mupdf/pdf_fuzzer: Use-of-uninitialized-value in fz_adjust_ft_glyph_width

Project: git://git.ghostscript.com/mupdf.git Detailed report: https://oss-fuzz.com/testcase?key=5817553579409408 Project: mupdf Fuzzer: libFuzzermupdfpdffuzzer Fuzz target binary: pdffuzzer Job Type: libfuzzermsanmupdf Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

imagemagick/encoder_pdb_fuzzer: Use-of-uninitialized-value in ReadPDBImage

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=4872539105918976 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderpdbfuzzer Fuzz target binary: encoderpdbfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

imagemagick/encoder_dcm_fuzzer: Use-of-uninitialized-value in IsPixelGray

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5265350707904512 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderdcmfuzzer Fuzz target binary: encoderdcmfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

CVE-2017-13221

An elevation of privilege vulnerability in the Upstream kernel wifi driver. Product: Android. Versions: Android kernel. Android ID: A-64709938...

libreoffice/ww8fuzzer: Bad-cast to SwContentNode from SwClient in SwNode::GetContentNode

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5558739118587904 Project: libreoffice Fuzzer: libFuzzerlibreofficeww8fuzzer Fuzz target binary: ww8fuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type: Bad-cast Crash...

open62541/fuzz_binary_message: Use-of-uninitialized-value in UA_SecureChannel_deleteMembersCleanup

Project: https://github.com/open62541/open62541.git Detailed report: https://oss-fuzz.com/testcase?key=5307098192674816 Project: open62541 Fuzzer: libFuzzeropen62541fuzzbinarymessage Fuzz target binary: fuzzbinarymessage Job Type: libfuzzermsanopen62541 Platform Id: linux Crash Type:...

bind: Improper fetch cleanup sequencing in the resolver can cause named to crash

A use-after-free flaw leading to denial of service was found in the way BIND internally handled cleanup operations on upstream recursion fetch contexts. A remote attacker could potentially use this flaw to make named, acting as a DNSSEC validating resolver, exit unexpectedly with an assertion...

bind: Improper fetch cleanup sequencing in the resolver can cause named to crash

A use-after-free flaw leading to denial of service was found in the way BIND internally handled cleanup operations on upstream recursion fetch contexts. A remote attacker could potentially use this flaw to make named, acting as a DNSSEC validating resolver, exit unexpectedly with an assertion...

ffmpeg/ffmpeg_AV_CODEC_ID_SCPR_fuzzer: Heap-buffer-overflow in decompress_p

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=6122458273808384 Project: ffmpeg Fuzzer: aflffmpegAVCODECIDSCPRfuzzer Fuzz target binary: ffmpegAVCODECIDSCPRfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Cras...

libreoffice/xlsfuzzer: Heap-use-after-free in ScAddress::ScAddress

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=6359195528986624 Project: libreoffice Fuzzer: libFuzzerlibreofficexlsfuzzer Fuzz target binary: xlsfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-use-after-fre...

mupdf/pdf_fuzzer: Stack-buffer-overflow in pdf_lookup_cmap_full

Project: git://git.ghostscript.com/mupdf.git Detailed report: https://oss-fuzz.com/testcase?key=5267574158786560 Project: mupdf Fuzzer: aflmupdfpdffuzzer Fuzz target binary: pdffuzzer Job Type: aflasanmupdf Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 4 Crash Address: 0x7f86eb165ec0...

Gone Phishing For The Holidays

Written by Or Katz and Amiram Cohen Overview: While our team, Akamai's Enterprise Threat Protector Security Research Team, monitored internet traffic throughout the 2017 holiday season, we spotted a wide-spread phishing campaign targeting users through an advertising tactic. During the six week...

OracleVM 3.4 : microcode_ctl (OVMSA-2018-0011) (Spectre)

The remote OracleVM system is missing necessary patches to address critical security updates : - Enable early microcode load to allow updating Broadwell model 79 - Make sure 'modprobe microcode' is not executed on Broadwell model 79 - Run dracut upon microcode update - Add updated Intel 20180108...

imagemagick/encoder_psd_fuzzer: Use-of-uninitialized-value in ScaleQuantumToShort

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5941577940729856 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderpsdfuzzer Fuzz target binary: encoderpsdfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

imagemagick/encoder_xpm_fuzzer: Use-of-uninitialized-value in ParseCommandOption

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5459937892237312 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderxpmfuzzer Fuzz target binary: encoderxpmfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

CVE-2017-3145

BIND was improperly sequencing cleanup operations on upstream recursion fetch contexts, leading in some cases to a use-after-free error that can trigger an assertion failure and crash in named. Affects BIND 9.0.0 to 9.8.x, 9.9.0 to 9.9.11, 9.10.0 to 9.10.6, 9.11.0 to 9.11.2, 9.9.3-S1 to 9.9.11-S1...

libreoffice/htmlfuzzer: Heap-use-after-free in HTMLAttr::GetNext

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5700230038159360 Project: libreoffice Fuzzer: libFuzzerlibreofficehtmlfuzzer Fuzz target binary: htmlfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type:...

imagemagick/encoder_pict_fuzzer: Use-of-uninitialized-value in ScaleQuantumToChar

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=6067117821526016 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderpictfuzzer Fuzz target binary: encoderpictfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

Fedora 27 : varnish (2017-72b50be8d4)

Security fix for CVE-2017-8807: This fixes a possible data leak in stevedore transient objects in varnishd. Upstream reports: 'It is not inconceiveable that an attack can provoke this situation on vulnerable varnishd instances, where the leaked memory contains confidential data and therefore we...

knot-dns/fuzz_zscanner: Stack-buffer-overflow in parse

Project: https://gitlab.labs.nic.cz/knot/knot-dns Detailed report: https://oss-fuzz.com/testcase?key=4889981102325760 Project: knot-dns Fuzzer: libFuzzerknot-dnsfuzzzscanner Fuzz target binary: fuzzzscanner Job Type: libfuzzerasanknot-dns Platform Id: linux Crash Type: Stack-buffer-overflow WRITE...