wireshark/fuzzshark_ip: Crash in do_throw

Project: https://code.wireshark.org/review/wireshark Detailed report: https://oss-fuzz.com/testcase?key=5729492048281600 Project: wireshark Fuzzer: libFuzzerwiresharkfuzzsharkip Fuzz target binary: fuzzsharkip Job Type: libfuzzerasanwireshark Platform Id: linux Crash Type: UNKNOWN READ Crash...

librawspeed/PhaseOneDecompressorFuzzer: Use-of-uninitialized-value in rawspeed::RawImageData::checkMemIsInitialized

Project: https://github.com/darktable-org/rawspeed.git Detailed report: https://oss-fuzz.com/testcase?key=5674338661957632 Project: librawspeed Fuzzer: libFuzzerlibrawspeedPhaseOneDecompressorFuzzer Fuzz target binary: PhaseOneDecompressorFuzzer Job Type: libfuzzermsanlibrawspeed Platform Id: lin...

wireshark/fuzzshark_ip: Global-buffer-overflow in except_pop

Project: https://code.wireshark.org/review/wireshark Detailed report: https://oss-fuzz.com/testcase?key=5654078294589440 Project: wireshark Fuzzer: libFuzzerwiresharkfuzzsharkip Fuzz target binary: fuzzsharkip Job Type: libfuzzerasanwireshark Platform Id: linux Crash Type: Global-buffer-overflow...

qcms/fuzz: Use-of-uninitialized-value in clamp_float

Detailed report: https://oss-fuzz.com/testcase?key=5702366075027456 Project: qcms Fuzzer: libFuzzerqcmsfuzz Fuzz target binary: fuzz Job Type: libfuzzermsanqcms Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: clampfloat qcmstransformmodulematrix...

wireshark/fuzzshark_ip_proto-udp: Index-out-of-bounds in add_ff_action

Project: https://code.wireshark.org/review/wireshark Detailed report: https://oss-fuzz.com/testcase?key=5656069079040000 Project: wireshark Fuzzer: libFuzzerwiresharkfuzzsharkipproto-udp Fuzz target binary: fuzzsharkipproto-udp Job Type: libfuzzerubsanwireshark Platform Id: linux Crash Type:...

wireshark/fuzzshark_ip_proto-udp: Global-buffer-overflow in add_ff_action

Project: https://code.wireshark.org/review/wireshark Detailed report: https://oss-fuzz.com/testcase?key=5657352737390592 Project: wireshark Fuzzer: libFuzzerwiresharkfuzzsharkipproto-udp Fuzz target binary: fuzzsharkipproto-udp Job Type: libfuzzerasanwireshark Platform Id: linux Crash Type:...

chakra: Crash in Js::JavascriptExceptionOperators::GetStackTraceLimit

Project: https://github.com/Microsoft/ChakraCore.git Detailed report: https://oss-fuzz.com/testcase?key=5752587920343040 Project: chakra Fuzzer: jsfuzzer Job Type: asanchakra Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00107fff8004 Crash State:...

open62541/fuzz_binary_message: NULL

Project: https://github.com/open62541/open62541.git Detailed report: https://oss-fuzz.com/testcase?key=5738840736661504 Project: open62541 Fuzzer: libFuzzeropen62541fuzzbinarymessage Fuzz target binary: fuzzbinarymessage Job Type: libfuzzerubsanopen62541 Platform Id: linux Crash Type: UNKNOWN REA...

openvswitch/odp_target: Use-of-uninitialized-value in scan_geneve

Project: https://github.com/openvswitch/ovs.git Detailed report: https://oss-fuzz.com/testcase?key=5715184807575552 Project: openvswitch Fuzzer: libFuzzeropenvswitchodptarget Fuzz target binary: odptarget Job Type: libfuzzermsanopenvswitch Platform Id: linux Crash Type: Use-of-uninitialized-value...

