strongswan/fuzz_certs: Crash in asn1_length

Detailed report: https://oss-fuzz.com/testcase?key=4842326636625920 Project: strongswan Fuzzer: aflstrongswanfuzzcerts Fuzz target binary: fuzzcerts Job Type: aflasanstrongswan Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7ffc00000003 Crash State: asn1length iterate...

librawspeed/PanasonicDecompressorFuzzer: Heap-buffer-overflow in rawspeed::PanasonicDecompressor::PanaBitpump::getBits

Project: https://github.com/darktable-org/rawspeed.git Detailed report: https://oss-fuzz.com/testcase?key=4816034927214592 Project: librawspeed Fuzzer: afllibrawspeedPanasonicDecompressorFuzzer Fuzz target binary: PanasonicDecompressorFuzzer Job Type: aflasanlibrawspeed Platform Id: linux Crash...

unrar/unrar_fuzzer: Use-of-uninitialized-value in QuickOpen::Read

Project: https://github.com/aawc/unrar.git Detailed report: https://oss-fuzz.com/testcase?key=5101043319832576 Project: unrar Fuzzer: libFuzzerunrarfuzzer Fuzz target binary: unrarfuzzer Job Type: libfuzzermsanunrar Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

libreoffice/xlsfuzzer: Heap-buffer-overflow in ScCompressedArray<short, unsigned short>::Iterator::operator++

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=6716895815270400 Project: libreoffice Fuzzer: libFuzzerlibreofficexlsfuzzer Fuzz target binary: xlsfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-buffer-overfl...

unrar/unrar_fuzzer: Use-of-uninitialized-value in wcsncatz

Project: https://github.com/aawc/unrar.git Detailed report: https://oss-fuzz.com/testcase?key=5673561487310848 Project: unrar Fuzzer: libFuzzerunrarfuzzer Fuzz target binary: unrarfuzzer Job Type: libfuzzermsanunrar Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

libreoffice/scrtffuzzer: Index-out-of-bounds in ScCompiler::IsReference

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5247280077602816 Project: libreoffice Fuzzer: libFuzzerlibreofficescrtffuzzer Fuzz target binary: scrtffuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type:...

gdal/gtiff_fuzzer: Crash in TIFFFillTile

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=6518095486124032 Project: gdal Fuzzer: libFuzzergdalgtifffuzzer Fuzz target binary: gtifffuzzer Job Type: libfuzzerubsangdal Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7ff53c4aaa40 Cras...

llvm/llvm-special-case-list-fuzzer: Heap-buffer-overflow in p_ere

Project: https://github.com/llvm/llvm-project.git Detailed report: https://oss-fuzz.com/testcase?key=5450169182060544 Project: llvm Fuzzer: libFuzzerllvmllvm-special-case-list-fuzzer Fuzz target binary: llvm-special-case-list-fuzzer Job Type: libfuzzerasanllvm Platform Id: linux Crash Type:...

llvm/llvm-special-case-list-fuzzer: Heap-buffer-overflow in p_ere

Project: https://github.com/llvm/llvm-project.git Detailed report: https://oss-fuzz.com/testcase?key=5235826691670016 Project: llvm Fuzzer: libFuzzerllvmllvm-special-case-list-fuzzer Fuzz target binary: llvm-special-case-list-fuzzer Job Type: libfuzzerasanllvm Platform Id: linux Crash Type:...

Xxe

XML external entity XXE vulnerability in Apache ActiveMQ Apollo 1.x before 1.7.1 allows remote consumers to have unspecified impact via vectors involving an XPath based selector when dequeuing XML messages...

CVE-2014-3600

XML external entity XXE vulnerability in Apache ActiveMQ 5.x before 5.10.1 allows remote consumers to have unspecified impact via vectors involving an XPath based selector when dequeuing XML messages...

CVE-2014-3600

CVE-2014-3600 is an XML external entity (XXE) vulnerability in Apache ActiveMQ 5.x prior to 5.10.1. The issue allows remote consumers to trigger an XXE via an XPath-based selector when dequeuing XML messages, potentially exposing sensitive data. Public sources in the connected docs confirm Active...

llvm/clang-fuzzer: Stack-buffer-overflow in clang::Lexer::LexAngledStringLiteral

Project: https://github.com/llvm/llvm-project.git Detailed report: https://oss-fuzz.com/testcase?key=5625920451772416 Project: llvm Fuzzer: libFuzzerllvmclang-fuzzer Fuzz target binary: clang-fuzzer Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash...

llvm/llvm-dwarfdump-fuzzer: Heap-buffer-overflow in llvm::identify_magic

Project: https://github.com/llvm/llvm-project.git Detailed report: https://oss-fuzz.com/testcase?key=6095520196984832 Project: llvm Fuzzer: libFuzzerllvmllvm-dwarfdump-fuzzer Fuzz target binary: llvm-dwarfdump-fuzzer Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: Heap-buffer-overflow...

proj4

Detailed report: https://oss-fuzz.com/testcase?key=6241468688629760 Project: proj4 Fuzzer: libFuzzerproj4standardfuzzer Fuzz target binary: standardfuzzer Job Type: libfuzzerubsanproj4 Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: NULL Sanitizer:...

open62541/fuzz_binary_message: Crash in UA_SecureChannel_processChunk

Project: https://github.com/open62541/open62541.git Detailed report: https://oss-fuzz.com/testcase?key=6734765949452288 Project: open62541 Fuzzer: libFuzzeropen62541fuzzbinarymessage Fuzz target binary: fuzzbinarymessage Job Type: libfuzzerubsanopen62541 Platform Id: linux Crash Type: UNKNOWN REA...

dlplibs: Heap-buffer-overflow in ucnv_UTF8FromUTF8

Detailed report: https://oss-fuzz.com/testcase?key=6715693878738944 Project: dlplibs Fuzzer: libFuzzerdlplibspdbfuzzer Fuzz target binary: pdbfuzzer Job Type: libfuzzerasandlplibs Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x604000000afc Crash State: ucnvUTF8FromUTF...

IC3 Issues Alert on Disaster-Related Fraud

The Internet Crime Complaint Center IC3 has released an announcement on fraudulent cyber activity related to natural disasters. IC3 reports that scammers have recently used email and social-networking sites to solicit money from disaster victims with scams on false temporary housing and job...

Protecting Confidential Data: You May Not Be as Secure as You Think

Part One of a Three Part Series Unless you have been out of the country or otherwise shunning the news, you have likely heard that on September 7th and again on September 15th, Equifax reported that it suffered a security incident from May 13th through July 30th, 2017. This breach is broad reachi...

Introducing pywintrace: A Python Wrapper for ETW

Introduction Event tracing for Windows ETW is a lightweight logging facility first introduced with Windows 2000. Originally intended as a software diagnostic, troubleshooting and performance monitoring tool, it was greatly expanded in Windows Vista to create a lightweight debugging mechanism. The...