Side-channels Related to the x86 PREFETCH Instruction

Bulletin ID: AMD-SB-1017 Potential Impact: Leaked kernel address space information Severity: Medium Summary Researchers from Graz University of Technology with CISPA Helmholtz Center for Information Security have demonstrated timing and power-based side channel attacks leveraging the x86 PREFETCH...

open62541:fuzz_binary_decode: Heap-buffer-overflow in diagnosticInfoOrder

Project: https://github.com/open62541/open62541.git Detailed Report: https://oss-fuzz.com/testcase?key=6373734391349248 Project: open62541 Fuzzing Engine: libFuzzer Fuzz Target: fuzzbinarydecode Job Type: libfuzzerasanopen62541 Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash...

CVE-2021-37976

Inappropriate implementation in Memory in Google Chrome prior to 94.0.4606.71 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Recent assessments: gwillcox-r7 at October 02, 2021 7:27pm UTC reported: More info will be available at...

freeradius:fuzzer_dns: Heap-buffer-overflow in fr_struct_from_network

Detailed Report: https://oss-fuzz.com/testcase?key=5656612828741632 Project: freeradius Fuzzing Engine: libFuzzer Fuzz Target: fuzzerdns Job Type: libfuzzerasanfreeradius Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6060000003b6 Crash State: frstructfromnetwork...

geos:fuzz_geo2: Heap-buffer-overflow in geos::operation::valid::PolygonNode::isInteriorSegment

Detailed Report: https://oss-fuzz.com/testcase?key=5310361289490432 Project: geos Fuzzing Engine: afl Fuzz Target: fuzzgeo2 Job Type: aflasangeos Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x60d000006250 Crash State:...

spirv-tools:spvtools_opt_legalization_fuzzer: Heap-buffer-overflow in std::__1::__function::__func<spvtools::opt::FoldVectorShuffleWithConstants

Project: https://github.com/KhronosGroup/SPIRV-Tools.git Detailed Report: https://oss-fuzz.com/testcase?key=4856562481496064 Project: spirv-tools Fuzzing Engine: libFuzzer Fuzz Target: spvtoolsoptlegalizationfuzzer Job Type: libfuzzerasani386spirv-tools Platform Id: linux Crash Type:...

openexr:openexr_exrcheck_fuzzer: Heap-buffer-overflow in internal_huf_decompress

Project: https://github.com/AcademySoftwareFoundation/openexr.git Detailed Report: https://oss-fuzz.com/testcase?key=6142597391843328 Project: openexr Fuzzing Engine: honggfuzz Fuzz Target: openexrexrcheckfuzzer Job Type: honggfuzzasanopenexr Platform Id: linux Crash Type: Heap-buffer-overflow RE...

USN-5091-1: Linux kernel vulnerabilities | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 18.04 Description Several security issues were fixed in the Linux kernel. Ofek Kirzner, Adam Morrison, Benedict Schlueter, and Piotr Krysiuk discovered that the BPF verifier in the Linux kernel missed possible mispredicted...

envoy:h2_capture_direct_response_fuzz_test: Crash in Envoy::TestUtility::findCounter

Detailed Report: https://oss-fuzz.com/testcase?key=5853228248989696 Project: envoy Fuzzing Engine: libFuzzer Fuzz Target: h2capturedirectresponsefuzztest Job Type: libfuzzerasanenvoy Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7f04587a5a20 Crash State:...

libredwg:llvmfuzz: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6458126224719872 Project: libredwg Fuzzing Engine: libFuzzer Fuzz Target: llvmfuzz Job Type: libfuzzerubsanlibredwg Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0000000036c9 Crash State: NULL Sanitizer: undefined UBSAN Recommended...

libigl:igl_fuzzer: Crash in unsigned long fuzzer::ForEachNonZeroByte<unsigned long fuzzer::TracePC::CollectF

Detailed Report: https://oss-fuzz.com/testcase?key=5678652625387520 Project: libigl Fuzzing Engine: libFuzzer Fuzz Target: iglfuzzer Job Type: libfuzzerubsanlibigl Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0000012d31c0 Crash State: unsigned long fuzzer::ForEachNonZeroByteunsign...

grpc-go:fuzz_helloserver: Crash in pthread_create

Detailed Report: https://oss-fuzz.com/testcase?key=6645822266671104 Project: grpc-go Fuzzing Engine: libFuzzer Fuzz Target: fuzzhelloserver Job Type: libfuzzerasangrpc-go Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x618000000080 Crash State: pthreadcreate cgotrypthreadcreate...

ffmpeg:ffmpeg_AV_CODEC_ID_XMA2_fuzzer: Heap-buffer-overflow in xma_decode_packet

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4678745030524928 Project: ffmpeg Fuzzing Engine: honggfuzz Fuzz Target: ffmpegAVCODECIDXMA2fuzzer Job Type: honggfuzzasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address:...

wget:wget_options_fuzzer: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6582178918563840 Project: wget Fuzzing Engine: libFuzzer Fuzz Target: wgetoptionsfuzzer Job Type: libfuzzerubsanwget Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00fcfcfcfd1c Crash State: NULL Sanitizer: undefined UBSAN Recommende...

graphicsmagick:coder_MAT_fuzzer: Use-of-uninitialized-value in IsGrayImage

Detailed Report: https://oss-fuzz.com/testcase?key=5979093489811456 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderMATfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: IsGrayImage WriteMATLABImag...

openexr:openexr_exrcheck_fuzzer: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5906024163311616 Project: openexr Fuzzing Engine: libFuzzer Fuzz Target: openexrexrcheckfuzzer Job Type: libfuzzerubsanopenexr Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xffffffffffffffff Crash State: NULL Sanitizer: undefined...

bitcoin-core:utxo_snapshot: Use-of-uninitialized-value in crc32c::ExtendSse42

Project: https://github.com/bitcoin/bitcoin.git Detailed Report: https://oss-fuzz.com/testcase?key=4804694678044672 Project: bitcoin-core Fuzzing Engine: libFuzzer Fuzz Target: utxosnapshot Job Type: libfuzzermsanbitcoin-core Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address...

netcdf:fuzz_open: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4823422211850240 Project: netcdf Fuzzing Engine: libFuzzer Fuzz Target: fuzzopen Job Type: libfuzzerubsannetcdf Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xffffffffffffffff Crash State: NULL Sanitizer: undefined UBSAN Recommended...

harfbuzz:hb-subset-fuzzer: Heap-buffer-overflow in OT::MathValueRecord::copy

Project: https://github.com/harfbuzz/harfbuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=5891183595880448 Project: harfbuzz Fuzzing Engine: libFuzzer Fuzz Target: hb-subset-fuzzer Job Type: libfuzzerasanharfbuzz Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address:...

runc:configs_fuzzer: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6725470658363392 Project: runc Fuzzing Engine: libFuzzer Fuzz Target: configsfuzzer Job Type: libfuzzerasanrunc Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00002c368227 Crash State: NULL Sanitizer: address ASAN Recommended Securi...