njs:njs_process_script_fuzzer: Heap-buffer-overflow in njs_lexer_multi

Project: http://hg.nginx.org/njs Detailed Report: https://oss-fuzz.com/testcase?key=5716123570143232 Project: njs Fuzzing Engine: afl Fuzz Target: njsprocessscriptfuzzer Job Type: aflasannjs Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x612000000442 Crash State:...

libreoffice:xlsfuzzer: Heap-buffer-overflow in std::__1::unique_ptr<ScColumn, o3tl::default_delete<ScColumn> >::operator*

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=5638823755382784 Project: libreoffice Fuzzing Engine: honggfuzz Fuzz Target: xlsfuzzer Job Type: honggfuzzasanlibreoffice Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash...

arrow:parquet-arrow-fuzz: Container-overflow in parquet::schema::Unflatten

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=5110585828311040 Project: arrow Fuzzing Engine: afl Fuzz Target: parquet-arrow-fuzz Job Type: aflasanarrow Platform Id: linux Crash Type: Container-overflow READ 4 Crash Address: 0x61e0000840b0 Crash...

matio:matio_fuzzer: Use-of-uninitialized-value in Mat_VarRead5

Detailed Report: https://oss-fuzz.com/testcase?key=5659682659631104 Project: matio Fuzzing Engine: libFuzzer Fuzz Target: matiofuzzer Job Type: libfuzzermsanmatio Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: MatVarRead5 ReadData MatVarReadDataAll Sanitizer...

envoy:stat_merger_fuzz_test: Heap-buffer-overflow in Envoy::Stats::SymbolTableImpl::Encoding::decodeNumber

Project: https://github.com/envoyproxy/envoy.git Detailed Report: https://oss-fuzz.com/testcase?key=5690814401609728 Project: envoy Fuzzing Engine: libFuzzer Fuzz Target: statmergerfuzztest Job Type: libfuzzerasanenvoy Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

kubernetes:yaml_FuzzSigYaml: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5078803766575104 Project: kubernetes Fuzzing Engine: libFuzzer Fuzz Target: yamlFuzzSigYaml Job Type: libfuzzerasankubernetes Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000025b060f6 Crash State: NULL Sanitizer: address ASAN...

ffmpeg:ffmpeg_BSF_HEVC_METADATA_fuzzer: Index-out-of-bounds in cbs_h265_read_slice_segment_header

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5160442882424832 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegBSFHEVCMETADATAfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash...

CVE-2020-5401: Cloud Foundry GoRouter is vulnerable to cache poisoning | Cloud Foundry

Severity Medium Vendor Cloud Foundry Foundation Description Cloud Foundry Routing Release, versions prior to 0.197.0, contains GoRouter, which allows malicious clients to send invalid headers, causing caching layers to reject subsequent legitimate clients trying to access the app. Affected Cloud...

binutils:fuzz_bfd: Crash in _bfd_vms_lib_archive_p

Detailed Report: https://oss-fuzz.com/testcase?key=5115371025858560 Project: binutils Fuzzing Engine: libFuzzer Fuzz Target: fuzzbfd Job Type: libfuzzerubsanbinutils Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000023d4257b Crash State: bfdvmslibarchivep bfdcheckformatmatches...

imagemagick:encoder_radial-gradient_fuzzer: Stack-buffer-overflow in ReadGRADIENTImage

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5659238976454656 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderradial-gradientfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type:...

ndpi:fuzz_process_packet: Index-out-of-bounds in ndpi_search_mail_imap_tcp

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5110863348629504 Project: ndpi Fuzzing Engine: libFuzzer Fuzz Target: fuzzprocesspacket Job Type: libfuzzerubsanndpi Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...

open62541:fuzz_json_decode_encode: Index-out-of-bounds in writeJsonObjStart

Project: https://github.com/open62541/open62541.git Detailed Report: https://oss-fuzz.com/testcase?key=5685684407107584 Project: open62541 Fuzzing Engine: libFuzzer Fuzz Target: fuzzjsondecodeencode Job Type: libfuzzerubsanopen62541 Platform Id: linux Crash Type: Index-out-of-bounds Crash Address...

yara:pe_fuzzer: Heap-buffer-overflow in pe_parse_debug_directory

Project: https://github.com/VirusTotal/yara.git Detailed Report: https://oss-fuzz.com/testcase?key=5657130592108544 Project: yara Fuzzing Engine: libFuzzer Fuzz Target: pefuzzer Job Type: libfuzzerasanyara Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x6210000061f9...

USN-4274-1: libxml2 vulnerabilities | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 14.04 Canonical Ubuntu 16.04 Canonical Ubuntu 18.04 Description It was discovered that libxml2 incorrectly handled certain XML files. An attacker could possibly use this issue to cause a denial of service. CVE-2019-19956,...

openthread:ip6-send-fuzzer: Stack-buffer-overflow in ot::ExtendedTlv::GetLength

Project: https://github.com/openthread/openthread.git Detailed Report: https://oss-fuzz.com/testcase?key=5751684162912256 Project: openthread Fuzzing Engine: honggfuzz Fuzz Target: ip6-send-fuzzer Job Type: honggfuzzasanopenthread Platform Id: linux Crash Type: Stack-buffer-overflow READ 2 Crash...

ndpi:fuzz_ndpi_reader: Crash in get_ndpi_flow_info6

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5742320670736384 Project: ndpi Fuzzing Engine: honggfuzz Fuzz Target: fuzzndpireader Job Type: honggfuzzasanndpi Platform Id: linux Crash Type: UNKNOWN Crash Address: 0x60400000fffb Crash State:...

arrow:parquet-arrow-fuzz: Crash in arrow::BufferBuilder::Append

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=5671667462569984 Project: arrow Fuzzing Engine: libFuzzer Fuzz Target: parquet-arrow-fuzz Job Type: libfuzzerubsanarrow Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x009a00000097 Crash...

opensc:fuzz_pkcs15_reader: Heap-buffer-overflow in dnie_read_binary

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=5632848910614528 Project: opensc Fuzzing Engine: honggfuzz Fuzz Target: fuzzpkcs15reader Job Type: honggfuzzasanopensc Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address:...

harfbuzz:hb-set-fuzzer: Heap-buffer-overflow in hb-set-fuzzer.cc

Project: https://github.com/harfbuzz/harfbuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=6255224052514816 Project: harfbuzz Fuzzing Engine: libFuzzer Fuzz Target: hb-set-fuzzer Job Type: libfuzzerasani386harfbuzz Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address...

ndpi:fuzz_ndpi_reader: Heap-buffer-overflow in ndpi_workflow_process_packet

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5758164469547008 Project: ndpi Fuzzing Engine: honggfuzz Fuzz Target: fuzzndpireader Job Type: honggfuzzasanndpi Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x60700002a158...