Fixed in Apache Tomcat 8.0.50

Important: Security constraint annotations applied too late CVE-2018-1305 Security constraints defined by annotations of Servlets were only applied once a Servlet had been loaded. Because security constraints defined in this way apply to the URL pattern and any URLs below that point, it was...

Fixed in Apache Tomcat 7.0.85

Important: Security constraint annotations applied too late CVE-2018-1305 Security constraints defined by annotations of Servlets were only applied once a Servlet had been loaded. Because security constraints defined in this way apply to the URL pattern and any URLs below that point, it was...

Fixed in Apache Tomcat 9.0.5

Important: Security constraint annotations applied too late CVE-2018-1305 Security constraints defined by annotations of Servlets were only applied once a Servlet had been loaded. Because security constraints defined in this way apply to the URL pattern and any URLs below that point, it was...

graphicsmagick/coder_PICT_fuzzer: Unknown signal in DestroyCacheInfo

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=6624475274543104 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderPICTfuzzer Fuzz target binary: coderPICTfuzzer Job Type: libfuzzerubsangraphicsmagick Platform Id: linux Crash Type:...

gdal/dxf_fuzzer: Crash in OGRDXFLayer::TranslatePOLYLINE

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5390087580811264 Project: gdal Fuzzer: libFuzzergdaldxffuzzer Fuzz target binary: dxffuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x604c00000e48 Crash...

skia/image_filter_deserialize: Crash in void add_coverage_delta_segment<true, SkCoverageDeltaList>

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=6370761758474240 Project: skia Fuzzer: aflskiaimagefilterdeserialize Fuzz target binary: imagefilterdeserialize Job Type: aflasanskia Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

Threat Outbreak Alert RuleID31961: Email Messages Distributing Malicious Software on February 9, 2018

Medium Alert ID: 56782 First Published: 2018 February 9 20:52 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31961 may contain the following files: Name |...

Threat Outbreak Alert RuleID31943: Email Messages Distributing Malicious Software on February 8, 2018

Medium Alert ID: 56759 First Published: 2018 February 8 17:11 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31943 may contain the following files: Name |...

libreoffice/pptfuzzer: Crash in __dynamic_cast

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=6566651324530688 Project: libreoffice Fuzzer: libFuzzerlibreofficepptfuzzer Fuzz target binary: pptfuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type: UNKNOWN READ Cras...

Threat Outbreak Alert RuleID31907: Email Messages Distributing Malicious Software on February 6, 2018

Medium Alert ID: 56682 First Published: 2018 February 6 17:23 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31907 may contain the following files: Name |...

gdal/gtiff_fuzzer: Crash in _TIFFmemcpy

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=6278268429795328 Project: gdal Fuzzer: libFuzzergdalgtifffuzzer Fuzz target binary: gtifffuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x625000042930 Crash...

graphicsmagick/coder_PCT_fuzzer: Unknown signal in _int_memalign

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=4832092207710208 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderPCTfuzzer Fuzz target binary: coderPCTfuzzer Job Type: libfuzzerubsangraphicsmagick Platform Id: linux Crash Type:...

WebKit WebCore::FrameView::clientToLayoutViewportPoint Use-After-Free

WebKit: use-after-free in WebCore::FrameView::clientToLayoutViewportPoint There is a use-after-free security vulnerability in WebKit. The vulnerability was confirmed on ASan build of Revision 225572 on OSX. PoC: ================================================================= function jsfuzzer v...

Threat Outbreak Alert RuleID31881: Email Messages Distributing Malicious Software on February 1, 2018

Medium Alert ID: 56642 First Published: 2018 February 1 19:27 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31881 may contain the following files: Name |...

Threat Outbreak Alert RuleID31879: Email Messages Distributing Malicious Software on January 31, 2018

Medium Alert ID: 56634 First Published: 2018 January 31 20:51 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31879 may contain the following files: Name |...

Threat Outbreak Alert RuleID31868: Email Messages Distributing Malicious Software on January 31, 2018

Medium Alert ID: 56627 First Published: 2018 January 31 17:20 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31868 may contain the following files: Name |...

Fixed in Apache Tomcat Native Connector 1.2.16

Note: The issue below was fixed in Apache Tomcat Native Connector 1.2.15 but the release vote for the 1.2.15 release candidate did not pass. Therefore, although users must download 1.2.16 to obtain a version that includes the fix for this issue, version 1.2.15 is not included in the list of...

mupdf/pdf_fuzzer: Heap-buffer-overflow in jpx_read_image

Project: git://git.ghostscript.com/mupdf.git Detailed report: https://oss-fuzz.com/testcase?key=6011746750824448 Project: mupdf Fuzzer: aflmupdfpdffuzzer Fuzz target binary: pdffuzzer Job Type: aflasanmupdf Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x7f0b2eb44174...

mupdf/pdf_fuzzer: Use-of-uninitialized-value in fz_arc4_init

Project: git://git.ghostscript.com/mupdf.git Detailed report: https://oss-fuzz.com/testcase?key=6682020974428160 Project: mupdf Fuzzer: libFuzzermupdfpdffuzzer Fuzz target binary: pdffuzzer Job Type: libfuzzermsanmupdf Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

mupdf/pdf_fuzzer: Use-of-uninitialized-value in pdf_lex

Project: git://git.ghostscript.com/mupdf.git Detailed report: https://oss-fuzz.com/testcase?key=5680343332945920 Project: mupdf Fuzzer: libFuzzermupdfpdffuzzer Fuzz target binary: pdffuzzer Job Type: libfuzzermsanmupdf Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...