Security Bulletin: IBM Resilient vulnerable to username enumeration (CVE-2020-4635)

Summary IBM Resilient could disclose sensitive information by allowing a user to enumerate usernames. An attacker may use this to determine if a user exists or not. Vulnerability Details CVEID: CVE-2020-4635 DESCRIPTION: IBM Resilient could disclose sensitive information by allowing a user to...

c-blosc2:decompress_frame_fuzzer: Negative-size-param in blosc_d

Project: https://github.com/Blosc/c-blosc2.git Detailed Report: https://oss-fuzz.com/testcase?key=4516447050137600 Project: c-blosc2 Fuzzing Engine: libFuzzer Fuzz Target: decompressframefuzzer Job Type: libfuzzerasani386c-blosc2 Platform Id: linux Crash Type: Negative-size-param Crash Address:...

ffmpeg:ffmpeg_dem_SIMBIOSIS_IMX_fuzzer: Heap-buffer-overflow in simbiosis_imx_read_packet

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6702533894602752 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegdemSIMBIOSISIMXfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address...

envoy:h1_capture_persistent_fuzz_test: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6639193062244352 Project: envoy Fuzzing Engine: libFuzzer Fuzz Target: h1capturepersistentfuzztest Job Type: libfuzzerasanenvoy Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x6030004161d0 Crash State: NULL Sanitizer: address ASAN...

libsass:data_context_fuzzer: Segv on unknown address in Sass::CompoundSelector::resolve_parent_refs

Detailed Report: https://oss-fuzz.com/testcase?key=6118697568698368 Project: libsass Fuzzing Engine: afl Fuzz Target: datacontextfuzzer Job Type: aflasanlibsass Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: Sass::CompoundSelector::resolveparentrefs...

assimp:assimp_fuzzer: Heap-buffer-overflow in ODDLParser::OpenDDLParser::normalizeBuffer

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=5753118978605056 Project: assimp Fuzzing Engine: afl Fuzz Target: assimpfuzzer Job Type: aflasanassimp Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x61e000002e60 Crash...

ffmpeg:ffmpeg_AV_CODEC_ID_SPEEDHQ_fuzzer: Heap-buffer-overflow in ff_put_pixels_clamped_c

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6622189504823296 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDSPEEDHQfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Addres...

libredwg:llvmfuzz: Heap-buffer-overflow in dwg_decode_MINSERT_private

Project: https://github.com/LibreDWG/libredwg.git Detailed Report: https://oss-fuzz.com/testcase?key=5112180807696384 Project: libredwg Fuzzing Engine: libFuzzer Fuzz Target: llvmfuzz Job Type: libfuzzerasanlibredwg Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

fmt:two-args-fuzzer: Stack-buffer-overflow in int fmt::v7::detail::snprintf_float<long double>

Project: https://github.com/fmtlib/fmt.git Detailed Report: https://oss-fuzz.com/testcase?key=5663571846496256 Project: fmt Fuzzing Engine: afl Fuzz Target: two-args-fuzzer Job Type: aflasanfmt Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address: 0x7efceff544bf Crash State:...

libreoffice:ww6fuzzer: Bad-cast to SwClientSwDoc::ChgPageDesc in UpdatePageDescs

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=5726306856730624 Project: libreoffice Fuzzing Engine: libFuzzer Fuzz Target: ww6fuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type: Bad-cast Crash Address: 0x0000171eae...

zlib:minigzip_fuzzer: Heap-buffer-overflow in minigzip_fuzzer.c

Detailed Report: https://oss-fuzz.com/testcase?key=6604150186049536 Project: zlib Fuzzing Engine: libFuzzer Fuzz Target: minigzipfuzzer Job Type: libfuzzerasani386zlib Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0xf590ba1b Crash State: minigzipfuzzer.c Sanitizer: addre...

c-blosc2:decompress_frame_fuzzer: Heap-buffer-overflow in blosc_run_decompression_with_context

Project: https://github.com/Blosc/c-blosc2.git Detailed Report: https://oss-fuzz.com/testcase?key=5949473894301696 Project: c-blosc2 Fuzzing Engine: libFuzzer Fuzz Target: decompressframefuzzer Job Type: libfuzzerasanc-blosc2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Addres...

suricata:fuzz_sigpcap: Heap-use-after-free in JsonDNP3LoggerToClient

Project: https://github.com/OISF/suricata.git Detailed Report: https://oss-fuzz.com/testcase?key=6666200017928192 Project: suricata Fuzzing Engine: afl Fuzz Target: fuzzsigpcap Job Type: aflasansuricata Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x631000190800 Crash...

opensc:fuzz_pkcs15_reader: Heap-buffer-overflow in sc_pkcs15emu_oberthur_add_cert

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=6008101662752768 Project: opensc Fuzzing Engine: honggfuzz Fuzz Target: fuzzpkcs15reader Job Type: honggfuzzasanopensc Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address:...

fluent-bit:flb-it-fuzz-utils_fuzzer_OSSFUZZ: Crash in flb_free

Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=6459399624327168 Project: fluent-bit Fuzzing Engine: libFuzzer Fuzz Target: flb-it-fuzz-utilsfuzzerOSSFUZZ Job Type: libfuzzerubsanfluent-bit Platform Id: linux Crash Type: UNKNOWN READ Crash...

kimageformats:kimgio_heif_fuzzer: Heap-buffer-overflow in void apply_sao_internal<unsigned short>

Project: git://anongit.kde.org/kimageformats Detailed Report: https://oss-fuzz.com/testcase?key=4914575418982400 Project: kimageformats Fuzzing Engine: libFuzzer Fuzz Target: kimgioheiffuzzer Job Type: libfuzzerasankimageformats Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

libyang:lyd_parse_mem_json: Heap-buffer-overflow in log_vprintf

Project: https://github.com/CESNET/libyang.git Detailed Report: https://oss-fuzz.com/testcase?key=6363884920373248 Project: libyang Fuzzing Engine: honggfuzz Fuzz Target: lydparsememjson Job Type: honggfuzzasanlibyang Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

libredwg:llvmfuzz: Heap-buffer-overflow in strtol

Project: https://github.com/LibreDWG/libredwg.git Detailed Report: https://oss-fuzz.com/testcase?key=5292726317875200 Project: libredwg Fuzzing Engine: libFuzzer Fuzz Target: llvmfuzz Job Type: libfuzzerasanlibredwg Platform Id: linux Crash Type: Heap-buffer-overflow READ 7 Crash Address:...

fluent-bit:flb-it-fuzz-utils_fuzzer_OSSFUZZ: Crash in flb_utils_proxy_url_split

Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=6472247925669888 Project: fluent-bit Fuzzing Engine: libFuzzer Fuzz Target: flb-it-fuzz-utilsfuzzerOSSFUZZ Job Type: libfuzzerasanfluent-bit Platform Id: linux Crash Type: UNKNOWN WRITE Crash...

istio:fuzz_parse_inputs: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6513595330461696 Project: istio Fuzzing Engine: libFuzzer Fuzz Target: fuzzparseinputs Job Type: libfuzzerasanistio Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN Crash Revision:...