wireshark:fuzzshark_ip: Global-buffer-overflow in dissect_snmp_PDUs

Project: https://code.wireshark.org/review/wireshark https://gitlab.com/wireshark/wireshark.git Detailed Report: https://oss-fuzz.com/testcase?key=5694793825124352 Project: wireshark Fuzzing Engine: afl Fuzz Target: fuzzsharkip Job Type: aflasanwireshark Platform Id: linux Crash Type:...

TightVNC <= 1.3.10 Multiple Vulnerabilities - Linux

TightVNC is prone multiple vulnerabilities. Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

binutils:fuzz_disassemble: Global-buffer-overflow in disassemble

Detailed Report: https://oss-fuzz.com/testcase?key=5663479772217344 Project: binutils Fuzzing Engine: afl Fuzz Target: fuzzdisassemble Job Type: aflasanbinutils Platform Id: linux Crash Type: Global-buffer-overflow READ 8 Crash Address: 0x000001dbdff8 Crash State: disassemble printinsnv850...

lwan:config_fuzzer: Global-buffer-overflow in lex_multiline_string

Project: git://github.com/lpereira/lwan Detailed Report: https://oss-fuzz.com/testcase?key=5140056134385664 Project: lwan Fuzzing Engine: afl Fuzz Target: configfuzzer Job Type: aflasanlwan Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash Address: 0x00000114d3e0 Crash State:...

CVE-2019-8287

TightVNC code version 1.3.10 contains global buffer overflow in HandleCoRREBBP macro function, which can potentially result code execution. This attack appear to be exploitable via network connectivity...

CVE-2019-8287: Buffer Copy without Checking Size of Input

TightVNC code version 1.3.10 contains global buffer overflow in HandleCoRREBBP macro function, which can potentially result code execution. This attack appear to be exploitable via network connectivity...

lwan:config_fuzzer: Global-buffer-overflow in lex_multiline_string

Project: git://github.com/lpereira/lwan Detailed Report: https://oss-fuzz.com/testcase?key=5670652367601664 Project: lwan Fuzzing Engine: libFuzzer Fuzz Target: configfuzzer Job Type: libfuzzerasanlwan Platform Id: linux Crash Type: Global-buffer-overflow READ 3 Crash Address: 0x0000011ab260 Cras...

lwan:config_fuzzer: Global-buffer-overflow in backup

Project: git://github.com/lpereira/lwan Detailed Report: https://oss-fuzz.com/testcase?key=5752125816045568 Project: lwan Fuzzing Engine: libFuzzer Fuzz Target: configfuzzer Job Type: libfuzzerasanlwan Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash Address: 0x0000011ab260 Cras...

lwan:config_fuzzer: Global-buffer-overflow in lwan_strbuf_append_str

Project: git://github.com/lpereira/lwan Detailed Report: https://oss-fuzz.com/testcase?key=5640887438147584 Project: lwan Fuzzing Engine: afl Fuzz Target: configfuzzer Job Type: aflasanlwan Platform Id: linux Crash Type: Global-buffer-overflow READ Crash Address: 0x00000114d3e0 Crash State:...

lwan:config_fuzzer: Global-buffer-overflow in backup

Project: git://github.com/lpereira/lwan Detailed Report: https://oss-fuzz.com/testcase?key=5745367148134400 Project: lwan Fuzzing Engine: afl Fuzz Target: configfuzzer Job Type: aflasanlwan Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash Address: 0x00000114d3e0 Crash State:...

ffmpeg:ffmpeg_AV_CODEC_ID_ATRAC9_fuzzer: Global-buffer-overflow in dequantize

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5641113058148352 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDATRAC9fuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Address:...

Security Bulletin: Multiple vulnerabilities in Open Source Binutils and Open Source OpenSSL affect IBM Netezza Analytics

Summary Open Source Binutils and OpenSSL is used by IBM Netezza Analytics. IBM Netezza Analytics has addressed the applicable CVEs Vulnerability Details CVEID: CVE-2014-9939 DESCRIPTION: GNU Binutils is vulnerable to a denial of service, caused by a stack-based buffer overflow in ihex.c. By using...

binutils:fuzz_disassemble: Global-buffer-overflow in exg_sex_discrim

Detailed Report: https://oss-fuzz.com/testcase?key=5752218594050048 Project: binutils Fuzzing Engine: afl Fuzz Target: fuzzdisassemble Job Type: aflasanbinutils Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Address: 0x000001977e78 Crash State: exgsexdiscrim decodeoperation...

binutils:fuzz_disassemble: Global-buffer-overflow in ripBits

Detailed Report: https://oss-fuzz.com/testcase?key=5701610390421504 Project: binutils Fuzzing Engine: libFuzzer Fuzz Target: fuzzdisassemble Job Type: libfuzzerasanbinutils Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Address: 0x000002002470 Crash State: ripBits printinsn...

binutils:fuzz_disassemble: Global-buffer-overflow in print_insn_rx

Detailed Report: https://oss-fuzz.com/testcase?key=5640651852480512 Project: binutils Fuzzing Engine: afl Fuzz Target: fuzzdisassemble Job Type: aflasanbinutils Platform Id: linux Crash Type: Global-buffer-overflow READ 8 Crash Address: 0x000001c0ae80 Crash State: printinsnrx fuzzdisassemble.c...

binutils:fuzz_disassemble: Global-buffer-overflow in opr_emit_disassembly

Detailed Report: https://oss-fuzz.com/testcase?key=5713869317603328 Project: binutils Fuzzing Engine: afl Fuzz Target: fuzzdisassemble Job Type: aflasanbinutils Platform Id: linux Crash Type: Global-buffer-overflow READ 8 Crash Address: 0x000001977e70 Crash State: opremitdisassembly printinsns12z...

squid: heap-based buffer overflow in HttpHeader::getAuth

A flaw was discovered in Squid versions 4.0.23 through 4.7. When checking Basic Authentication with HttpHeader::getAuth, Squid uses a global buffer to store the decoded data but does not check that the decoded length is not greater than the buffer. This flaw leads to a heap-based buffer overflow...

libhevc:hevc_dec_fuzzer: Global-buffer-overflow in ihevcd_unpack_coeffs

Project: https://android.googlesource.com/platform/external/libhevc Detailed Report: https://oss-fuzz.com/testcase?key=5101556982087680 Project: libhevc Fuzzing Engine: libFuzzer Fuzz Target: hevcdecfuzzer Job Type: libfuzzerasani386libhevc Platform Id: linux Crash Type: Global-buffer-overflow RE...

CVE-2019-13222

An out-of-bounds read of a global buffer in the drawline function in stbvorbis through 2019-03-04 allows an attacker to cause a denial of service or disclose sensitive information by opening a crafted Ogg Vorbis file...

ffmpeg/ffmpeg_AV_CODEC_ID_ATRAC9_fuzzer: Global-buffer-overflow in dequantize

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5648247961419776 Project: ffmpeg Fuzzer: aflffmpegAVCODECIDATRAC9fuzzer Fuzz target binary: ffmpegAVCODECIDATRAC9fuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Global-buffer-overflow READ ...