arrow:arrow-ipc-file-fuzz: Global-buffer-overflow in void arrow::internal::detail::FormatTwoDigits<long>

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=6625366190456832 Project: arrow Fuzzing Engine: afl Fuzz Target: arrow-ipc-file-fuzz Job Type: aflasanarrow Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash Address: 0x000001ef1c47...

arrow:arrow-ipc-file-fuzz: Global-buffer-overflow in arrow::Status arrow::VisitArrayInline<arrow::ArrayPrinter>

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=5864855240835072 Project: arrow Fuzzing Engine: honggfuzz Fuzz Target: arrow-ipc-file-fuzz Job Type: honggfuzzasanarrow Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash Address:...

geos:fuzz_geo2: Heap-buffer-overflow in geos::operation::valid::PolygonNode::isInteriorSegment

Detailed Report: https://oss-fuzz.com/testcase?key=5310361289490432 Project: geos Fuzzing Engine: afl Fuzz Target: fuzzgeo2 Job Type: aflasangeos Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x60d000006250 Crash State:...

FreeBSD : Apache httpd -- Multiple vulnerabilities (25b78bdd-25b8-11ec-a341-d4c9ef517024)

The Apache http server project reports : - moderate: NULL pointer dereference in h2 fuzzing CVE-2021-41524 - important: Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49 CVE-2021-41773 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and packag...

pFuzz - Helps Us To Bypass Web Application Firewall By Using Different Methods At The Same Time

pFuzz is an advanced red teaming fuzzing tool which we developed for our research. It helps us to bypass web application firewall by using different methods at the same time. pFuzz web uygulama araştırmaları için geliştirdiğimiz, gelişmiş bir fuzzing aracıdır. Farklı güvenlik uygulamaları üzerind...

CVE-2021-41524

While fuzzing the 2.4.49 httpd, a new null pointer dereference was detected during HTTP/2 request processing, allowing an external source to DoS the server. This requires a specially crafted request. The vulnerability was recently introduced in version 2.4.49. No exploit is known to the project...

Apache httpd -- Multiple vulnerabilities

The Apache http server project reports: moderate: null pointer dereference in h2 fuzzing CVE-2021-41524 important: Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49 CVE-2021-41773...

openexr:openexr_exrcheck_fuzzer: Crash in unsigned long fuzzer::ForEachNonZeroByte<unsigned long fuzzer::TracePC::CollectF

Detailed Report: https://oss-fuzz.com/testcase?key=5577562600898560 Project: openexr Fuzzing Engine: libFuzzer Fuzz Target: openexrexrcheckfuzzer Job Type: libfuzzerubsanopenexr Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00003339c6b8 Crash State: unsigned long...

Apache Httpd < 2.4.50 : null pointer dereference in h2 fuzzing

While fuzzing the 2.4.49 httpd, a new null pointer dereference was detected during HTTP/2 request processing, allowing an external source to DoS the server. This requires a specially crafted request. The vulnerability was recently introduced in version 2.4.49. No exploit is known to the project...

unicorn:fuzz_emu_arm_armbe: Crash in helper_uc_tracecode

Project: https://github.com/unicorn-engine/unicorn.git Detailed Report: https://oss-fuzz.com/testcase?key=6692965406343168 Project: unicorn Fuzzing Engine: libFuzzer Fuzz Target: fuzzemuarmarmbe Job Type: libfuzzerasanunicorn Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0000000800...

openexr:openexr_exrcheck_fuzzer: Heap-buffer-overflow in Imf_3_1::memstream_read

Project: https://github.com/AcademySoftwareFoundation/openexr.git Detailed Report: https://oss-fuzz.com/testcase?key=4817498927661056 Project: openexr Fuzzing Engine: afl Fuzz Target: openexrexrcheckfuzzer Job Type: aflasanopenexr Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash...

fastjson2:JsonFuzzer: Uncaught exception in com.alibaba.fastjson.JSONPath.getPropertyValue

Detailed Report: https://oss-fuzz.com/testcase?key=5321052020932608 Project: fastjson2 Fuzzing Engine: libFuzzer Fuzz Target: JsonFuzzer Job Type: libfuzzerasanfastjson2 Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash State: com.alibaba.fastjson.JSONPath.getPropertyValue...

bitcoin-core:blockundo_deserialize: Use-of-uninitialized-value in secp256k1_ec_pubkey_parse

Detailed Report: https://oss-fuzz.com/testcase?key=5037486817017856 Project: bitcoin-core Fuzzing Engine: libFuzzer Fuzz Target: blockundodeserialize Job Type: libfuzzermsanbitcoin-core Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: secp256k1ecpubkeyparse...

openexr:openexr_exrcheck_fuzzer: Heap-buffer-overflow in unpack_16bit

Project: https://github.com/AcademySoftwareFoundation/openexr.git Detailed Report: https://oss-fuzz.com/testcase?key=4937985242562560 Project: openexr Fuzzing Engine: afl Fuzz Target: openexrexrcheckfuzzer Job Type: aflasanopenexr Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash...

go-coredns:fuzz_plugin_forward: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6435220908277760 Project: go-coredns Fuzzing Engine: libFuzzer Fuzz Target: fuzzpluginforward Job Type: libfuzzerasango-coredns Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000010b7e0f4 Crash State: NULL Sanitizer: address ASAN...

libucl:ucl_add_string_fuzzer: Crash in ucl_hash_destroy

Detailed Report: https://oss-fuzz.com/testcase?key=6643572678459392 Project: libucl Fuzzing Engine: libFuzzer Fuzz Target: ucladdstringfuzzer Job Type: libfuzzerubsanlibucl Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00005049c93c Crash State: uclhashdestroy uclobjectfreeinternal...

solidity:abiv2_isabelle_ossfuzz: Segv on unknown address in L_NUMBER

Detailed Report: https://oss-fuzz.com/testcase?key=5024935089668096 Project: solidity Fuzzing Engine: libFuzzer Fuzz Target: abiv2isabelleossfuzz Job Type: libfuzzerasansolidity Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: LNUMBER Sanitizer: address ASAN Cras...

wolfmqtt:wolfmqtt-fuzzer: Use-of-uninitialized-value in MqttDecode_Props

Project: https://github.com/wolfSSL/wolfMQTT.git Detailed Report: https://oss-fuzz.com/testcase?key=6552103611400192 Project: wolfmqtt Fuzzing Engine: libFuzzer Fuzz Target: wolfmqtt-fuzzer Job Type: libfuzzermsanwolfmqtt Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

libucl:ucl_add_string_fuzzer: Crash in ucl_array_append

Detailed Report: https://oss-fuzz.com/testcase?key=6199418265665536 Project: libucl Fuzzing Engine: libFuzzer Fuzz Target: ucladdstringfuzzer Job Type: libfuzzerubsanlibucl Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x00065c7393c0 Crash State: uclarrayappend uclparsergetcontainer...

uwebsockets:EpollEchoServerPubSub: Container-overflow in std::__1::__function::__func<uWS::TemplatedApp<true>&& uWS::TemplatedApp<true>::

Project: https://github.com/uNetworking/uWebSockets.git Detailed Report: https://oss-fuzz.com/testcase?key=4778216070447104 Project: uwebsockets Fuzzing Engine: libFuzzer Fuzz Target: EpollEchoServerPubSub Job Type: libfuzzerasanuwebsockets Platform Id: linux Crash Type: Container-overflow READ 1...