OSV-2021-8 Heap-buffer-overflow in ldl_he_p

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29181 Crash type: Heap-buffer-overflow READ 4 Crash state: ldlhep ldnhep flatviewwritecontinue...

OSV-2021-2 Heap-buffer-overflow in Imf_2_5::FastHufDecoder::decode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29106 Crash type: Heap-buffer-overflow READ 2 Crash state: Imf25::FastHufDecoder::decode Imf25::hufUncompress Imf25::PizCompressor::uncompress...

OSV-2020-2298 UNKNOWN READ in ndpi_free

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29081 Crash type: UNKNOWN READ Crash state: ndpifree ndpifreeflow fuzzprocesspacket.c...

OSV-2020-2297 Heap-double-free in WelsCommon::WelsFree

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29073 Crash type: Heap-double-free Crash state: WelsCommon::WelsFree WelsCommon::CMemoryAlign::WelsFree WelsDec::FreePicture...

Vulnerability fixed in Grafana Enterprise

Several vulnerabilities have been fixed in Grafana. A malicious party could potentially exploit the vulnerabilities to bypassing authentication when Security Assertion Markup Language SAML is used as the authentication method. In addition the vulnerabilities could potentially be exploited for oth...

OSV-2020-2291 Heap-buffer-overflow in dotnet_parse_tilde_2

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28981 Crash type: Heap-buffer-overflow READ 2 Crash state: dotnetparsetilde2 dotnetparsetilde dotnetparsecom...

OSV-2020-2285 Bad-cast to pcpp::Layer from invalid vptr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28945 Crash type: Bad-cast Crash state: Bad-cast to pcpp::Layer from invalid vptr pcpp::IDnsResource::getRawData pcpp::DnsResource::getDataLength...

OSV-2020-2274 Heap-buffer-overflow in McCopyWidthEq4_c

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28769 Crash type: Heap-buffer-overflow READ 4 Crash state: McCopyWidthEq4c McCopysse2 McChromassse3...

OSV-2020-2273 Stack-buffer-overflow in perfetto::trace_processor::MemoryTrackerSnapshotParser::EmitRows

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28766 Crash type: Stack-buffer-overflow READ 4 Crash state: perfetto::traceprocessor::MemoryTrackerSnapshotParser::EmitRows perfetto::traceprocessor::MemoryTrackerSnapshotParser::GenerateGraphFromRawNode...

OSV-2020-2264 Stack-buffer-overflow in ot::IsValidUtf8String

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28682 Crash type: Stack-buffer-overflow READ 1 Crash state: ot::IsValidUtf8String ot::MeshCoP::NetworkNameTlv::IsValid ot::MeshCoP::Tlv::IsValid...

CVE-2020-35469

The CVE-2020-35469 entry concerns Software AG Terracotta Server OSS Docker image 5.4.1, which contains a blank password for the root user. The affected container could allow a remote attacker to gain root access due to the unauthenticated, blank credentials, per the provided descriptions. The con...

CVE-2020-35469

The Software AG Terracotta Server OSS Docker image 5.4.1 contains a blank password for the root user. Systems deployed using affected versions of the Terracotta Server OSS container may allow a remote attacker to achieve root access with a blank password...

OSV-2020-2263 Heap-buffer-overflow in McChromaWithFragMv_c

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28639 Crash type: Heap-buffer-overflow READ 1 Crash state: McChromaWithFragMvc McChromassse3 WelsDec::BaseMC...

Docker Image AG Terracotta Server OSS Access Control Error Vulnerability

Docker is an open source application container engine from the American company Docker. The product supports the creation of a container lightweight virtual machine and the deployment and running of applications on Linux systems, as well as the automated installation, deployment, and upgrading of...

OSV-2020-2259 Stack-buffer-overflow in ot::MeshCoP::ChannelMaskEntry::GetMask

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28556 Crash type: Stack-buffer-overflow READ 4 Crash state: ot::MeshCoP::ChannelMaskEntry::GetMask ot::MeshCoP::ChannelMaskTlv::GetChannelMask ot::MeshCoP::Dataset::ConvertTo...

InsightVM Now Integrates With Snyk for Deep Visibility Into Container Vulnerabilities

We know many development teams these days are taking advantage of containerized software applications that may contain all of the necessary code, runtime, system tools, and libraries needed to run an application. Containers are easy to spin up and down, experiment with, and get things done quickl...

OSV-2020-2258 Heap-buffer-overflow in grk::t1_part1::T1Part1::decompress

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28505 Crash type: Heap-buffer-overflow READ Crash state: grk::t1part1::T1Part1::decompress grk::DecompressBlockExec::open grk::T1DecompressScheduler::decompressBlock...

OSV-2020-2254 Stack-use-after-return in insert_pin

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28383 Crash type: Stack-use-after-return READ 1 Crash state: insertpin detectidkey scpkcs15emutcosinitex...

OSV-2020-2253 Global-buffer-overflow in g_date_time_get_ymd

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28477 Crash type: Global-buffer-overflow READ 2 Crash state: gdatetimegetymd gdatetimegetyear gdatetimeformatutf8...

OSV-2020-2251 Heap-buffer-overflow in blosc_run_decompression_with_context

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28392 Crash type: Heap-buffer-overflow READ 1 Crash state: bloscrundecompressionwithcontext blosc2decompressctx framedecompresschunk...