack-buffer-overflow in color_string_to_rgba

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5961584419536896 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDXPMfuzzer Fuzz target binary: ffmpegAVCODECIDXPMfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Stack-buffer-overflow...

harfbuzz: Index-out-of-bounds in hb_ot_face_glyf_accelerator_t::get_extents

Project: https://github.com/harfbuzz/harfbuzz.git Detailed report: https://oss-fuzz.com/testcase?key=4523479581851648 Project: harfbuzz Fuzzer: libFuzzerharfbuzzhb-fuzzer Fuzz target binary: hb-fuzzer Job Type: libfuzzerubsanharfbuzz Platform Id: linux Crash Type: Index-out-of-bounds Crash Addres...

harfbuzz: Index-out-of-bounds in OT::ContextFormat3::sanitize

Project: https://github.com/harfbuzz/harfbuzz.git Detailed report: https://oss-fuzz.com/testcase?key=4769173588672512 Project: harfbuzz Fuzzer: libFuzzerharfbuzzhb-fuzzer Fuzz target binary: hb-fuzzer Job Type: libfuzzerubsanharfbuzz Platform Id: linux Crash Type: Index-out-of-bounds Crash Addres...

SUSE SLES11 Security Update : samba (SUSE-SU-2017:1216-1)

This update for samba fixes the following issues: Security issue fixed : - CVE-2017-2619: symlink race permits opening files outside share directory bsc1027147. For SUSE Linux Enterprise 11 SP4 this is a re-issue of the update, a regression in the fix has been addressed bsc1036283, bso12721. Note...

SUSE-SU-2017:1216-1 Security update for samba

This update for samba fixes the following issues: Security issue fixed: - CVE-2017-2619: symlink race permits opening files outside share directory bsc1027147. For SUSE Linux Enterprise 11 SP4 this is a re-issue of the update, a regression in the fix has been addressed bsc1036283, bso12721...

SUSE-RU-2017:1218-1 Recommended update for samba

This update for samba fixes the following issues: - Fix CVE-2017-2619 regression with 'follow symlinks = no'; bsc1036283, bso12721...

SUSE-RU-2017:1217-1 Recommended update for samba

This update for samba fixes the following issues: - Fix CVE-2017-2619 regression with 'follow symlinks = no'; bsc1036283, bso12721...

ffmpeg: Heap-buffer-overflow in chunky2chunky

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5020737339392000 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDCDXLfuzzer Fuzz target binary: ffmpegAVCODECIDCDXLfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow...

ffmpeg: Heap-buffer-overflow in decode_subband_slice_buffered

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=6108700873850880 Project: ffmpeg Fuzzer: aflffmpegAVCODECIDSNOWfuzzer Fuzz target binary: ffmpegAVCODECIDSNOWfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Cras...

ffmpeg: Crash in magy_decode_slice

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=6065423843852288 Project: ffmpeg Fuzzer: aflffmpegAVCODECIDMAGICYUVfuzzer Fuzz target binary: ffmpegAVCODECIDMAGICYUVfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: UNKNOWN READ Crash...

Insecure Defaults

sosreport is vulnerable to insecure defaults. The library creates temporary archive files with world-readable permissions, allowing a malicious user to extract these files and read their contents. This vulnerability exists due to a regression in the default behavior of sosreport...

Debian DLA-924-2 : tomcat7 regression update

The security update announced as DLA-924-1 introduced a regression in Tomcat's APR protocol due to the fix for CVE-2017-5647 and prevented a successful sendfile request. For Debian 7 'Wheezy', these problems have been fixed in version 7.0.28-4+deb7u13. We recommend that you upgrade your tomcat7...

Chrome Universal XSS using a flaw in the load deferral logic

VULNERABILITY DETAILS This is a regression from https://crrev.com/f92a1f3b9 . Previously, ResourceLoader::start bailed out if ResourceLoader::mdefersLoading was true. Now, it calls setDefersLoading on the associated WebURLLoader instead: void ResourceLoader::startResourceRequest& request...

wireshark: Heap-buffer-overflow in print_address_prefix_buf

Detailed report: https://oss-fuzz.com/testcase?key=5180630432219136 Project: wireshark Fuzzer: libFuzzerwiresharkfuzzsharkip Fuzz target binary: fuzzsharkip Job Type: libfuzzerasanwireshark Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6070000046d7 Crash State:...

wireshark: Heap-buffer-overflow in OALMarshal_UncompressValue

Project: https://code.wireshark.org/review/wireshark https://gitlab.com/wireshark/wireshark.git Detailed report: https://oss-fuzz.com/testcase?key=5900099865542656 Project: wireshark Fuzzer: libFuzzerwiresharkfuzzsharkip Fuzz target binary: fuzzsharkip Job Type: libfuzzerasanwireshark Platform Id...

wireshark: Heap-buffer-overflow in bootp_option

Project: https://code.wireshark.org/review/wireshark https://gitlab.com/wireshark/wireshark.git Detailed report: https://oss-fuzz.com/testcase?key=5638972833267712 Project: wireshark Fuzzer: libFuzzerwiresharkfuzzsharkudpport-bootp Fuzz target binary: fuzzsharkudpport-bootp Job Type:...

FreeBSD : cURL -- TLS session resumption client cert bypass (again) (3e2e9b44-25ce-11e7-a175-939b30e0836d)

cURL security advisory : libcurl would attempt to resume a TLS session even if the client certificate had changed. That is unacceptable since a server by specification is allowed to skip the client certificate check on resume, and may instead use the old identity which was established by the...

Apache Tomcat DoS and Information Disclosure Vulnerabilities (Apr 2017) - Windows

Apache Tomcat is prone to denial of service DoS and information disclosure vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE...