poppler/pdf_fuzzer: Use-of-uninitialized-value in clip01

Project: https://anongit.freedesktop.org/git/poppler/poppler.git https://gitlab.freedesktop.org/poppler/poppler.git https://gitlab.freedesktop.org/ceyhunalp/poppler.git Detailed report: https://oss-fuzz.com/testcase?key=5669907504037888 Project: poppler Fuzzer: libFuzzerpopplerpdffuzzer Fuzz targ...

imagemagick/encoder_mvg_fuzzer: Heap-buffer-overflow in CheckPrimitiveExtent

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5137949766189056 Project: imagemagick Fuzzer: aflimagemagickencodermvgfuzzer Fuzz target binary: encodermvgfuzzer Job Type: aflasanimagemagick Platform Id: linux Crash Type:...

sqlite3/ossfuzz: Use-of-uninitialized-value in whereLoopAddAll

Detailed report: https://oss-fuzz.com/testcase?key=6257131337547776 Project: sqlite3 Fuzzer: libFuzzersqlite3ossfuzz Fuzz target binary: ossfuzz Job Type: libfuzzermsansqlite3 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: whereLoopAddAll sqlite3WhereBegin...

poppler/pdf_fuzzer: Use-of-uninitialized-value in FT_Set_Transform

Project: https://anongit.freedesktop.org/git/poppler/poppler.git https://gitlab.freedesktop.org/poppler/poppler.git https://gitlab.freedesktop.org/ceyhunalp/poppler.git Detailed report: https://oss-fuzz.com/testcase?key=4854502862618624 Project: poppler Fuzzer: libFuzzerpopplerpdffuzzer Fuzz targ...

libcoap/pdu_parse_fuzzer: Heap-buffer-overflow in coap_opt_parse

Project: https://github.com/obgm/libcoap.git Detailed report: https://oss-fuzz.com/testcase?key=5676475918319616 Project: libcoap Fuzzer: libFuzzerlibcoappduparsefuzzer Fuzz target binary: pduparsefuzzer Job Type: libfuzzerasanlibcoap Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Cra...

envoy/h1_capture_fuzz_test: Heap-use-after-free in Envoy::IntegrationUtil::makeSingleRequest

Detailed report: https://oss-fuzz.com/testcase?key=5090066358599680 Project: envoy Fuzzer: libFuzzerenvoyh1capturefuzztest Fuzz target binary: h1capturefuzztest Job Type: libfuzzerasanenvoy Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x60b006c81240 Crash State:...

qcms/fuzz: Use-of-uninitialized-value in clamp_float

Detailed report: https://oss-fuzz.com/testcase?key=6234196346404864 Project: qcms Fuzzer: libFuzzerqcmsfuzz Fuzz target binary: fuzz Job Type: libfuzzermsanqcms Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: clampfloat qcmstransformmodulematrix...

envoy/server_fuzz_test: Stack-buffer-overflow in grpc_parse_ipv6_hostport

Project: https://github.com/envoyproxy/envoy.git Detailed report: https://oss-fuzz.com/testcase?key=5759581388013568 Project: envoy Fuzzer: libFuzzerenvoyserverfuzztest Fuzz target binary: serverfuzztest Job Type: libfuzzerasanenvoy Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash...

poppler/pdf_fuzzer: Use-of-uninitialized-value in JBIG2Bitmap::getSlice

Project: https://anongit.freedesktop.org/git/poppler/poppler.git https://gitlab.freedesktop.org/poppler/poppler.git https://gitlab.freedesktop.org/ceyhunalp/poppler.git Detailed report: https://oss-fuzz.com/testcase?key=5086816502808576 Project: poppler Fuzzer: libFuzzerpopplerpdffuzzer Fuzz targ...

[ASA-201806-2] radare2: multiple issues

Arch Linux Security Advisory ASA-201806-2 ========================================= Severity: High Date : 2018-06-05 CVE-ID : CVE-2018-11375 CVE-2018-11376 CVE-2018-11377 CVE-2018-11378 CVE-2018-11379 CVE-2018-11380 CVE-2018-11381 CVE-2018-11382 CVE-2018-11383 CVE-2018-11384 Package : radare2 Typ...

Fedora 27 : git (2018-080a3d7866)

Upstream security fixes related to .gitmodules handling. From the upstream announcement : - Submodule 'names' come from the untrusted .gitmodules file, but we blindly append them to $GITDIR/modules to create our on-disk repo paths. This means you can do bad things by putting '../' into the name. ...

systemd/fuzz-journal-remote: Use-of-uninitialized-value in ascii_is_valid

Project: https://github.com/systemd/systemd.git Detailed report: https://oss-fuzz.com/testcase?key=5661112182767616 Project: systemd Fuzzer: libFuzzersystemdfuzz-journal-remote Fuzz target binary: fuzz-journal-remote Job Type: libfuzzermsansystemd Platform Id: linux Crash Type:...

poppler/pdf_fuzzer: Use-of-uninitialized-value in JBIG2Bitmap::getPixelPtr

Project: https://anongit.freedesktop.org/git/poppler/poppler.git https://gitlab.freedesktop.org/poppler/poppler.git https://gitlab.freedesktop.org/ceyhunalp/poppler.git Detailed report: https://oss-fuzz.com/testcase?key=4544550004588544 Project: poppler Fuzzer: libFuzzerpopplerpdffuzzer Fuzz targ...

procps security update

CentOS Errata and Security Advisory CESA-2018:1700 An update for procps-ng is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severi...

poppler/pdf_fuzzer: Use-of-uninitialized-value in CMap::addCIDs

Project: https://anongit.freedesktop.org/git/poppler/poppler.git https://gitlab.freedesktop.org/poppler/poppler.git https://gitlab.freedesktop.org/ceyhunalp/poppler.git Detailed report: https://oss-fuzz.com/testcase?key=4571071134040064 Project: poppler Fuzzer: libFuzzerpopplerpdffuzzer Fuzz targ...

graphicsmagick/coder_DCM_fuzzer: Use-of-uninitialized-value in DCM_PostRescaleImage

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=6591948298125312 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderDCMfuzzer Fuzz target binary: coderDCMfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type:...

graphicsmagick/coder_MNG_fuzzer: Use-of-uninitialized-value in ReadMNGImage

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=5262232706351104 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderMNGfuzzer Fuzz target binary: coderMNGfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type:...

poppler/pdf_fuzzer: Use-of-uninitialized-value in isSameGfxColor

Project: https://anongit.freedesktop.org/git/poppler/poppler.git https://gitlab.freedesktop.org/poppler/poppler.git https://gitlab.freedesktop.org/ceyhunalp/poppler.git Detailed report: https://oss-fuzz.com/testcase?key=5734074458046464 Project: poppler Fuzzer: libFuzzerpopplerpdffuzzer Fuzz targ...

icu/number_format_fuzzer: NULL

Detailed report: https://oss-fuzz.com/testcase?key=5066746749779968 Project: icu Fuzzer: libFuzzericunumberformatfuzzer Fuzz target binary: numberformatfuzzer Job Type: libfuzzermsanicu Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0077656e2f10 Crash State: NULL Sanitizer: memory...

graphicsmagick/coder_PCD_fuzzer: Unknown signal in RenderFreetype

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=5691209342255104 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderPCDfuzzer Fuzz target binary: coderPCDfuzzer Job Type: libfuzzerubsangraphicsmagick Platform Id: linux Crash Type:...