ipfs:ipfs_ds_badger2: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4913800225751040 Project: ipfs Fuzzing Engine: libFuzzer Fuzz Target: ipfsdsbadger2 Job Type: libfuzzerasanipfs Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000000201320 Crash State: NULL Sanitizer: address ASAN Recommended Securi...

USN-4360-2: json-c regression | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 16.04 Canonical Ubuntu 18.04 Description USN-4360-1 fixed a vulnerability in json-c. The security fix introduced a memory leak in some scenarios. This update reverts the security fix pending further investigation. We...

USN-4360-1: json-c vulnerability | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 14.04 Canonical Ubuntu 16.04 Canonical Ubuntu 18.04 Description It was discovered that json-c incorrectly handled certain JSON files. An attacker could possibly use this issue to execute arbitrary code. CVEs contained in...

USN-3911-2: file regression | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 16.04 Canonical Ubuntu 18.04 Description USN-3911-1 fixed vulnerabilities in file. One of the backported security fixes introduced a regression that caused the interpreter string to be truncated. This update fixes the...

unicorn:fuzz_emu_arm64_arm: Use-of-uninitialized-value in float64_to_float32_aarch64

Detailed Report: https://oss-fuzz.com/testcase?key=5113167238922240 Project: unicorn Fuzzing Engine: libFuzzer Fuzz Target: fuzzemuarm64arm Job Type: libfuzzermsanunicorn Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: float64tofloat32aarch64...

sqlite3:ossfuzz: Heap-buffer-overflow in whereLoopAddBtreeIndex

Detailed Report: https://oss-fuzz.com/testcase?key=6503337062301696 Project: sqlite3 Fuzzing Engine: honggfuzz Fuzz Target: ossfuzz Job Type: honggfuzzasansqlite3 Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address: 0x60f0000003b8 Crash State: whereLoopAddBtreeIndex...

leptonica:pix_rotate_shear_fuzzer: Heap-buffer-overflow in pixReadFromTiffStream

Project: https://github.com/DanBloomberg/leptonica.git Detailed Report: https://oss-fuzz.com/testcase?key=6297621508653056 Project: leptonica Fuzzing Engine: honggfuzz Fuzz Target: pixrotateshearfuzzer Job Type: honggfuzzasanleptonica Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Cra...

MySQL Security Updates - January 2020 | Cloud Foundry

Severity Medium Vendor Cloud Foundry Foundation Description Cloud Foundry Deployment, through its consumption of Percona XtraDB Cluster Release, is vulnerable to various MySQL vulnerabilites patched in the January 2020 Critical Patch Update, including: CVE-2020-2572 CVE-2020-2577 CVE-2020-2579...

ghostscript:gstoraster_fuzzer: Use-of-uninitialized-value in load_truetype_glyph

Detailed Report: https://oss-fuzz.com/testcase?key=6276535945527296 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzermsanghostscript Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: loadtruetypeglyph TTLoadGlyph...

Fortinet FortiRecorder v6 - Persistent XSS Vulnerability

Document Title: =============== Fortinet FortiRecorder v6 - Persistent XSS Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2218 Release Date: ============= 2020-06-22 Vulnerability Laboratory ID VL-ID: ====================================...

USN-4390-1: Linux kernel vulnerabilities | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 16.04 Description It was discovered that the F2FS file system implementation in the Linux kernel did not properly perform bounds checking on xattrs in some situations. A local attacker could possibly use this to expose...

quickjs:fuzz_compile: Heap-buffer-overflow in js_free_function_def

Detailed Report: https://oss-fuzz.com/testcase?key=4906679195140096 Project: quickjs Fuzzing Engine: afl Fuzz Target: fuzzcompile Job Type: aflasanquickjs Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x7ff14d48563b Crash State: jsfreefunctiondef jscreatefunction...

imagemagick:encoder_heic_fuzzer: Use-of-uninitialized-value in void intra_prediction_angular<unsigned char>

Detailed Report: https://oss-fuzz.com/testcase?key=4861157222645760 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: void intrapredictionangular vo...

opus:opus_decode_fuzzer_fixed: Use-of-uninitialized-value in celt_decode_lost

Project: https://gitlab.xiph.org/xiph/opus.git Detailed Report: https://oss-fuzz.com/testcase?key=6387771504852992 Project: opus Fuzzing Engine: libFuzzer Fuzz Target: opusdecodefuzzerfixed Job Type: libfuzzermsanopus Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

imagemagick:crop_fuzzer: Index-out-of-bounds in LibRaw::ahd_interpolate_r_and_b_in_rgb_and_convert_to_cielab

Detailed Report: https://oss-fuzz.com/testcase?key=5389744954671104 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: cropfuzzer Job Type: libfuzzerubsanimagemagick Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...

pcapplusplus:FuzzTarget: Heap-buffer-overflow in pcpp::SSLClientHelloMessage::getSessionIDLength

Project: https://github.com/seladb/PcapPlusPlus.git Detailed Report: https://oss-fuzz.com/testcase?key=5700358767902720 Project: pcapplusplus Fuzzing Engine: libFuzzer Fuzz Target: FuzzTarget Job Type: libfuzzerasanpcapplusplus Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

monero:cold-transaction_fuzz_tests: Heap-buffer-overflow in std::__1::enable_if<boost::archive::portable_binary_iarchive::is_loading::value,

Project: https://github.com/monero-project/monero.git Detailed Report: https://oss-fuzz.com/testcase?key=5203144052310016 Project: monero Fuzzing Engine: libFuzzer Fuzz Target: cold-transactionfuzztests Job Type: libfuzzerasanmonero Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash...

pcapplusplus:FuzzTarget: Heap-buffer-overflow in pcpp::SSLCertificateRequestMessage::SSLCertificateRequestMessage

Project: https://github.com/seladb/PcapPlusPlus.git Detailed Report: https://oss-fuzz.com/testcase?key=4791311122300928 Project: pcapplusplus Fuzzing Engine: libFuzzer Fuzz Target: FuzzTarget Job Type: libfuzzerasanpcapplusplus Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

qpdf:qpdf_fuzzer: Use-of-uninitialized-value in read_markers

Project: https://github.com/qpdf/qpdf.git Detailed Report: https://oss-fuzz.com/testcase?key=5709068089163776 Project: qpdf Fuzzing Engine: libFuzzer Fuzz Target: qpdffuzzer Job Type: libfuzzermsanqpdf Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: readmarke...

ffmpeg:ffmpeg_AV_CODEC_ID_APNG_fuzzer: Heap-buffer-overflow in png_put_interlaced_row

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5692794323861504 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDAPNGfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 3 Crash Address: 0x6100000003b...