OSV-2020-14 Stack-buffer-overflow in fmt_setup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22507 Crash type: Stack-buffer-overflow WRITE 1 Crash state: fmtsetup mrbstrformat mrbfsprintf...

OSV-2020-31 Heap-use-after-free in AES_wrap_key

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23014 Crash type: Heap-use-after-free READ 8 Crash state: AESwrapkey aeswrapcipher EVPEncryptUpdate...

OSV-2020-18 Heap-buffer-overflow in ndpi_search_openvpn

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22244 Crash type: Heap-buffer-overflow READ 8 Crash state: ndpisearchopenvpn checkndpiudpflowfunc ndpidetectionprocesspacket...

OSV-2020-16 Heap-use-after-free in BEInt<unsigned short, 2>::operator unsigned short

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20906 Crash type: Heap-use-after-free READ 2 Crash state: BEInt::operator unsigned short OT::IntType::operator unsigned int OT::GlyphVarData::hasdata...

OSV-2020-11 Heap-buffer-overflow in jbig2_image_get_pixel_fast

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20440 Crash type: Heap-buffer-overflow READ 1 Crash state: jbig2imagegetpixelfast jbig2decodegenerictemplate0TPGDON jbig2immediategenericregion...

OSV-2020-19 Heap-use-after-free in htp_connp_is_line_terminator

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21712 Crash type: Heap-use-after-free READ 1 Crash state: htpconnpislineterminator htpconnpREQHEADERS htpconnpreqdata...

OSV-2020-10 Heap-use-after-free in ndpi_workflow_process_packet

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20164 Crash type: Heap-use-after-free READ 2 Crash state: ndpiworkflowprocesspacket fuzzndpireader.c noderelease...

OSV-2020-8 Heap-buffer-overflow in findNextBorderPixel

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23433 Crash type: Heap-buffer-overflow READ 4 Crash state: findNextBorderPixel pixGetHoleBorder pixGetCCBorders...

OSV-2020-3 UNKNOWN WRITE in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22962 Crash type: UNKNOWN WRITE Crash state: std::1::basicstring, std::1::allocator, std::1::allocatorch pcpp::IDnsResource::IDnsResource...

OSV-2020-1 Use-of-uninitialized-value in numaCrossingsByThreshold

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22764 Crash type: Use-of-uninitialized-value Crash state: numaCrossingsByThreshold numaSelectCrossingThreshold pixExtractBarcodeCrossings...

unicorn:fuzz_emu_arm64_arm: Use-of-uninitialized-value in float64_to_float32_aarch64

Detailed Report: https://oss-fuzz.com/testcase?key=5113167238922240 Project: unicorn Fuzzing Engine: libFuzzer Fuzz Target: fuzzemuarm64arm Job Type: libfuzzermsanunicorn Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: float64tofloat32aarch64...

usrsctp:fuzzer_connect: Heap-buffer-overflow in sctp_handle_packet_dropped

Project: https://github.com/weinrank/usrsctp.git Detailed Report: https://oss-fuzz.com/testcase?key=5387560242380800 Project: usrsctp Fuzzing Engine: afl Fuzz Target: fuzzerconnect Job Type: aflasanusrsctp Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x61100000e070...

leptonica:pix_rotate_shear_fuzzer: Heap-buffer-overflow in pixReadFromTiffStream

Project: https://github.com/DanBloomberg/leptonica.git Detailed Report: https://oss-fuzz.com/testcase?key=6297621508653056 Project: leptonica Fuzzing Engine: honggfuzz Fuzz Target: pixrotateshearfuzzer Job Type: honggfuzzasanleptonica Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Cra...

haproxy:fuzz_cfg_parser: Heap-buffer-overflow in readcfgfile

Project: https://github.com/haproxy/haproxy.git Detailed Report: https://oss-fuzz.com/testcase?key=5702089866215424 Project: haproxy Fuzzing Engine: libFuzzer Fuzz Target: fuzzcfgparser Job Type: libfuzzerasanhaproxy Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address:...

CVE-2020-4062

In Conjur OSS Helm Chart before 2.0.0, a recently identified critical vulnerability resulted in the installation of the Conjur Postgres database with an open port. This allows an attacker to gain full read & write access to the Conjur Postgres database, including escalating the attacker's...

CVE-2020-4062

In Conjur OSS Helm Chart before 2.0.0, a recently identified critical vulnerability resulted in the installation of the Conjur Postgres database with an open port. This allows an attacker to gain full read & write access to the Conjur Postgres database, including escalating the attacker's...

Design/Logic Flaw

In Conjur OSS Helm Chart before 2.0.0, a recently identified critical vulnerability resulted in the installation of the Conjur Postgres database with an open port. This allows an attacker to gain full read & write access to the Conjur Postgres database, including escalating the attacker's...

CVE-2020-4062 Improper Access Control in Conjur OSS Helm Chart

In Conjur OSS Helm Chart before 2.0.0, a recently identified critical vulnerability resulted in the installation of the Conjur Postgres database with an open port. This allows an attacker to gain full read & write access to the Conjur Postgres database, including escalating the attacker's...

CVE-2020-4062

In Conjur OSS Helm Chart before 2.0.0, a critical issue leads to installing Conjur’s Postgres database with an open port. An attacker who knows the Postgres IP and port and has access to the Kubernetes cluster can gain full read/write access to the database, escalate privileges, and write policie...

ghostscript:gstoraster_fuzzer: Use-of-uninitialized-value in load_truetype_glyph

Detailed Report: https://oss-fuzz.com/testcase?key=6276535945527296 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzermsanghostscript Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: loadtruetypeglyph TTLoadGlyph...