c-ares/ares_parse_reply_fuzzer: Use-of-uninitialized-value in ares__parse_into_addrinfo2

Project: https://github.com/c-ares/c-ares.git Detailed report: https://oss-fuzz.com/testcase?key=5728518081609728 Project: c-ares Fuzzer: libFuzzerc-aresaresparsereplyfuzzer Fuzz target binary: aresparsereplyfuzzer Job Type: libfuzzermsanc-ares Platform Id: linux Crash Type:...

c-ares/ares_parse_reply_fuzzer: Heap-buffer-overflow in ares_parse_aaaa_reply

Project: https://github.com/c-ares/c-ares.git Detailed report: https://oss-fuzz.com/testcase?key=5650695891451904 Project: c-ares Fuzzer: libFuzzerc-aresaresparsereplyfuzzer Fuzz target binary: aresparsereplyfuzzer Job Type: libfuzzerasanc-ares Platform Id: linux Crash Type: Heap-buffer-overflow...

ffmpeg/ffmpeg_AV_CODEC_ID_QDM2_fuzzer: Index-out-of-bounds in fix_coding_method_array

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5749441484554240 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDQDM2fuzzer Fuzz target binary: ffmpegAVCODECIDQDM2fuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: Index-out-of-bounds...

imagemagick/enhance_fuzzer: Use-of-uninitialized-value in decoded_picture_buffer::get_image

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5184603087699968 Project: imagemagick Fuzzer: libFuzzerimagemagickenhancefuzzer Fuzz target binary: enhancefuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

Microsoft Operating Systems BlueKeep Vulnerability

Summary The Cybersecurity and Infrastructure Security Agency CISA is issuing this Activity Alert to provide information on a vulnerability, known as “BlueKeep,” that exists in the following Microsoft Windows Operating Systems OSs, including both 32- and 64-bit versions, as well as all Service Pac...

llvm/llvm-isel-fuzzer--aarch64-O2: Heap-use-after-free in CodeGenPrepare::optimizeInst

Project: https://github.com/llvm/llvm-project.git Detailed report: https://oss-fuzz.com/testcase?key=5676435362021376 Project: llvm Fuzzer: libFuzzerllvmllvm-isel-fuzzer--aarch64-O2 Fuzz target binary: llvm-isel-fuzzer--aarch64-O2 Job Type: libfuzzerasanllvm Platform Id: linux Crash Type:...

ffmpeg/ffmpeg_AV_CODEC_ID_IFF_ILBM_fuzzer: Crash in extract_header

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5080476840099840 Project: ffmpeg Fuzzer: aflffmpegAVCODECIDIFFILBMfuzzer Fuzz target binary: ffmpegAVCODECIDIFFILBMfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: UNKNOWN WRITE Crash Addres...

libarchive/libarchive_fuzzer: Crash in crc32

Project: https://github.com/libarchive/libarchive.git Detailed report: https://oss-fuzz.com/testcase?key=5668631809097728 Project: libarchive Fuzzer: libFuzzerlibarchivefuzzer Fuzz target binary: libarchivefuzzer Job Type: libfuzzerasanlibarchive Platform Id: linux Crash Type: UNKNOWN READ Crash...

leptonica/pix_rotate_shear_fuzzer: Use-of-uninitialized-value in TIFFYCbCrtoRGB

Project: https://github.com/DanBloomberg/leptonica.git Detailed report: https://oss-fuzz.com/testcase?key=5674093799538688 Project: leptonica Fuzzer: libFuzzerleptonicapixrotateshearfuzzer Fuzz target binary: pixrotateshearfuzzer Job Type: libfuzzermsanleptonica Platform Id: linux Crash Type:...

imagemagick/encoder_heic_fuzzer: Stack-buffer-overflow in std::__1::shared_ptr<heif::HeifPixelImage>::~shared_ptr

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5638446846050304 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderheicfuzzer Fuzz target binary: encoderheicfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type:...

ffmpeg/ffmpeg_AV_CODEC_ID_LIBVORBIS_fuzzer: Crash in oggvorbis_decode_init

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5764908467093504 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDLIBVORBISfuzzer Fuzz target binary: ffmpegAVCODECIDLIBVORBISfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: UNKNOWN...

ffmpeg/ffmpeg_AV_CODEC_ID_WMV3IMAGE_fuzzer: Index-out-of-bounds in vc1_decode_ac_coeff

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5648992869810176 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDWMV3IMAGEfuzzer Fuzz target binary: ffmpegAVCODECIDWMV3IMAGEfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type:...

ffmpeg/ffmpeg_AV_CODEC_ID_ATRAC9_fuzzer: Index-out-of-bounds in apply_band_extension

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5671602181636096 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDATRAC9fuzzer Fuzz target binary: ffmpegAVCODECIDATRAC9fuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type:...

imagemagick/ping_dng_fuzzer: Heap-buffer-overflow in LibRaw::get2

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5755410549571584 Project: imagemagick Fuzzer: libFuzzerimagemagickpingdngfuzzer Fuzz target binary: pingdngfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type:...

The vulnerability of the command-line interface of the Cisco NX-OSS network operating system in Cisco devices allows a attacker to gain access to internal services.

The vulnerability of the command-line interface of the Cisco NX-OSS network operating system devices relates to insufficient checking of arguments passed in commands. Exploiting this vulnerability can allow attackers to gain access to internal services...

radare2/ia_fuzz: Heap-use-after-free in cin_get

Project: https://github.com/radare/radare2.git Detailed report: https://oss-fuzz.com/testcase?key=5695184991420416 Project: radare2 Fuzzer: libFuzzerradare2iafuzz Fuzz target binary: iafuzz Job Type: libfuzzerasanradare2 Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address:...

UPDATE: OWASP Dependency-Check 5.0.0

PenTestIT RSS Feed My first post about this open source OWASP project was about an older version. About 18 hours ago, a new version was released. This post discusses the changes made to the open source software composition analysis utility in the latest release yesterday. This is the OWASP...

libpcap/fuzz_filter: Heap-double-free in opt_cleanup

Project: https://github.com/the-tcpdump-group/libpcap.git Detailed report: https://oss-fuzz.com/testcase?key=5641391398453248 Project: libpcap Fuzzer: afllibpcapfuzzfilter Fuzz target binary: fuzzfilter Job Type: aflasanlibpcap Platform Id: linux Crash Type: Heap-double-free Crash Address:...

ffmpeg/ffmpeg_DEMUXER_fuzzer: Heap-buffer-overflow in read_vblock

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5731062396747776 Project: ffmpeg Fuzzer: libFuzzerffmpegDEMUXERfuzzer Fuzz target binary: ffmpegDEMUXERfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Cra...

gdal/gdal_fuzzer: Stack-buffer-overflow in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5104504850087936 Project: gdal Fuzzer: libFuzzergdalfuzzer Fuzz target binary: gdalfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Stack-buffer-overflow READ Crash Address: 0x7f60356ed3...