freetype2/bdf: Heap-buffer-overflow in bdf_cmap_char_index

Detailed report: https://oss-fuzz.com/testcase?key=5658441041838080 Project: freetype2 Fuzzer: libFuzzerfreetype2bdf Fuzz target binary: bdf Job Type: libfuzzerasanfreetype2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x6050000007d0 Crash State: bdfcmapcharindex...

openvswitch/odp_target: Heap-use-after-free in parse_odp_action

Project: https://github.com/openvswitch/ovs.git Detailed report: https://oss-fuzz.com/testcase?key=5641929845374976 Project: openvswitch Fuzzer: aflopenvswitchodptarget Fuzz target binary: odptarget Job Type: aflasanopenvswitch Platform Id: linux Crash Type: Heap-use-after-free READ 2 Crash...

keystone/fuzz_asm_hex: Use-of-uninitialized-value in llvm_ks::HexagonMCCodeEmitter::getExprOpValue

Detailed report: https://oss-fuzz.com/testcase?key=5664745516957696 Project: keystone Fuzzer: libFuzzerkeystonefuzzasmhex Fuzz target binary: fuzzasmhex Job Type: libfuzzermsankeystone Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

ffmpeg/ffmpeg_AV_CODEC_ID_ILBC_fuzzer: Global-buffer-overflow in gain_dequantization

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5153255445757952 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDILBCfuzzer Fuzz target binary: ffmpegAVCODECIDILBCfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Global-buffer-overfl...

Debian DSA-4309-1 : strongswan - security update

Google's OSS-Fuzz revealed an exploitable bug in the gmp plugin caused by the patch that fixes CVE-2018-16151 and CVE-2018-16152 DSA-4305-1. An attacker could trigger it using crafted certificates with RSA keys with very small moduli. Verifying signatures with such keys would cause an integer...

[SECURITY] [DSA 4309-1] strongswan security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4309-1 [email protected] https://www.debian.org/security/ Yves-Alexis Perez October 01, 2018 https://www.debian.org/security/faq -...

harfbuzz/hb-shape-fuzzer: Crash in _hb_ot_shape_fallback_kern

Project: https://github.com/harfbuzz/harfbuzz.git Detailed report: https://oss-fuzz.com/testcase?key=5734736291430400 Project: harfbuzz Fuzzer: libFuzzerharfbuzzhb-shape-fuzzer Fuzz target binary: hb-shape-fuzzer Job Type: libfuzzerasanharfbuzz Platform Id: linux Crash Type: UNKNOWN READ Crash...

imagemagick/encoder_pict_fuzzer: Crash in EncodeImage

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5729407323340800 Project: imagemagick Fuzzer: aflimagemagickencoderpictfuzzer Fuzz target binary: encoderpictfuzzer Job Type: aflasanimagemagick Platform Id: linux Crash Type: UNKNOWN READ...

open62541/fuzz_binary_message: NULL

Detailed report: https://oss-fuzz.com/testcase?key=5693001825779712 Project: open62541 Fuzzer: libFuzzeropen62541fuzzbinarymessage Fuzz target binary: fuzzbinarymessage Job Type: libfuzzerubsanopen62541 Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7f535163ab78 Crash State: NULL...

systemd/fuzz-dhcp6-client: Heap-buffer-overflow in dhcp6_option_parse_status

Project: https://github.com/systemd/systemd.git Detailed report: https://oss-fuzz.com/testcase?key=5719574129934336 Project: systemd Fuzzer: aflsystemdfuzz-dhcp6-client Fuzz target binary: fuzz-dhcp6-client Job Type: aflasansystemd Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash...

harfbuzz/hb-shape-fuzzer: Use-of-uninitialized-value in _hb_ot_shape_fallback_kern

Project: https://github.com/harfbuzz/harfbuzz.git Detailed report: https://oss-fuzz.com/testcase?key=5635082459545600 Project: harfbuzz Fuzzer: libFuzzerharfbuzzhb-shape-fuzzer Fuzz target binary: hb-shape-fuzzer Job Type: libfuzzermsanharfbuzz Platform Id: linux Crash Type:...