libbpf:bpf-object-fuzzer: Crash in btf_ext_setup_info

Project: https://github.com/libbpf/libbpf.git Detailed Report: https://oss-fuzz.com/testcase?key=4594690190606336 Project: libbpf Fuzzing Engine: libFuzzer Fuzz Target: bpf-object-fuzzer Job Type: libfuzzerasani386libbpf Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xfb83e707 Crash...

grok:grk_decompress_fuzzer: Use-of-uninitialized-value in cmsFloat2LabEncoded

Project: https://github.com/GrokImageCompression/grok.git https://github.com/GrokImageCompression/grok-test-data.git Detailed Report: https://oss-fuzz.com/testcase?key=6522147093217280 Project: grok Fuzzing Engine: libFuzzer Fuzz Target: grkdecompressfuzzer Job Type: libfuzzermsangrok Platform Id...

GHSA-R58X-WJG8-63M9 Denial of Service in Apache James

In Apache James, using Jazzer fuzzer, we identified that an IMAP user can craft IMAP LIST commands to orchestrate a Denial Of Service using a vulnerable Regular expression. This affected Apache James prior to 3.6.1 We recommend upgrading to Apache James 3.6.1 or higher , which enforce the use of...

Denial of Service in Apache James

In Apache James, using Jazzer fuzzer, we identified that an IMAP user can craft IMAP LIST commands to orchestrate a Denial Of Service using a vulnerable Regular expression. This affected Apache James prior to 3.6.1 We recommend upgrading to Apache James 3.6.1 or higher , which enforce the use of...

libyal:libwrc_stream_fuzzer: Heap-double-free in libwrc_resource_node_entry_free

Detailed Report: https://oss-fuzz.com/testcase?key=4614184518680576 Project: libyal Fuzzing Engine: libFuzzer Fuzz Target: libwrcstreamfuzzer Job Type: libfuzzerasanlibyal Platform Id: linux Crash Type: Heap-double-free Crash Address: 0x621000002900 Crash State: libwrcresourcenodeentryfree...

libarchive:libarchive_fuzzer: Heap-use-after-free in read_data_compressed

Project: https://github.com/libarchive/libarchive.git Detailed Report: https://oss-fuzz.com/testcase?key=6630926073856000 Project: libarchive Fuzzing Engine: afl Fuzz Target: libarchivefuzzer Job Type: aflasanlibarchive Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address:...

Design/Logic Flaw

In Apache James, using Jazzer fuzzer, we identified that an IMAP user can craft IMAP LIST commands to orchestrate a Denial Of Service using a vulnerable Regular expression. This affected Apache James prior to 3.6.1 We recommend upgrading to Apache James 3.6.1 or higher , which enforce the use of...

CVE-2021-40110 Apache James IMAP vulnerable to a ReDoS

In Apache James, using Jazzer fuzzer, we identified that an IMAP user can craft IMAP LIST commands to orchestrate a Denial Of Service using a vulnerable Regular expression. This affected Apache James prior to 3.6.1 We recommend upgrading to Apache James 3.6.1 or higher , which enforce the use of...

hiredis:format_command_fuzzer: Crash in redisvFormatCommand

Detailed Report: https://oss-fuzz.com/testcase?key=5668086781444096 Project: hiredis Fuzzing Engine: libFuzzer Fuzz Target: formatcommandfuzzer Job Type: libfuzzerasanhiredis Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000000002506 Crash State: redisvFormatCommand...

selinux:secilc-fuzzer: Heap-use-after-free in cil_symtab_get_datum

Project: https://github.com/SELinuxProject/selinux.git Detailed Report: https://oss-fuzz.com/testcase?key=4773299501006848 Project: selinux Fuzzing Engine: honggfuzz Fuzz Target: secilc-fuzzer Job Type: honggfuzzasanselinux Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address:...

DEBIAN-CVE-2021-45941

libbpf 0.6.0 and 0.6.1 has a heap-based buffer overflow 8 bytes in bpfobjectopen called from bpfobjectopenmem and bpf-object-fuzzer.c...

Libbpf 缓冲区错误漏洞

Libbpf is BPF is a kernel technology that allows anyone to choose how the kernel runs without extensive kernel development experience and spending a lot of time setting up for kernel development. A buffer error vulnerability exists in Libbpf that stems from the product's bpfobjectopenmem and...

grok:grk_decompress_fuzzer: Use-of-uninitialized-value in cmsFloat2LabEncoded

Project: https://github.com/GrokImageCompression/grok.git https://github.com/GrokImageCompression/grok-test-data.git Detailed Report: https://oss-fuzz.com/testcase?key=5016951888412672 Project: grok Fuzzing Engine: libFuzzer Fuzz Target: grkdecompressfuzzer Job Type: libfuzzermsangrok Platform Id...

curl:curl_fuzzer_scp: Heap-buffer-overflow in seturl

Project: https://github.com/curl/curl.git Detailed Report: https://oss-fuzz.com/testcase?key=5662228513161216 Project: curl Fuzzing Engine: afl Fuzz Target: curlfuzzerscp Job Type: aflasancurl Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x6040000021b4 Crash State: setu...

espeak-ng:ssml-fuzzer: Stack-buffer-underflow in InterpretPhoneme

Project: https://github.com/espeak-ng/espeak-ng.git Detailed Report: https://oss-fuzz.com/testcase?key=5260445026484224 Project: espeak-ng Fuzzing Engine: libFuzzer Fuzz Target: ssml-fuzzer Job Type: libfuzzerasanespeak-ng Platform Id: linux Crash Type: Stack-buffer-underflow READ 8 Crash Address...

graphicsmagick:coder_MAT_fuzzer: Use-of-uninitialized-value in ImportViewPixelArea

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=5481768449343488 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderMATfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-value...

curl:curl_fuzzer_tftp: Heap-buffer-overflow in seturl

Project: https://github.com/curl/curl.git Detailed Report: https://oss-fuzz.com/testcase?key=6459698847547392 Project: curl Fuzzing Engine: afl Fuzz Target: curlfuzzertftp Job Type: aflasancurl Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x607000029ea2 Crash State:...

curl:curl_fuzzer_dict: Heap-buffer-overflow in seturl

Project: https://github.com/curl/curl.git Detailed Report: https://oss-fuzz.com/testcase?key=5206884234166272 Project: curl Fuzzing Engine: afl Fuzz Target: curlfuzzerdict Job Type: aflasancurl Platform Id: linux Crash Type: Heap-buffer-overflow READ 16 Crash Address: 0x60700002c212 Crash State:...

selinux:binpolicy-fuzzer: Segv on unknown address in symhash

Project: https://github.com/SELinuxProject/selinux.git Detailed Report: https://oss-fuzz.com/testcase?key=6539673923616768 Project: selinux Fuzzing Engine: libFuzzer Fuzz Target: binpolicy-fuzzer Job Type: libfuzzerasanselinux Platform Id: linux Crash Type: Segv on unknown address Crash Address:...

selinux:binpolicy-fuzzer: Crash in mls_semantic_level_expand

Project: https://github.com/SELinuxProject/selinux.git Detailed Report: https://oss-fuzz.com/testcase?key=4758829554860032 Project: selinux Fuzzing Engine: libFuzzer Fuzz Target: binpolicy-fuzzer Job Type: libfuzzerasanselinux Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...