imagemagick/encoder_miff_fuzzer: Use-of-uninitialized-value in GetEXIFProperty

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=6487818894311424 Project: imagemagick Fuzzer: libFuzzerimagemagickencodermifffuzzer Fuzz target binary: encodermifffuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

skia/image_filter_deserialize: Use-of-uninitialized-value in sk_store_bgra

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5050717552246784 Project: skia Fuzzer: libFuzzerskiaimagefilterdeserialize Fuzz target binary: imagefilterdeserialize Job Type: libfuzzermsanskia Platform Id: linux Crash Type:...

graphicsmagick/coder_PDB_fuzzer: Heap-buffer-overflow in SetImageAttribute

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=6125302431350784 Project: graphicsmagick Fuzzer: aflgraphicsmagickcoderPDBfuzzer Fuzz target binary: coderPDBfuzzer Job Type: aflasangraphicsmagick Platform Id: linux Crash Type:...

wireshark/fuzzshark_ip: Index-out-of-bounds in dissect_nbap_LogicalChannelID

Project: https://code.wireshark.org/review/wireshark Detailed report: https://oss-fuzz.com/testcase?key=4859278411169792 Project: wireshark Fuzzer: libFuzzerwiresharkfuzzsharkip Fuzz target binary: fuzzsharkip Job Type: libfuzzerubsanwireshark Platform Id: linux Crash Type: Index-out-of-bounds...

skia/image_filter_deserialize: Use-of-uninitialized-value in sk_unpremul

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5783723816517632 Project: skia Fuzzer: libFuzzerskiaimagefilterdeserialize Fuzz target binary: imagefilterdeserialize Job Type: libfuzzermsanskia Platform Id: linux Crash Type:...

mupdf/pdf_fuzzer: Use-of-uninitialized-value in _cmsReadHeader

Project: git://git.ghostscript.com/mupdf.git Detailed report: https://oss-fuzz.com/testcase?key=4549525504000000 Project: mupdf Fuzzer: libFuzzermupdfpdffuzzer Fuzz target binary: pdffuzzer Job Type: libfuzzermsanmupdf Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

imagemagick/encoder_xcf_fuzzer: Use-of-uninitialized-value in ClampPixel

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5765275287814144 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderxcffuzzer Fuzz target binary: encoderxcffuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

imagemagick/encoder_psd_fuzzer: Use-of-uninitialized-value in ScaleQuantumToShort

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5764070583042048 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderpsdfuzzer Fuzz target binary: encoderpsdfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

imagemagick/encoder_dcm_fuzzer: Use-of-uninitialized-value in IsPixelGray

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5480057549094912 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderdcmfuzzer Fuzz target binary: encoderdcmfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

mupdf/pdf_fuzzer: Use-of-uninitialized-value in fz_drop_imp

Project: git://git.ghostscript.com/mupdf.git Detailed report: https://oss-fuzz.com/testcase?key=4806586980630528 Project: mupdf Fuzzer: libFuzzermupdfpdffuzzer Fuzz target binary: pdffuzzer Job Type: libfuzzermsanmupdf Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

wireshark/fuzzshark_ip_proto-udp: Heap-buffer-overflow in decode_udvm_multitype_operand

Project: https://code.wireshark.org/review/wireshark Detailed report: https://oss-fuzz.com/testcase?key=6309871403139072 Project: wireshark Fuzzer: aflwiresharkfuzzsharkipproto-udp Fuzz target binary: fuzzsharkipproto-udp Job Type: aflasanwireshark Platform Id: linux Crash Type:...

imagemagick/encoder_psd_fuzzer: Use-of-uninitialized-value in ConstrainColormapIndex

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=6543683114500096 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderpsdfuzzer Fuzz target binary: encoderpsdfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

openthread/ip6-send-fuzzer: Stack-buffer-overflow in ot::NetworkData::ServiceTlv::IsThreadEnterprise

Project: https://github.com/openthread/openthread.git Detailed report: https://oss-fuzz.com/testcase?key=6188652393660416 Project: openthread Fuzzer: libFuzzeropenthreadip6-send-fuzzer Fuzz target binary: ip6-send-fuzzer Job Type: libfuzzerasanopenthread Platform Id: linux Crash Type:...

imagemagick/encoder_psd_fuzzer: Use-of-uninitialized-value in CorrectPSDAlphaBlend

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=4725930179166208 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderpsdfuzzer Fuzz target binary: encoderpsdfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

imagemagick/encoder_mat_fuzzer: Use-of-uninitialized-value in IsPixelGray

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=6210259166167040 Project: imagemagick Fuzzer: libFuzzerimagemagickencodermatfuzzer Fuzz target binary: encodermatfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

skia/image_filter_deserialize: Use-of-uninitialized-value in sk_unpremul

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=6658294484566016 Project: skia Fuzzer: libFuzzerskiaimagefilterdeserialize Fuzz target binary: imagefilterdeserialize Job Type: libfuzzermsanskia Platform Id: linux Crash Type:...

imagemagick/encoder_xc_fuzzer: Use-of-uninitialized-value in ReadImage

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=4884902857146368 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderxcfuzzer Fuzz target binary: encoderxcfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

imagemagick/encoder_pattern_fuzzer: Use-of-uninitialized-value in ParseGeometry

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=4644856765874176 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderpatternfuzzer Fuzz target binary: encoderpatternfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash...

imagemagick/encoder_viff_fuzzer: Use-of-uninitialized-value in PushColormapIndex

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5346152397406208 Project: imagemagick Fuzzer: libFuzzerimagemagickencodervifffuzzer Fuzz target binary: encodervifffuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

SA163: OpenSSH Vulnerability October 2017

SUMMARY Symantec Network Protection products using affected versions of OpenSSH are susceptible to a security vulnerability. A remote attacker with read-only access to an SFTP server can create a large number of zero-length files and deplete the target's hard disk space. AFFECTED PRODUCTS The...