32 matches found
clusterfuzz
ClusterFuzz ClusterFuzz 是一个可扩展的模糊测试基础设施，用于发现软件中的安全性和稳定性问题。 Google 使用 ClusterFuzz 对所有 Google 产品进行模糊测试，并作为 OSS-Fuzz 的模糊测试后端。 ClusterFuzz 提供了许多功能，帮助将模糊测试无缝集成到软件项目的开发过程中： 高度可扩展。可在任何规模的集群上运行（例如 OSS-Fuzz 实例在 100,000 台虚拟机上运行）。 精确的崩溃去重。 完全自动的漏洞提交、分类和关闭，支持多种问题追踪器（例如 Monorail、Jira）。...
honggfuzz
Honggfuzz A security-oriented, feedback-driven, evolutionary fuzzer. Honggfuzz is a general-purpose fuzzer that uses code coverage software and hardware-based to find bugs. It is multi-process, multi-threaded, and supports persistent fuzzing for extreme speed. Key Features Fast : Multi-process an...
oss-fuzz
OSS-Fuzz：开源软件的持续模糊测试 模糊测试是一种广为人知的用于发现软件中编程错误的技术。许多这类可检测的错误，例如缓冲区溢出，可能具有严重的安全隐患。Google 通过部署对 Chrome 组件的引导式进程内模糊测试已发现数千个安全漏洞和稳定性缺陷，现在我们希望与开源社区共享这一服务。 与核心基础设施倡议和OpenSSF合作，OSS-Fuzz 旨在通过结合现代模糊测试技术与可扩展的分布式执行，使常见的开源软件更加安全稳定。不符合 OSS-Fuzz 条件（例如闭源软件）的项目可以运行自己的 ClusterFuzz 或 ClusterFuzzLite 实例。 我们支持...
GHSA-4JQ9-2XHW-JPX7 Java: DoS Vulnerability in JSON-JAVA
Summary A denial of service vulnerability in JSON-Java was discovered by ClusterFuzz. A bug in the parser means that an input string of modest size can lead to indefinite amounts of memory being used. There are two issues: 1 the parser bug can be used to circumvent a check that is supposed to...
gitea -- multiple vulnerabilities
The Gitea Team reports for release 1.13.7: Update to bluemonday-1.0.6 Clusterfuzz found another way...
[SECURITY] [DLA 2612-1] leptonlib security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-2612-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz March 31, 2021 https://wiki.debian.org/LTS -...
gitea -- multiple vulnerabilities
The Gitea Team reports for release 1.13.6: Fix bug on avatar middleware Fix another clusterfuzz identified issue...
Microsoft Internet Explorer: READ in CAnimatablePropertyListElement::GetCurrentValues:
Clusterfuzz crash Recent assessments: busterb at May 09, 2019 5:57pm UTC reported: Not exploitable other than for crashing a browser, probably not that useful though. Assessed Attacker Value: 1 Assessed Attacker Value: 1Assessed Attacker Value: 5...
libreoffice: Heap-buffer-overflow in MakePreview
Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=5385827211280384 Project: libreoffice Fuzzer: libFuzzerlibreofficeepsfuzzer Fuzz target binary: epsfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type...
lcms: Heap-buffer-overflow in TetrahedralInterpFloat
Project: https://github.com/mm2/Little-CMS.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=5333448038285312 Project: lcms Fuzzer: libFuzzerlcmscmstransformfuzzer Fuzz target binary: cmstransformfuzzer Job Type: libfuzzerasanlcms Platform Id: linux Crash Type:...
libtsm: Global-buffer-overflow in vte_write_debug
Project: git://people.freedesktop.org/dvdhrm/libtsm Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=5588673684832256 Project: libtsm Fuzzer: libFuzzerlibtsmfuzzer Fuzz target binary: libtsmfuzzer Job Type: libfuzzerasanlibtsm Platform Id: linux Crash Type:...
libreoffice: Crash in WinMtfOutput::DrawText
Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=6116030539628544 Project: libreoffice Fuzzer: libFuzzerlibreofficewmffuzzer Fuzz target binary: wmffuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type...
libass: Attempting free in ass_free_track
Project: https://github.com/libass/libass.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=6177355424858112 Project: libass Fuzzer: libFuzzerlibassfuzzer Fuzz target binary: libassfuzzer Job Type: libfuzzerasanlibass Platform Id: linux Crash Type: Attempting free Crash...
irssi: Attempting free in g_string_append_vprintf
Project: https://github.com/irssi/irssi.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=4984573649747968 Project: irssi Fuzzer: libFuzzerirssiirssi-fuzz Fuzz target binary: irssi-fuzz Job Type: libfuzzerasanirssi Platform Id: linux Crash Type: Attempting free Crash...
json: Use-of-uninitialized-value in nlohmann::basic_json<std::__1::map, std::__1::vector, std::__1::basic_string<cha
Project: https://github.com/nlohmann/json.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=6051806467588096 Project: json Fuzzer: libFuzzerjsonfuzzer-parsecbor Fuzz target binary: fuzzer-parsecbor Job Type: libfuzzermsanjson Platform Id: linux Crash Type:...
freetype2: Heap-buffer-overflow in cff_parser_run
Project: https://github.com/freetype/freetype2-testing.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=5067461904826368 Project: freetype2 Fuzzer: libFuzzerfreetype2ftfuzzer Fuzz target binary: ftfuzzer Job Type: libfuzzerasanfreetype2 Platform Id: linux Crash Type:...
lcms: Crash in NextCh
Project: https://github.com/mm2/Little-CMS.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=6555791318319104 Project: lcms Fuzzer: libFuzzerlcmscmsIT8loadfuzzer Fuzz target binary: cmsIT8loadfuzzer Job Type: libfuzzerasanlcms Platform Id: linux Crash Type: UNKNOWN READ...
libarchive: Heap-buffer-overflow in lzx_decode_blocks
Project: https://github.com/libarchive/libarchive.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=5879290751090688 Project: libarchive Fuzzer: libFuzzerlibarchivefuzzer Fuzz target binary: libarchivefuzzer Job Type: libfuzzerasanlibarchive Platform Id: linux Crash Type:...
icu: Heap-buffer-overflow in utext_previous32_58
Project: https://github.com/unicode-org/icu.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=5560648738013184 Project: icu Fuzzer: libFuzzericuucasemapfuzzer Fuzz target binary: ucasemapfuzzer Job Type: libfuzzerasanicu Platform Id: linux Crash Type: Heap-buffer-overflow...
libarchive: Heap-buffer-overflow in archive_le32dec
Project: https://github.com/libarchive/libarchive.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=4591448766808064 Target: libarchive Fuzzer: libFuzzerlibarchivefuzzer Fuzzer binary: libarchivefuzzer Job Type: libfuzzerasanlibarchive Platform Id: linux Crash Type:...