ghostscript:gs_device_pdfwrite_fuzzer: Heap-buffer-overflow in Ins_NPUSHW

Detailed Report: https://oss-fuzz.com/testcase?key=5279742755995648 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicepdfwritefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x631000128830 Crash State: InsNPUSHW...

spring-framework:TransactionAttributeSourceEditorFuzzer: Security exception in org.springframework.util.PatternMatchUtils.simpleMatch

Project: https://github.com/spring-projects/spring-framework.git Detailed Report: https://oss-fuzz.com/testcase?key=6599219590332416 Project: spring-framework Fuzzing Engine: libFuzzer Fuzz Target: TransactionAttributeSourceEditorFuzzer Job Type: libfuzzerasanspring-framework Platform Id: linux...

zeek:zeek-packet-fuzzer: Heap-buffer-overflow in zeek::packet_analysis::ICMP::ICMPAnalyzer::ExtractICMP4Context

Project: https://github.com/zeek/zeek.git Detailed Report: https://oss-fuzz.com/testcase?key=6419018398957568 Project: zeek Fuzzing Engine: libFuzzer Fuzz Target: zeek-packet-fuzzer Job Type: libfuzzerasanzeek Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x60400120020...

zeek:zeek-packet-fuzzer: Heap-buffer-overflow in zeek::IP_Hdr::ToPktHdrVal

Project: https://github.com/zeek/zeek.git Detailed Report: https://oss-fuzz.com/testcase?key=4872286926143488 Project: zeek Fuzzing Engine: libFuzzer Fuzz Target: zeek-packet-fuzzer Job Type: libfuzzerasanzeek Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x603001c1a5a...

fluent-bit:flb-it-fuzz-config_random_fuzzer_OSSFUZZ: Heap-double-free in read_config

Detailed Report: https://oss-fuzz.com/testcase?key=4921056850214912 Project: fluent-bit Fuzzing Engine: libFuzzer Fuzz Target: flb-it-fuzz-configrandomfuzzerOSSFUZZ Job Type: libfuzzerasanfluent-bit Platform Id: linux Crash Type: Heap-double-free Crash Address: 0x6150004afb80 Crash State:...

h2o:h2o-fuzzer-http1: Non-positive-vla-bound-value in init_headers

Project: https://github.com/h2o/h2o.git Detailed Report: https://oss-fuzz.com/testcase?key=6163873702477824 Project: h2o Fuzzing Engine: libFuzzer Fuzz Target: h2o-fuzzer-http1 Job Type: libfuzzerubsanh2o Platform Id: linux Crash Type: Non-positive-vla-bound-value Crash Address: Crash State:...

llvm:clang-objc-fuzzer: Heap-buffer-overflow in clang::Lexer::getTokenPrefixLength

Detailed Report: https://oss-fuzz.com/testcase?key=4776713906683904 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-objc-fuzzer Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x622000002faa Crash State:...

lcms:cms_profile_fuzzer: Crash in _cmsWriteUInt16Array

Project: https://github.com/mm2/Little-CMS.git Detailed Report: https://oss-fuzz.com/testcase?key=4609861400264704 Project: lcms Fuzzing Engine: libFuzzer Fuzz Target: cmsprofilefuzzer Job Type: libfuzzermsanlcms Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x718000010000 Crash Stat...

zeek:zeek-packet-fuzzer: Heap-buffer-overflow in zeek::packet_analysis::ARP::ARPAnalyzer::ToEthAddrStr

Project: https://github.com/zeek/zeek.git Detailed Report: https://oss-fuzz.com/testcase?key=6455186456969216 Project: zeek Fuzzing Engine: libFuzzer Fuzz Target: zeek-packet-fuzzer Job Type: libfuzzerasanzeek Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x607000534a7...

PT-2022-37179 · Net Snmp · Net-Snmp

Name of the Vulnerable Software and Affected Versions: netsnmp affected versions not specified Description: The issue is related to a heap-buffer-overflow read. Technical details include the netsnmp memdup function and the file snmp api fuzzer.c. Recommendations: At the moment, there is no...

zeek:zeek-packet-fuzzer: Heap-buffer-overflow in zeek::IP_Hdr::ToPktHdrVal

Project: https://github.com/zeek/zeek.git Detailed Report: https://oss-fuzz.com/testcase?key=4880253234839552 Project: zeek Fuzzing Engine: libFuzzer Fuzz Target: zeek-packet-fuzzer Job Type: libfuzzerasanzeek Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address: 0x603001c17ef...

libjpeg-turbo:decompress_yuv_fuzzer_dev: Crash in jsimd_idct_ifast_sse2.column_end

Detailed Report: https://oss-fuzz.com/testcase?key=5715244021841920 Project: libjpeg-turbo Fuzzing Engine: libFuzzer Fuzz Target: decompressyuvfuzzerdev Job Type: libfuzzerasani386libjpeg-turbo Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x00001102 Crash State:...

zlib:example_dict_fuzzer: Use-of-uninitialized-value in fill_window

Project: https://github.com/madler/zlib.git Detailed Report: https://oss-fuzz.com/testcase?key=5167290075185152 Project: zlib Fuzzing Engine: libFuzzer Fuzz Target: exampledictfuzzer Job Type: libfuzzermsanzlib Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

ghostscript:gs_device_tiffsep1_fuzzer: Heap-use-after-free in FT_Stream_ReadULong

Detailed Report: https://oss-fuzz.com/testcase?key=6176191119228928 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicetiffsep1fuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address: 0x62e00000c450 Crash State:...

protobuf-java: potential DoS in the parsing procedure for binary data

A flaw was found in protobuf-java. Google Protocol Buffer protobuf-java allows the interleaving of com.google.protobuf.UnknownFieldSet fields. By persuading a victim to open specially-crafted content, a remote attacker could cause a timeout in the ProtobufFuzzer function, resulting in a denial of...

rdkit:mol_data_stream_to_mol_fuzzer: Bad-cast to RDKit::QueryBond::QUERYBOND_QUERY' (aka 'Query<int, const RDKit::Bond *, true>') from invalid vptr in RDKit::QueryBond::~QueryBond

Project: https://github.com/rdkit/rdkit.git Detailed Report: https://oss-fuzz.com/testcase?key=6594100094173184 Project: rdkit Fuzzing Engine: libFuzzer Fuzz Target: moldatastreamtomolfuzzer Job Type: libfuzzerubsanrdkit Platform Id: linux Crash Type: Bad-cast Crash Address: 0x000002332b30 Crash...

mtail:vm-fuzzer: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4663401648881664 Project: mtail Fuzzing Engine: libFuzzer Fuzz Target: vm-fuzzer Job Type: libfuzzerasanmtail Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN Crash Revision:...

mruby:mruby_fuzzer: Use-of-uninitialized-value in udiv

Project: https://github.com/mruby/mruby.git Detailed Report: https://oss-fuzz.com/testcase?key=5229595309244416 Project: mruby Fuzzing Engine: libFuzzer Fuzz Target: mrubyfuzzer Job Type: libfuzzermsanmruby Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: udiv...

ghostscript:gs_device_ps2write_fuzzer: Crash in pdfi_free_object

Detailed Report: https://oss-fuzz.com/testcase?key=5347646310580224 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdeviceps2writefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x6310000a0858 Crash State: pdfifreeobject...

Fedora: Security Advisory for golang-github-liamg-scout (FEDORA-2022-ea8f4e232d)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...