llvm/llvm-special-case-list-fuzzer: Heap-buffer-overflow in p_ere

Detailed report: https://oss-fuzz.com/testcase?key=5534705328848896 Project: llvm Fuzzer: libFuzzerllvmllvm-special-case-list-fuzzer Fuzz target binary: llvm-special-case-list-fuzzer Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x61d0004f2cd8...

open62541/fuzz_binary_message: Heap-buffer-overflow in Operation_addNode_finish

Detailed report: https://oss-fuzz.com/testcase?key=4952054897311744 Project: open62541 Fuzzer: libFuzzeropen62541fuzzbinarymessage Fuzz target binary: fuzzbinarymessage Job Type: libfuzzerasanopen62541 Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x60f000000690 Crash...

Symantec Endpoint Protection 12.1.6 Tamper Protection Bypass

Credits: John Page a.k.a hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/CVE-2017-6331-SYMANTEC-ENDPOINT-PROTECTION-TAMPER-PROTECTION-BYPASS.txt + ISR: ApparitionSec Vendor: ======= www.symantec.com Product: =========== Symantec Endpoint...

yara/rules_fuzzer: Use-of-uninitialized-value in _yr_atoms_choose

Project: https://github.com/VirusTotal/yara.git Detailed report: https://oss-fuzz.com/testcase?key=5753694386651136 Project: yara Fuzzer: libFuzzeryararulesfuzzer Fuzz target binary: rulesfuzzer Job Type: libfuzzermsanyara Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

yara/rules_fuzzer: Use-of-uninitialized-value in hex_yylex

Project: https://github.com/VirusTotal/yara.git Detailed report: https://oss-fuzz.com/testcase?key=5637751744495616 Project: yara Fuzzer: libFuzzeryararulesfuzzer Fuzz target binary: rulesfuzzer Job Type: libfuzzermsanyara Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

libreoffice/pngfuzzer: Container-overflow in BitmapColor::GetBlue

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5533260961546240 Project: libreoffice Fuzzer: libFuzzerlibreofficepngfuzzer Fuzz target binary: pngfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Container-overflow...

gdal/ogr_fuzzer: Heap-buffer-overflow in VSIArchiveFilesystemHandler::SplitFilename

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=4744117495005184 Project: gdal Fuzzer: libFuzzergdalogrfuzzer Fuzz target binary: ogrfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

gstreamer/typefind: Heap-buffer-overflow in pnm_type_find

Project: https://anongit.freedesktop.org/git/gstreamer/gstreamer Detailed report: https://oss-fuzz.com/testcase?key=6192837663129600 Project: gstreamer Fuzzer: libFuzzergstreamertypefind Fuzz target binary: typefind Job Type: libfuzzerasangstreamer Platform Id: linux Crash Type:...

gstreamer/gst-discoverer: Heap-buffer-overflow in webvtt_type_find

Project: https://anongit.freedesktop.org/git/gstreamer/gstreamer Detailed report: https://oss-fuzz.com/testcase?key=6349101273710592 Project: gstreamer Fuzzer: libFuzzergstreamergst-discoverer Fuzz target binary: gst-discoverer Job Type: libfuzzerasangstreamer Platform Id: linux Crash Type:...

tor/oss-fuzz-diff: Use-of-uninitialized-value in cdline_linecpy

Project: https://git.torproject.org/tor.git Detailed report: https://oss-fuzz.com/testcase?key=4831951589474304 Project: tor Fuzzer: libFuzzertoross-fuzz-diff Fuzz target binary: oss-fuzz-diff Job Type: libfuzzermsantor Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Cras...

USN-3444-2: Linux kernel (Xenial HWE) vulnerabilities | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 14.04 Description USN-3444-1 fixed vulnerabilities in the Linux kernel for Ubuntu 16.04 LTS. This update provides the corresponding updates for the Linux Hardware Enablement HWE kernel from Ubuntu 16.04 LTS for Ubuntu 14.0...

yara/rules_fuzzer: Incorrect-function-pointer-type in _start

Project: https://github.com/VirusTotal/yara.git Detailed report: https://oss-fuzz.com/testcase?key=4674537548414976 Project: yara Fuzzer: libFuzzeryararulesfuzzer Fuzz target binary: rulesfuzzer Job Type: libfuzzerubsanyara Platform Id: linux Crash Type: Incorrect-function-pointer-type Crash...

proj4/standard_fuzzer: Crash in pj_read_vgrid_value

Detailed report: https://oss-fuzz.com/testcase?key=5571475164626944 Project: proj4 Fuzzer: libFuzzerproj4standardfuzzer Fuzz target binary: standardfuzzer Job Type: libfuzzerasanproj4 Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0000bfff0530 Crash State: pjreadvgridvalue...

gdal/cad_fuzzer: Crash in _int_malloc

Detailed report: https://oss-fuzz.com/testcase?key=5401392446439424 Project: gdal Fuzzer: libFuzzergdalcadfuzzer Fuzz target binary: cadfuzzer Job Type: libfuzzerubsangdal Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7f9803eeb880 Crash State: intmalloc std::1::basicfilebuf ::setbu...

PayPal Inc #168 - Insufficient Authentication Vulnerability

Document Title: =============== PayPal Inc 168 - Insufficient Authentication Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2091 Release Date: ============= 2017-10-30 Vulnerability Laboratory ID VL-ID: ===================================...

wireshark/fuzzshark_ip_proto-udp: Heap-buffer-overflow in get_t61_string

Detailed report: https://oss-fuzz.com/testcase?key=5410211289366528 Project: wireshark Fuzzer: libFuzzerwiresharkfuzzsharkipproto-udp Fuzz target binary: fuzzsharkipproto-udp Job Type: libfuzzerasanwireshark Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x619000790d80...

yara/pe_fuzzer: Heap-buffer-overflow in pe_parse_exports

Project: https://github.com/VirusTotal/yara.git Detailed report: https://oss-fuzz.com/testcase?key=5839717883969536 Project: yara Fuzzer: libFuzzeryarapefuzzer Fuzz target binary: pefuzzer Job Type: libfuzzerasanyara Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address:...

wxwidgets/zip: Memcpy-param-overlap in wxZipInputStream::FindEndRecord

Project: https://github.com/wxWidgets/wxWidgets.git Detailed report: https://oss-fuzz.com/testcase?key=6189258093101056 Project: wxwidgets Fuzzer: libFuzzerwxwidgetszip Fuzz target binary: zip Job Type: libfuzzerasanwxwidgets Platform Id: linux Crash Type: Memcpy-param-overlap Crash Address:...

llvm_libcxx/regex_ECMAScript: Crash in std::__1::__back_ref<char>::__exec

Detailed report: https://oss-fuzz.com/testcase?key=6590682782236672 Project: llvmlibcxx Fuzzer: libFuzzerllvmlibcxxregexECMAScript Fuzz target binary: regexECMAScript Job Type: libfuzzerasanllvmlibcxx Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00037fff7fff Crash State:...

gdal

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=6537397673132032 Project: gdal Fuzzer: libFuzzergdalogrfilesystemfuzzer Fuzz target binary: ogrfilesystemfuzzer Job Type: libfuzzerubsangdal Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...