Symantec Endpoint Protection Arbitrary File Deletion Vulnerability

Symantec Endpoint Protection SEP is a suite of antivirus software from Symantec, USA. The software provides security across physical and virtual systems. A security vulnerability exists in Windows endpoint in versions prior to SEP 12.1 RU6 MP9 and versions prior to SEP 14 RU1. An attacker could...

Threat Outbreak Alert RuleID31165: Email Messages Distributing Malicious Software on November 1, 2017

Medium Alert ID: 55756 First Published: 2017 November 1 16:26 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31165 may contain the following files: Name |...

proj4/standard_fuzzer: Crash in pj_read_vgrid_value

Detailed report: https://oss-fuzz.com/testcase?key=5571475164626944 Project: proj4 Fuzzer: libFuzzerproj4standardfuzzer Fuzz target binary: standardfuzzer Job Type: libfuzzerasanproj4 Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0000bfff0530 Crash State: pjreadvgridvalue...

Information disclosure

libsvnfsfs/fsfs.c in Apache Subversion 1.8.x before 1.8.2 might allow remote authenticated users with commit access to corrupt FSFS repositories and cause a denial of service or obtain sensitive information by editing packed revision properties...

CVE-2013-4246

libsvnfsfs/fsfs.c in Apache Subversion 1.8.x before 1.8.2 might allow remote authenticated users with commit access to corrupt FSFS repositories and cause a denial of service or obtain sensitive information by editing packed revision properties...

llvm/llvm-special-case-list-fuzzer: Global-buffer-overflow in p_b_symbol

Project: https://github.com/llvm/llvm-project.git Detailed report: https://oss-fuzz.com/testcase?key=6124359660863488 Project: llvm Fuzzer: libFuzzerllvmllvm-special-case-list-fuzzer Fuzz target binary: llvm-special-case-list-fuzzer Job Type: libfuzzerasanllvm Platform Id: linux Crash Type:...

gdal/cad_fuzzer: Crash in _fini

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=6524653834076160 Project: gdal Fuzzer: libFuzzergdalcadfuzzer Fuzz target binary: cadfuzzer Job Type: libfuzzerubsangdal Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000000014cdd Crash...

Threat Outbreak Alert RuleID30878: Email Messages Distributing Malicious Software on October 13, 2017

Medium Alert ID: 55612 First Published: 2017 October 13 15:47 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30878 may contain the following files: Name |...

dlplibs: Heap-buffer-overflow in ucnv_UTF8FromUTF8

Detailed report: https://oss-fuzz.com/testcase?key=6715693878738944 Project: dlplibs Fuzzer: libFuzzerdlplibspdbfuzzer Fuzz target binary: pdbfuzzer Job Type: libfuzzerasandlplibs Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x604000000afc Crash State: ucnvUTF8FromUTF...

PT-2017-3780

Name of the Vulnerable Software and Affected Versions Phusion Passenger versions 5.1.10 Description The issue allows an attacker to list the contents of arbitrary files on a system by creating a symbolic link from the REVISION file in the application root folder to a file of choice and then...

wpantund: Global-buffer-overflow in nlpt_select_update_fd_set

Detailed report: https://oss-fuzz.com/testcase?key=5512201428271104 Project: wpantund Fuzzer: libFuzzerwpantundwpantund-fuzz Fuzz target binary: wpantund-fuzz Job Type: libfuzzerasanwpantund Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Address: 0x000001809b60 Crash State:...

Threat Outbreak Alert RuleID30840: Email Messages Distributing Malicious Software on October 5, 2017

Medium Alert ID: 55522 First Published: 2017 October 5 14:56 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30840 may contain the following files: Name |...

Fedora Update for poppler FEDORA-2017-b29d431ac7

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

llvm: Heap-buffer-overflow in llvm::DataExtractor::getCStr

Project: https://github.com/llvm/llvm-project.git Detailed report: https://oss-fuzz.com/testcase?key=6309856848904192 Project: llvm Fuzzer: libFuzzerllvmllvm-dwarfdump-fuzzer Fuzz target binary: llvm-dwarfdump-fuzzer Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: Heap-buffer-overflow...

zstd: Heap-buffer-overflow in ZSTD_storeLastLiterals

Project: https://github.com/facebook/zstd.git Detailed report: https://oss-fuzz.com/testcase?key=4855313356292096 Project: zstd Fuzzer: libFuzzerzstdblockroundtrip Fuzz target binary: blockroundtrip Job Type: libfuzzerasanzstd Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Addres...

[SECURITY] Fedora 27 Update: git-2.14.2-2.fc27

Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. The git rpm installs common set of tools which are usually using with small amount of dependencies. To install all git packages,...

[SECURITY] Fedora 26 Update: git-2.13.6-1.fc26

Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. The git rpm installs common set of tools which are usually using with small amount of dependencies. To install all git packages,...

Threat Outbreak Alert RuleID30720: Email Messages Distributing Malicious Software on September 25, 2017

Medium Alert ID: 55377 First Published: 2017 September 25 16:15 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30720 may contain the following files: Name ...

openthread: Stack-buffer-overflow in ot::NetworkData::PrefixTlv::GetSubTlvs

Detailed report: https://oss-fuzz.com/testcase?key=5490815742771200 Project: openthread Fuzzer: libFuzzeropenthreadip6-send-fuzzer Fuzz target binary: ip6-send-fuzzer Job Type: libfuzzerasanopenthread Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address: 0x7fb823a8eb22 Crash...

Threat Outbreak Alert RuleID30654: Email Messages Distributing Malicious Software on September 18, 2017

Medium Alert ID: 55322 First Published: 2017 September 18 15:24 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30654 may contain the following files: Name ...