pillow:fuzz_pillow: Heap-buffer-overflow in ImagingFliDecode

Project: https://github.com/python-pillow/Pillow.git Detailed Report: https://oss-fuzz.com/testcase?key=5762152299364352 Project: pillow Fuzzing Engine: libFuzzer Fuzz Target: fuzzpillow Job Type: libfuzzerasanpillow Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address:...

OESA-2021-1286 libexif security update

Most digital cameras produce EXIF files, which are JPEG files with extra tags that contain information about the image. The EXIF library allows you to parse an EXIF file and read the data from those tags. Security Fixes: An issue was discovered in libexif before 0.6.22. Use of uninitialized memor...

Open vSwitch (aka openvswitch) 2.11.0 through 2.15.0 has a use-after-free in decode_NXAST_RAW_ENCAP (called from ofpact_decode and ofpacts_decode) during the decoding of a RAW_ENCAP action.

...

libjxl:djxl_fuzzer: Use-of-uninitialized-value in jxl::N_AVX2::AddNoise

Project: https://github.com/libjxl/libjxl.git Detailed Report: https://oss-fuzz.com/testcase?key=4820115823656960 Project: libjxl Fuzzing Engine: libFuzzer Fuzz Target: djxlfuzzer Job Type: libfuzzermsanlibjxl Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

CVE-2021-36980

Open vSwitch aka openvswitch has a use-after-free in decodeNXASTRAWENCAP called from ofpactdecode and ofpactsdecode during the decoding of a RAWENCAP action...

DEBIAN-CVE-2021-36980

Open vSwitch aka openvswitch 2.11.0 through 2.15.0 has a use-after-free in decodeNXASTRAWENCAP called from ofpactdecode and ofpactsdecode during the decoding of a RAWENCAP action...

AZL-6781 CVE-2021-36980 affecting package openvswitch for versions less than 2.17.0-1

Open vSwitch aka openvswitch 2.11.0 through 2.15.0 has a use-after-free in decodeNXASTRAWENCAP called from ofpactdecode and ofpactsdecode during the decoding of a RAWENCAP action...

UBUNTU-CVE-2021-36980

Open vSwitch aka openvswitch 2.11.0 through 2.15.0 has a use-after-free in decodeNXASTRAWENCAP called from ofpactdecode and ofpactsdecode during the decoding of a RAWENCAP action...

vSwitch Open resource management error vulnerability

Open vSwitch is an open source virtual switch. A resource management error vulnerability exists in Open vSwitch a.k.a. openvswitch versions 2.11.0 through 2.15.0, which stems from the fact that in decodeNXASTRAWENCAP invoked from ofpactdecode and ofpactsdecode there is during decoding the RAWENCA...

libsndfile buffer error vulnerability

libsndfile is an AC library for reading and writing sound files containing sampled audio data. A security vulnerability exists in libsndfile 1.0.30, which stems from a heap buffer overflow vulnerability in the msadpcm decoding block allows an attacker to execute arbitrary code via a crafted WAV...

CVE-2021-36980

CVE-2021-36980 affects Open vSwitch (openvswitch) versions 2.11.0 through 2.15.0, with a use-after-free in decode_NXAST_RAW_ENCAP during decoding of RAW_ENCAP actions. Affected components: Open vSwitch core handling of OPENFLOW NXT actions (decode of RAW_ENCAP). Reported impact in advisories indi...

ok-file-formats buffer error vulnerability

ok-file-formats is an open source decoder for PNG, JPEG, WAV and several other file formats. A security vulnerability exists in ok-file-formats, which stems from a vulnerability that allows an attacker to cause a denial of service DOS via a crafted jpeg file...

CVE-2021-24117

In Apache Teaclave Rust SGX SDK 1.1.3, a side-channel vulnerability in base64 PEM file decoding allows system-level administrator attackers to obtain information about secret RSA keys via a controlled-channel and side-channel attack on software running in isolated environments that can be single...

CVE-2021-24119

In Trusted Firmware Mbed TLS 2.24.0, a side-channel vulnerability in base64 PEM file decoding allows system-level administrator attackers to obtain information about secret RSA keys via a controlled-channel and side-channel attack on software running in isolated environments that can be single...

CVE-2021-24116

In wolfSSL through 4.6.0, a side-channel vulnerability in base64 PEM file decoding allows system-level administrator attackers to obtain information about secret RSA keys via a controlled-channel and side-channel attack on software running in isolated environments that can be single stepped,...

DEBIAN-CVE-2021-24116

In wolfSSL through 4.6.0, a side-channel vulnerability in base64 PEM file decoding allows system-level administrator attackers to obtain information about secret RSA keys via a controlled-channel and side-channel attack on software running in isolated environments that can be single stepped,...

DEBIAN-CVE-2021-24119

In Trusted Firmware Mbed TLS 2.24.0, a side-channel vulnerability in base64 PEM file decoding allows system-level administrator attackers to obtain information about secret RSA keys via a controlled-channel and side-channel attack on software running in isolated environments that can be single...

User Enumeration

Overview Affected versions of this package are vulnerable to User Enumeration. In wolfSSL through 4.6.0, a side-channel vulnerability in base64 PEM file decoding allows system-level administrator attackers to obtain information about secret RSA keys via a controlled-channel and side-channel attac...

UBUNTU-CVE-2021-24119

In Trusted Firmware Mbed TLS 2.24.0, a side-channel vulnerability in base64 PEM file decoding allows system-level administrator attackers to obtain information about secret RSA keys via a controlled-channel and side-channel attack on software running in isolated environments that can be single...

UBUNTU-CVE-2021-24116

In wolfSSL through 4.6.0, a side-channel vulnerability in base64 PEM file decoding allows system-level administrator attackers to obtain information about secret RSA keys via a controlled-channel and side-channel attack on software running in isolated environments that can be single stepped,...