CVE-2017-11521

Removed by vendor...

CVE-2017-11521

CVE-2017-11521 concerns resiprocate's SdpContents::Session::Medium::parse in reSIProcate 1.10.2, allowing remote denial of service via memory growth when many media connections are triggered. Related CVE-2018-12584 affects ConnectionBase::preparseNewBytes in resip/stack/ConnectionBase.cxx, enabli...

gdal: Heap-buffer-overflow in CPLKeywordParser::SkipWhite

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5087597527302144 Project: gdal Fuzzer: libFuzzergdalmrffuzzer Fuzz target binary: mrffuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

boringssl: Incorrect-function-pointer-type in bssl::ext_npn_parse_serverhello

Project: https://boringssl.googlesource.com/boringssl Detailed report: https://oss-fuzz.com/testcase?key=6121765925289984 Project: boringssl Fuzzer: libFuzzerboringsslclient Fuzz target binary: client Job Type: libfuzzerubsanboringssl Platform Id: linux Crash Type: Incorrect-function-pointer-type...

boringssl: Incorrect-function-pointer-type in bssl::ssl_negotiate_alpn

Project: https://boringssl.googlesource.com/boringssl Detailed report: https://oss-fuzz.com/testcase?key=6088352019251200 Project: boringssl Fuzzer: libFuzzerboringsslserver Fuzz target binary: server Job Type: libfuzzerubsanboringssl Platform Id: linux Crash Type: Incorrect-function-pointer-type...

gdal: Heap-buffer-overflow in putcontig8bitYCbCr42tile

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=6163325639458816 Project: gdal Fuzzer: aflgdalgtiffmmap Fuzz target binary: gtiffmmap Job Type: aflasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6110000004cb Crash...

gnutls: Heap-buffer-overflow in nettle_sha512_update

Project: https://gitlab.com/gnutls/gnutls.git Detailed report: https://oss-fuzz.com/testcase?key=6325863039631360 Project: gnutls Fuzzer: aflgnutlsprivatekeyparserfuzzer Fuzz target binary: gnutlsprivatekeyparserfuzzer Job Type: aflasangnutls Platform Id: linux Crash Type: Heap-buffer-overflow RE...

New Linux Malware Exploits SambaCry Flaw to Silently Backdoor NAS Devices

Remember SambaCry? Almost two months ago, we reported about a 7-year-old critical remote code execution vulnerability in Samba networking software, allowing a hacker to remotely take full control of a vulnerable Linux and Unix machines. We dubbed the vulnerability as SambaCry, because of its...

gdal: Heap-buffer-overflow in ParseSect4

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=4930695526875136 Project: gdal Fuzzer: libFuzzergdalfilesystemfuzzer Fuzz target binary: gdalfilesystemfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash...

openSUSE Security Update : xorg-x11-server (openSUSE-2017-826)

This update for xorg-x11-server fixes the following issues : - Improve retrieval of entropy for generating random authentication cookies bsc1025084 - Fix rendering with glamor acceleration. bsc1047154 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...

Integer overflow in the range filter

Integer overflow in the range filter Severity: medium CVE-2017-7529 Not vulnerable: 1.13.3+, 1.12.1+ Vulnerable: 0.5.6-1.13.2...

curl: Use-of-uninitialized-value in getrn

Detailed report: https://oss-fuzz.com/testcase?key=6249722698268672 Project: curl Fuzzer: libFuzzercurlfuzzer Fuzz target binary: curlfuzzer Job Type: libfuzzermsancurl Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: getrn lhretrieve intthreadgetitem Sanitize...

postgis: Heap-buffer-overflow in ptarray_is_closed_3d

Project: https://git.osgeo.org/gitea/postgis/postgis.git Detailed report: https://oss-fuzz.com/testcase?key=4733660446064640 Project: postgis Fuzzer: aflpostgiswkbimportfuzzer Fuzz target binary: wkbimportfuzzer Job Type: aflasanpostgis Platform Id: linux Crash Type: Heap-buffer-overflow READ Cra...

postgis: Crash in ptarray_is_closed_2d

Project: https://git.osgeo.org/gitea/postgis/postgis.git Detailed report: https://oss-fuzz.com/testcase?key=5122567654342656 Project: postgis Fuzzer: libFuzzerpostgiswkbimportfuzzer Fuzz target binary: wkbimportfuzzer Job Type: libfuzzerasanpostgis Platform Id: linux Crash Type: UNKNOWN READ Cras...

gnutls: Use-of-uninitialized-value in mpn_cmp

Project: https://gitlab.com/gnutls/gnutls.git Detailed report: https://oss-fuzz.com/testcase?key=4828633380159488 Project: gnutls Fuzzer: libFuzzergnutlsclientfuzzer Fuzz target binary: gnutlsclientfuzzer Job Type: libfuzzermsangnutls Platform Id: linux Crash Type: Use-of-uninitialized-value Cras...

gdal: Stack-buffer-overflow in void SwapEndianness<long&, unsigned long>

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=4870022369378304 Project: gdal Fuzzer: aflgdalcadfuzzer Fuzz target binary: cadfuzzer Job Type: aflasangdal Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address: 0x7f85edf6d128 Crash...

libarchive: Crash in Ppmd7_DecodeSymbol

Project: https://github.com/libarchive/libarchive.git Detailed report: https://oss-fuzz.com/testcase?key=6053408735756288 Project: libarchive Fuzzer: libFuzzerlibarchivefuzzer Fuzz target binary: libarchivefuzzer Job Type: libfuzzerasanlibarchive Platform Id: linux Crash Type: UNKNOWN READ Crash...

gdal: Heap-buffer-overflow in tftp_send_first

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=6656326245548032 Project: gdal Fuzzer: libFuzzergdalosrsetfromuserinputfuzzer Fuzz target binary: osrsetfromuserinputfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow...

gnutls: Use-of-uninitialized-value in ecc_256_modq

Project: https://gitlab.com/gnutls/gnutls.git Detailed report: https://oss-fuzz.com/testcase?key=6126560014761984 Project: gnutls Fuzzer: libFuzzergnutlsclientfuzzer Fuzz target binary: gnutlsclientfuzzer Job Type: libfuzzermsangnutls Platform Id: linux Crash Type: Use-of-uninitialized-value Cras...

librawspeed: Heap-buffer-overflow in void rawspeed::UncompressedDecompressor::decode12BitRaw<

Project: https://github.com/darktable-org/rawspeed.git Detailed report: https://oss-fuzz.com/testcase?key=6627199387959296 Project: librawspeed Fuzzer: libFuzzerlibrawspeedTiffDecoderFuzzer-ErfDecoder Fuzz target binary: TiffDecoderFuzzer-ErfDecoder Job Type: libfuzzerasanlibrawspeed Platform Id:...