USN-3213-1: GD library vulnerabilities | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 14.04 Description Stefan Esser discovered that the GD library incorrectly handled memory when processing certain images. If a user or automated system were tricked into processing a specially crafted image, an attacker cou...

libxml2: Heap-buffer-overflow in xmlFAParsePosCharGroup

Project: https://gitlab.gnome.org/GNOME/libxml2.git Detailed report: https://oss-fuzz.com/testcase?key=6574081912602624 Project: libxml2 Fuzzer: afllibxml2xmlregexpcompilefuzzer Fuzz target binary: libxml2xmlregexpcompilefuzzer Job Type: aflasanlibxml2 Platform Id: linux Crash Type:...

lcms: Heap-buffer-overflow in TetrahedralInterpFloat

Project: https://github.com/mm2/Little-CMS.git Detailed report: https://oss-fuzz.com/testcase?key=5036643692052480 Project: lcms Fuzzer: afllcmscmstransformfuzzer Fuzz target binary: cmstransformfuzzer Job Type: aflasanlcms Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address:...

file: Heap-buffer-overflow in cdf_getuint32

Project: https://github.com/file/file.git Detailed report: https://oss-fuzz.com/testcase?key=5570137014927360 Project: file Fuzzer: magicfuzzer Job Type: libfuzzerasanfile Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x612000000324 Crash State: cdfgetuint32 cdfreadpropertyinfo...

libreoffice: Heap-buffer-overflow in PPTParagraphObj::UpdateBulletRelSize

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5540228271964160 Project: libreoffice Fuzzer: libFuzzerlibreofficepptfuzzer Fuzz target binary: pptfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-buffer-overfl...

USN-3189-2: Linux kernel (Xenial HWE) vulnerabilities | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 14.04 LTS Description USN-3189-1 fixed vulnerabilities in the Linux kernel for Ubuntu 16.04LTS. This update provides the corresponding updates for the Linux Hardware Enablement HWE kernel from Ubuntu 16.04 LTS for Ubuntu...

ffmpeg: Crash in ff_emu_edge_vfix10_mmx

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5432155620507648 Project: ffmpeg Fuzzer: libFuzzerffmpegVIDEOAVCODECIDVP6Ffuzzer Fuzz target binary: ffmpegVIDEOAVCODECIDVP6Ffuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: UNKNOWN RE...

harfbuzz: Use-of-uninitialized-value in OT::RangeRecord::cmp

Project: https://github.com/harfbuzz/harfbuzz.git Detailed report: https://oss-fuzz.com/testcase?key=6595199411159040 Project: harfbuzz Fuzzer: libFuzzerharfbuzzhb-fuzzer Fuzz target binary: hb-fuzzer Job Type: libfuzzermsanharfbuzz Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

harfbuzz: Use-of-uninitialized-value in int OT::SortedArrayOf<OT::GlyphID, OT::IntType<unsigned short, 2u> >::bsearch<un

Detailed report: https://oss-fuzz.com/testcase?key=6023178755244032 Project: harfbuzz Fuzzer: libFuzzerharfbuzzhb-fuzzer Fuzz target binary: hb-fuzzer Job Type: libfuzzermsanharfbuzz Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: int OT::SortedArrayOf...

gnutls: Heap-buffer-overflow in _cdk_buftou32

Project: https://gitlab.com/gnutls/gnutls.git Detailed report: https://oss-fuzz.com/testcase?key=6394161118838784 Project: gnutls Fuzzer: libFuzzergnutlsopenpgpcertparserfuzzer Fuzz target binary: gnutlsopenpgpcertparserfuzzer Job Type: libfuzzerasangnutls Platform Id: linux Crash Type:...

pcre2: Stack-buffer-overflow in match

Project: svn://vcs.exim.org/pcre2/code/trunk https://github.com/PCRE2Project/pcre2.git Detailed report: https://oss-fuzz.com/testcase?key=5102175699075072 Project: pcre2 Fuzzer: libFuzzerpcre2fuzzer Fuzz target binary: pcre2fuzzer Job Type: libfuzzerasanpcre2 Platform Id: linux Crash Type:...

file: Heap-buffer-overflow in file_trycdf

Project: https://github.com/file/file.git Detailed report: https://oss-fuzz.com/testcase?key=5240919450189824 Project: file Fuzzer: libFuzzerfilemagicfuzzer Fuzz target binary: magicfuzzer Job Type: libfuzzerasanfile Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address:...

libreoffice: Stack-buffer-overflow in SVMConverter::ImplConvertFromSVM1

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=6501478460030976 Project: libreoffice Fuzzer: libFuzzerlibreofficesvmfuzzer Fuzz target binary: svmfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type:...

ffmpeg: Crash in ff_put_pixels8_mmx

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=6743603416137728 Project: ffmpeg Fuzzer: libFuzzerffmpegVIDEOAVCODECIDVP6Ffuzzer Fuzz target binary: ffmpegVIDEOAVCODECIDVP6Ffuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: UNKNOWN RE...

harfbuzz: Use-of-uninitialized-value in OT::RangeRecord::cmp

Project: https://github.com/harfbuzz/harfbuzz.git Detailed report: https://oss-fuzz.com/testcase?key=4687441845813248 Project: harfbuzz Fuzzer: libFuzzerharfbuzzhb-fuzzer Fuzz target binary: hb-fuzzer Job Type: libfuzzermsanharfbuzz Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

grpc: Crash in grpc_channel_create

Detailed report: https://oss-fuzz.com/testcase?key=5184759229579264 Project: grpc Fuzzer: libFuzzergrpcapifuzzer Fuzz target binary: apifuzzer Job Type: libfuzzerasangrpc Platform Id: linux Crash Type: UNKNOWN Crash Address: 0x000000000001 Crash State: grpcchannelcreate...

ProjectSend r754 - IDOR & Authentication Bypass

Document Title: =============== ProjectSend r754 - IDOR & Authentication Bypass References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2031 Release Date: ============= 2017-02-21 Vulnerability Laboratory ID VL-ID: ==================================== 2031 Comm...

file: Heap-buffer-overflow in is_tar

Project: https://github.com/file/file.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=5719138181840896 Project: file Fuzzer: libFuzzerfilemagicfuzzer Fuzz target binary: magicfuzzer Job Type: libfuzzerasanfile Platform Id: linux Crash Type: Heap-buffer-overflow READ Cra...

libarchive: Heap-buffer-overflow in read_header

Project: https://github.com/libarchive/libarchive.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=6650271522357248 Project: libarchive Fuzzer: libFuzzerlibarchivefuzzer Fuzz target binary: libarchivefuzzer Job Type: libfuzzerasanlibarchive Platform Id: linux Crash Type:...

libplist: Heap-buffer-overflow in parse_bin_node_at_index

Project: https://github.com/libimobiledevice/libplist.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=6605859144597504 Project: libplist Fuzzer: libFuzzerlibplistbplistfuzzer Fuzz target binary: bplistfuzzer Job Type: libfuzzerasanlibplist Platform Id: linux Crash Type:...