cryptofuzz:cryptofuzz-openssl: Null-dereference READ with empty stacktrace

Project: https://github.com/guidovranken/cryptofuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=5884944464347136 Project: cryptofuzz Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-openssl Job Type: libfuzzerasancryptofuzz Platform Id: linux Crash Type: Null-dereference READ Crash...

CVE-2013-1054

The unity-firefox-extension package could be tricked into destroying the Unity webapps context, causing Firefox to crash. This could be achieved by spinning the event loop inside the webapps initialization callback. Fixed in 3.0.0+14.04.20140416-0ubuntu1.14.04.1 by shipping an empty package, thus...

CVE-2013-1055

The unity-firefox-extension package could be tricked into dropping a C callback which was still in use, which Firefox would then free, causing Firefox to crash. This could be achieved by adding an action to the launcher and updating it with new callbacks until the libunity-webapps rate limit was...

UBUNTU-CVE-2013-1054

The unity-firefox-extension package could be tricked into destroying the Unity webapps context, causing Firefox to crash. This could be achieved by spinning the event loop inside the webapps initialization callback. Fixed in 3.0.0+14.04.20140416-0ubuntu1.14.04.1 by shipping an empty package, thus...

Firefox unity-firefox-extension 安全漏洞

Firefox unity-firefox-extension is a Firefox open source application plug-in . A security vulnerability exists in Firefox unity-firefox-extension that originates from sending an empty unity-firefox-extension package, which completely disables the extension and invalidates attacks against the libu...

UnionPay android 数据伪造问题漏洞

UnionPay is an application system of China UnionPay Corporation UnionPay. A data forgery issue vulnerability exists in UnionPay for android versions prior to 3.4.93.4.9, which stems from not properly verifying cryptographic signatures, and can be exploited by an attacker to make free purchases on...

UnionPay IOS 数据伪造问题漏洞

UnionPay IOS is an application of China UnionPay Corporation UnionPay in China. Union Pay ios 3.3.12 suffers from a security vulnerability that originates from incorrectly verified password signatures, which can be exploited by an attacker to make free purchases on merchant websites and mobile ap...

Qualcomm 芯片 缓冲区错误漏洞

A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way to miniaturize circuits mainly semiconductor devices, but also passive components, etc., and from time to time are manufactured on the surface of semiconductor wafers. A security vulnerability exists in a number of Qualcomm products,...

assimp:assimp_fuzzer: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5501770487955456 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzerubsanassimp Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7f5ce0f66b60 Crash State: NULL Sanitizer: undefined UBSAN Recommended...

thrift:fuzz_go_tutorial: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5447657993666560 Project: thrift Fuzzing Engine: libFuzzer Fuzz Target: fuzzgotutorial Job Type: libfuzzerasanthrift Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x10c0001c8000 Crash State: NULL Sanitizer: address ASAN Recommended...

wolfmqtt:wolfmqtt-fuzzer: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6257713320427520 Project: wolfmqtt Fuzzing Engine: libFuzzer Fuzz Target: wolfmqtt-fuzzer Job Type: libfuzzermsanwolfmqtt Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7f1e5300000c Crash State: NULL Sanitizer: memory MSAN Recommend...

istio:fuzz_parse_inputs: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5240914273501184 Project: istio Fuzzing Engine: libFuzzer Fuzz Target: fuzzparseinputs Job Type: libfuzzerasanistio Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0000216c95a8 Crash State: NULL Sanitizer: address ASAN Recommended...

lxc:fuzz-lxc-config-read: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5954362917650432 Project: lxc Fuzzing Engine: libFuzzer Fuzz Target: fuzz-lxc-config-read Job Type: libfuzzerubsanlxc Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7feb65de4a90 Crash State: NULL Sanitizer: undefined UBSAN Recommend...

ghostscript:gstoraster_fuzzer: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5559346722373632 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000003cc0f70 Crash State: NULL Sanitizer: address ASAN...

imagemagick:ping_dng_fuzzer: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4958819932307456 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: pingdngfuzzer Job Type: libfuzzerasani386imagemagick Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xf1d00000 Crash State: NULL Sanitizer: address ASAN...

An issue was discovered in GNOME GLib before 2.66.8. When g_file_replace() is used with G_FILE_CREATE_REPLACE_DESTINATION to replace a path that is a dangling symlink it incorrectly also creates the target of the symlink as an empty file which could conceivably have security relevance if the symlink is attacker-controlled. (If the path is a symlink to a file that already exists then the contents of that file correctly remain unchanged.)

...

fio:fuzz_parseini: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4906811057635328 Project: fio Fuzzing Engine: libFuzzer Fuzz Target: fuzzparseini Job Type: libfuzzerubsanfio Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x00019ce51030 Crash State: NULL Sanitizer: undefined UBSAN Recommended...

USN-4848-1 mini-httpd vulnerability

It was discovered that ACME minihttpd did not properly handle HTTP GET requests with empty headers. A remote attacker could use this vulnerability to read arbitrary files...

BELL-CVE-2021-28375 CVE-2021-28375 does not affect BellSoft software

Bulletin has no description...

wolfmqtt:wolfmqtt-fuzzer: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6259743959154688 Project: wolfmqtt Fuzzing Engine: libFuzzer Fuzz Target: wolfmqtt-fuzzer Job Type: libfuzzermsanwolfmqtt Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xffffd623e8ff8958 Crash State: NULL Sanitizer: memory MSAN...