3372 matches found
Fuzzing HTTP Proxies: Privoxy, Part 3
Research Fuzzing HTTP Proxies: Privoxy, Part 3 Share January 4th, 2022 One of my earlier posts outlined how I had discovered six security vulnerabilities in the Privoxy software using the technique of fuzzing to cause the software to crash. This post outlines how I discovered three more...
CVE-2021-45957
Dnsmasq 2.86 has a heap-based buffer overflow in answerrequest called from FuzzAnswerTheRequest and fuzzrfc1035.c. NOTE: the vendor's position is that CVE-2021-45951 through CVE-2021-45957 "do not represent real vulnerabilities, to the best of our knowledge...
Dnsmasq 缓冲区错误漏洞
dnsmasq is a lightweight DNS forwarding and DHCP, TFTP server written in C. Dnsmasq 2.86 suffers from a buffer error vulnerability that stems from having a heap-based buffer overflow in resizepacket called from FuzzResizePacket and fuzzrfc1035.c...
Dnsmasq 缓冲区错误漏洞
dnsmasq is a lightweight DNS forwarding and DHCP, TFTP server written in C. Dnsmasq 2.86 suffers from a buffer error vulnerability that stems from having a heap-based buffer overflow in answerrequest called from FuzzAnswerTheRequest and fuzzrfc1035.c...
envoy:codec_impl_fuzz_test: Crash in Envoy::Http::HttpStream::HttpStream
Project: https://github.com/envoyproxy/envoy.git Detailed Report: https://oss-fuzz.com/testcase?key=6708149317402624 Project: envoy Fuzzing Engine: libFuzzer Fuzz Target: codecimplfuzztest Job Type: libfuzzerubsanenvoy Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00000a844f70 Cras...
ghostscript:gstoraster_fuzzer: Negative-size-param in general_endcidrange_func
Detailed Report: https://oss-fuzz.com/testcase?key=6203008550043648 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Negative-size-param Crash Address: Crash State: generalendcidrangefunc...
envoy:codec_impl_fuzz_test: Crash in Envoy::Http::HttpStream::HttpStream
Project: https://github.com/envoyproxy/envoy.git Detailed Report: https://oss-fuzz.com/testcase?key=5507524864901120 Project: envoy Fuzzing Engine: libFuzzer Fuzz Target: codecimplfuzztest Job Type: libfuzzerasanenvoy Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x61b002933e30 Crash...
libyang:lyd_parse_mem_xml: Crash with empty stacktrace
Detailed Report: https://oss-fuzz.com/testcase?key=5141346623553536 Project: libyang Fuzzing Engine: libFuzzer Fuzz Target: lydparsememxml Job Type: libfuzzermsanlibyang Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7300262e48d0 Crash State: NULL Sanitizer: memory MSAN Recommended...
None in vim/vim
Description Hello there! Hope you are having an awesome day! 🤗 After I saw the last Rick de Jager's report, I decided to pick up their PoC as a valid input for fuzzing vim on its patch 8.2.3912, and ended up finding a new case of double-free! For testing, I compiled vim with GCC 9.3.0, and my O.S...
None in vim/vim
Description intro While fuzzing, I found an edge case in the vim9 compiler for nested functions. It seems like you can make the compiler use the same line twice, by adding another command directly after an enddef token using the | operator. Depending on the inner functions body, this either resul...
assimp:assimp_fuzzer: Heap-use-after-free in Assimp::DXFImporter::ExpandBlockReferences
Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=5170534852198400 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzerasanassimp Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x61d000000e...
Exploit for Race Condition in Linux Linux_Kernel
CVE-2021-44733: Fuzzing and exploitation of a use-after-free i...
ghostscript:gstoraster_fuzzer: Stack-buffer-overflow in pdfi_annot_draw_LE_one
Detailed Report: https://oss-fuzz.com/testcase?key=5217927366836224 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Address: 0x7f058b574984 Crash State:...
zxing:MultiFormatDecodeFuzzer: Uncaught exception in java.desktop/com.sun.imageio.plugins.tiff.TIFFLZWDecompressor.decodeRaw
Project: https://github.com/zxing/zxing.git Detailed Report: https://oss-fuzz.com/testcase?key=4902993839915008 Project: zxing Fuzzing Engine: libFuzzer Fuzz Target: MultiFormatDecodeFuzzer Job Type: libfuzzerasanzxing Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash State:...
curl:curl_fuzzer_sftp: Heap-buffer-overflow in seturl
Project: https://github.com/curl/curl.git Detailed Report: https://oss-fuzz.com/testcase?key=5908012496191488 Project: curl Fuzzing Engine: afl Fuzz Target: curlfuzzersftp Job Type: aflasancurl Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x60b000021f14 Crash State:...
binutils:fuzz_bfd: Heap-buffer-overflow in bfd_getl32
Detailed Report: https://oss-fuzz.com/testcase?key=5899522704801792 Project: binutils Fuzzing Engine: afl Fuzz Target: fuzzbfd Job Type: aflasanbinutils Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x60b000000154 Crash State: bfdgetl32 bfdmipselfsectionfromshdr...
c-blosc2:decompress_chunk_fuzzer: Heap-buffer-overflow in ndlz8_decompress
Project: https://github.com/Blosc/c-blosc2.git Detailed Report: https://oss-fuzz.com/testcase?key=5515450455293952 Project: c-blosc2 Fuzzing Engine: afl Fuzz Target: decompresschunkfuzzer Job Type: aflasanc-blosc2 Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address:...
ghostscript:gstoraster_fuzzer: Crash in pdfi_fapi_get_gsubr
Detailed Report: https://oss-fuzz.com/testcase?key=4628019363315712 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: UNKNOWN Crash Address: 0xf92981fb0edefb0e Crash State: pdfifapigetgsubr...
kamailio:fuzz_parse_msg: Crash in parse_identityinfo
Detailed Report: https://oss-fuzz.com/testcase?key=6711502174814208 Project: kamailio Fuzzing Engine: libFuzzer Fuzz Target: fuzzparsemsg Job Type: libfuzzerasankamailio Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x604000080000 Crash State: parseidentityinfo parseidentityinfoheade...
cryptofuzz:cryptofuzz-nss: Use-of-uninitialized-value in __gmpn_tdiv_qr
Project: https://github.com/guidovranken/cryptofuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=6321396119109632 Project: cryptofuzz Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-nss Job Type: libfuzzermsancryptofuzz Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...