suricata:fuzz_applayerparserparse: Heap-use-after-free in htp_chomp

Detailed Report: https://oss-fuzz.com/testcase?key=5651773898620928 Project: suricata Fuzzing Engine: honggfuzz Fuzz Target: fuzzapplayerparserparse Job Type: honggfuzzasansuricata Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address: 0x62a00000b4f9 Crash State: htpchomp...

This Bug Could Have Let Anyone Crash WhatsApp Of All Group Members

WhatsApp, the world's most popular end-to-end encrypted messaging application, patched an incredibly frustrating software bug that could have allowed a malicious group member to crash the messaging app for all members of the same group, The Hacker News learned. Just by sending a maliciously craft...

UBUNTU-CVE-2019-10903

In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the DCERPC SPOOLSS dissector could crash. This was addressed in epan/dissectors/packet-dcerpc-spoolss.c by adding a boundary check...

CVE-2015-1860 analysis: Qt module for processing GIFs cause a crash-bug warning-the black bar safety net

Vulnerability background Qt is a cross-platform graphical interface programming Framework, and its version is less than 4. 8. 7 and 5. x is less than 5. 4. 2 analytical picture of the process for cross-border inspections of improper handling, will result in the memcpy of the process occurs out of...

SUSE SLES11 Security Update : samba (SUSE-SU-2016:3298-1)

This update for samba provides the following fixes: Security issues fixed : - CVE-2016-2125: Don't send delegated credentials to all servers. bsc1014441 - CVE-2016-2126: Prevent denial of service due to a client triggered crash in the winbindd parent process. bsc1014442 Non security issues fixed ...

SUSE-SU-2016:3298-1 Security update for samba

This update for samba provides the following fixes: Security issues fixed: - CVE-2016-2125: Don't send delegated credentials to all servers. bsc1014441 - CVE-2016-2126: Prevent denial of service due to a client triggered crash in the winbindd parent process. bsc1014442 Non security issues fixed: ...

How to Crash Your Friends' WhatsApp Just By Sending Crazy Smileys

What would require crashing the wildly popular WhatsApp messaging application? Nearly 4000 Smileys. Yes, you can crash your friends' WhatsApp, both WhatsApp Web and mobile application, by sending them not any specially crafted messages, but just Smileys. Indrajeet Bhuyan, an independent researche...

openSUSE: Security Advisory for security (openSUSE-SU-2014:0969-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Update : samba (openSUSE-SU-2013:1339-1)

"This update of samba fixed the following issues : - The pamwinbind requiremembershipof option allows for a list of SID, but currently only provides buffer space for 20; bnc806501. - Samba 3.0.x to 4.0.7 are affected by a denial of service attack on authenticated or guest connections;...

openSUSE Security Update : tor (openSUSE-SU-2012:1068-1)

Tor 0.2.2.38 fixes a rare race condition that can crash exit relays; fixes a remotely triggerable crash bug; and fixes a timing attack that could in theory leak path information. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

Fedora 19 : smb4k-1.1.2-1.fc19 (2014-6255)

New upstream release. Update to Smb4K 1.1.1, the first bug fix release of the stable 1.1 branch. This release fixes a crash bug and a potential security issue Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has...

Fedora 19 : znc-1.2-3.fc19 (2014-5214)

Fix possible crash bug Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...

SuSE Update for update openSUSE-SU-2013:1349-1 (update)

Check for the Version of update OpenVAS Vulnerability Test $Id: gbsuse201313491.nasl 8494 2018-01-23 06:57:55Z teissa $ SuSE Update for update openSUSE-SU-2013:1349-1 update Authors: System Generated Check Copyright: Copyright C 2013 Greenbone Networks GmbH, http://www.greenbone.net This program ...

Slackware: Security Advisory (SSA:2007-164-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Slackware Advisory SSA:2011-145-01 apr/apr-util

The remote host is missing an update as announced via advisory SSA:2011-145-01. OpenVAS Vulnerability Test $Id: esoftslkssa201114501.nasl 6581 2017-07-06 13:58:51Z cfischer $ Description: Auto-generated from advisory SSA:2011-145-01 Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

[slackware-security] apr/apr-util

New apr and apr-util packages are available for Slackware 11.0, 12.0, 12.1, 12.2, 13.0, 13.1, 13.37, and -current to fix a security issue in apr and a crash bug in apr-util. Here are the details from the Slackware 13.37 ChangeLog: patches/packages/apr-1.4.5-i486-1slack13.37.txz: Upgraded. This...

Security fix for the ALT Linux 5 package pidgin-mini version 2.7.2-alt1

July 24, 2010 Slava Semushin 2.7.2-alt1 - Updated to 2.7.2 + CVE-2010-2528: crash bug that can be triggered by remote users...

Fedora 12 : samba-3.4.5-55.fc12 (2010-1218)

Tue Jan 26 2010 Guenther Deschner - 3.4.5-55 - Security Release, fixes CVE-2009-3297 - resolves: 532940 - Tue Jan 26 2010 Guenther Deschner - 3.4.5-54 - Fix crash in pdbedit - resolves: 541267 - Tue Jan 19 2010 Guenther Deschner - 3.4.5-53 - Update to 3.4.5 - Thu Jan 14 2010 Guenther Deschner -...

Mozilla Fixes Crash Bug in Firefox Update

Mozilla has pushed out a new version of its browser to fix a crash bug inadvertently introduced in its latest Firefox update. Firefox 3.5.5, which Mozilla posted for download late Thursday, fixes a small number of what the company called “stability issues” in the release notes that accompanied th...

Crash in Alpha Black Zero 1.04

Luigi Auriemma Application: Alpha Black Zero: Intrepid Protocol http://www.playlogicgames.nl/abz/ Versions: = 1.04 Platforms: Windows Bug: crash Risk: medium Exploitation: remote, versus server Date: 29 September 2004 Author: Luigi Auriemma e-mail: [email protected] web:...