PT-2021-19786 · Ericsson · Ericsson Network Manager +1

Name of the Vulnerable Software and Affected Versions: OSS-RC versions 18B and older Description: The issue affects OSS-RC systems during data migration procedures, where files containing usernames and passwords are left undeleted in folders accessible by top privileged accounts only. This issue...

OSV-2021-1445 Heap-buffer-overflow in mk_rconf_read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39853 Crash type: Heap-buffer-overflow READ 1 Crash state: mkrconfread mkrconfreadglob mkrconfread...

OSV-2021-1442 Heap-use-after-free in find_es_header

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39842 Crash type: Heap-use-after-free READ 4 Crash state: findesheader analyzechunk probestream...

OSV-2021-1440 Heap-buffer-overflow in internal_huf_decompress

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39836 Crash type: Heap-buffer-overflow READ 1 Crash state: internalhufdecompress internalexrundopiz defaultdecompresschunk...

OSV-2021-1437 Heap-buffer-overflow in unpack_32bit

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39799 Crash type: Heap-buffer-overflow WRITE 4 Crash state: unpack32bit exrdecodingrun Imf31::checkCoreFile...

OSV-2021-1430 Heap-buffer-overflow in diagnosticInfoOrder

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39741 Crash type: Heap-buffer-overflow READ 8 Crash state: diagnosticInfoOrder structureOrder UAorder...

OSV-2021-1427 Global-buffer-overflow in fr_base16_decode_nstd

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39699 Crash type: Global-buffer-overflow READ 1 Crash state: frbase16decodenstd frvalueboxfromstr frpairvaluefromstr...

OSV-2021-1425 Heap-buffer-overflow in fr_dns_label_to_value_box

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39689 Crash type: Heap-buffer-overflow READ 1 Crash state: frdnslabeltovaluebox decodevaluetrampoline frstructfromnetwork...

OSV-2021-1423 Heap-buffer-overflow in fr_struct_from_network

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39660 Crash type: Heap-buffer-overflow READ 1 Crash state: frstructfromnetwork frstructfromnetwork decoderecord...

OSV-2021-1422 Heap-buffer-overflow in fr_dns_label_uncompressed_length

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39657 Crash type: Heap-buffer-overflow READ 1 Crash state: frdnslabeluncompressedlength decodevaluetrampoline frstructfromnetwork...

OSV-2021-1420 Heap-buffer-overflow in unpack_16bit

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39623 Crash type: Heap-buffer-overflow WRITE Crash state: unpack16bit exrdecodingrun Imf31::checkCoreFile...

OSV-2021-1417 Heap-buffer-overflow in openhtj2k::T1OpenHTJ2K::decompress

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39632 Crash type: Heap-buffer-overflow WRITE 4 Crash state: openhtj2k::T1OpenHTJ2K::decompress std::1::packagedtaskfuncstd::1::bindgrk::T1DecompressScheduler::deco std::1::packagedtaskint...

OSV-2021-1414 Heap-buffer-overflow in internal_huf_decompress

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39601 Crash type: Heap-buffer-overflow READ 1 Crash state: internalhufdecompress internalexrundopiz defaultdecompresschunk...

OSV-2021-1410 Heap-buffer-overflow in generic_unpack

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39571 Crash type: Heap-buffer-overflow WRITE 4 Crash state: genericunpack exrdecodingrun Imf31::checkCoreFile...

OSV-2021-1408 Heap-buffer-overflow in unpack_16bit_4chan_planar

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39532 Crash type: Heap-buffer-overflow WRITE Crash state: unpack16bit4chanplanar exrdecodingrun Imf31::checkCoreFile...

OSV-2021-1406 Heap-buffer-overflow in Imf_3_1::memstream_read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39542 Crash type: Heap-buffer-overflow WRITE Crash state: Imf31::memstreamread dispatchread readuncompresseddirect...

Kekeo - A Little Toolbox To Play With Microsoft Kerberos In C

kekeo is a little toolbox I have started to manipulate Microsoft Kerberos in C and for fun ASN.1 library In kekeo, I use an external commercial library to deal with Kerberos ASN.1 structures: OSS ASN.1/C http://www.oss.com/asn1/products/asn1-c/asn1-c.html It was the only code generator/library th...

FreeBSD : nexus2-oss -- Apache ActiveMQ JMX vulnerability (730e922f-20e7-11ec-a574-080027eedc6a)

Sonatype reports : - CVE-2020-13920: Apache ActiveMQ JMX is vulnerable to a MITM attack %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2021 Jacques Vidrine and contributors...

FreeBSD : nexus2-oss -- NXRM2 Directory Traversal vulnerability (b2f1f86f-20e6-11ec-a574-080027eedc6a)

Sonatype reports : - CVE-2020-15012: NXRM2 Directory Traversal vulnerability %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2021 Jacques Vidrine and contributors...

OSV-2021-1395 Heap-buffer-overflow in Op_YCbCr_to_RGB<unsigned char>::convert_colorspace

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39373 Crash type: Heap-buffer-overflow READ Crash state: OpYCbCrtoRGB::convertcolorspace heif::ColorConversionPipeline::convertimage heif::convertcolorspace...