Fedora 30 : python-urllib3 (2019-6afaa38e7b)

Fix an issue similar to CVE-2018-20060 where the authorization header was removed only when the case matched. - Fix an issue where the system CA bundle was loaded even when an alternate bundle was explicitly specified https://www.openwall.com/lists/oss-security/2019/04/17/ 3 Full changelog at:...

libpcap/fuzz_filter: Use-of-uninitialized-value in fuzz_filter.c

Project: https://github.com/the-tcpdump-group/libpcap.git Detailed report: https://oss-fuzz.com/testcase?key=5735452293726208 Project: libpcap Fuzzer: libFuzzerlibpcapfuzzfilter Fuzz target binary: fuzzfilter Job Type: libfuzzermsanlibpcap Platform Id: linux Crash Type: Use-of-uninitialized-value...

libpcap/fuzz_both: Use-of-uninitialized-value in fuzz_both.c

Project: https://github.com/the-tcpdump-group/libpcap.git Detailed report: https://oss-fuzz.com/testcase?key=5674747897053184 Project: libpcap Fuzzer: libFuzzerlibpcapfuzzboth Fuzz target binary: fuzzboth Job Type: libfuzzermsanlibpcap Platform Id: linux Crash Type: Use-of-uninitialized-value Cra...

ffmpeg/ffmpeg_AV_CODEC_ID_AGM_fuzzer: Crash in decode_huffman2

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5742854804078592 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDAGMfuzzer Fuzz target binary: ffmpegAVCODECIDAGMfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: UNKNOWN READ Crash...

capstone/fuzz_disasmnext: Global-buffer-overflow in decodeRegisterClass

Detailed report: https://oss-fuzz.com/testcase?key=5659998039834624 Project: capstone Fuzzer: libFuzzercapstonefuzzdisasmnext Fuzz target binary: fuzzdisasmnext Job Type: libfuzzerasancapstone Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Address: 0x0000009ad90c Crash State:...

gdal/ogr_fuzzer: Heap-buffer-overflow in OGRPDS::OGRPDSLayer::GetNextRawFeature

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5736429633667072 Project: gdal Fuzzer: libFuzzergdalogrfuzzer Fuzz target binary: ogrfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address:...

lwan/request_fuzzer: Global-buffer-overflow in parse_headers

Project: git://github.com/lpereira/lwan Detailed report: https://oss-fuzz.com/testcase?key=5649134389821440 Project: lwan Fuzzer: afllwanrequestfuzzer Fuzz target binary: requestfuzzer Job Type: aflasanlwan Platform Id: linux Crash Type: Global-buffer-overflow READ 2 Crash Address: 0x0000012023bf...

dlplibs/wqfuzzer: Use-of-uninitialized-value in std::__1::enable_if<

Detailed report: https://oss-fuzz.com/testcase?key=5717618784206848 Project: dlplibs Fuzzer: libFuzzerdlplibswqfuzzer Fuzz target binary: wqfuzzer Job Type: libfuzzermsandlplibs Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: std::1::enableif...

net-snmp/agentx_parse_fuzzer: Heap-buffer-overflow in agentx_parse_string

Project: git://git.code.sf.net/p/net-snmp/code Detailed report: https://oss-fuzz.com/testcase?key=5639564196052992 Project: net-snmp Fuzzer: libFuzzernet-snmpagentxparsefuzzer Fuzz target binary: agentxparsefuzzer Job Type: libfuzzerasannet-snmp Platform Id: linux Crash Type: Heap-buffer-overflow...

lwan/request_fuzzer: Crash in url_decode

Project: git://github.com/lpereira/lwan Detailed report: https://oss-fuzz.com/testcase?key=5191405204406272 Project: lwan Fuzzer: afllwanrequestfuzzer Fuzz target binary: requestfuzzer Job Type: aflasanlwan Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0000a00bd95f Crash State:...

wpantund/wpantund-fuzz: Crash in (__has_construct<std::__1::allocator<unsigned

Project: https://github.com/openthread/wpantund.git Detailed report: https://oss-fuzz.com/testcase?key=5700079681273856 Project: wpantund Fuzzer: libFuzzerwpantundwpantund-fuzz Fuzz target binary: wpantund-fuzz Job Type: libfuzzerubsanwpantund Platform Id: linux Crash Type: UNKNOWN READ Crash...

libvpx/vpx_dec_fuzzer_vp8: Crash in subpixel_ssse3.asm:1165

Project: https://chromium.googlesource.com/webm/libvpx Detailed report: https://oss-fuzz.com/testcase?key=5145943336288256 Project: libvpx Fuzzer: libFuzzerlibvpxvpxdecfuzzervp8 Fuzz target binary: vpxdecfuzzervp8 Job Type: libfuzzerasanlibvpx Platform Id: linux Crash Type: UNKNOWN READ Crash...

libxslt/xslt: Use-of-uninitialized-value in xsltNumberFormatInsertNumbers

Project: https://gitlab.gnome.org/GNOME/libxslt.git Detailed report: https://oss-fuzz.com/testcase?key=5631739747106816 Project: libxslt Fuzzer: libFuzzerlibxsltxslt Fuzz target binary: xslt Job Type: libfuzzermsanlibxslt Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

lwan/request_fuzzer: Negative-size-param in parse_proxy_protocol_v2

Project: git://github.com/lpereira/lwan Detailed report: https://oss-fuzz.com/testcase?key=5091179189764096 Project: lwan Fuzzer: libFuzzerlwanrequestfuzzer Fuzz target binary: requestfuzzer Job Type: libfuzzerasanlwan Platform Id: linux Crash Type: Negative-size-param Crash Address: Crash State:...

wget2/libwget_iri_fuzzer: Heap-buffer-overflow in _iri_unescape_inline

Project: https://gitlab.com/gnuwget/wget2.git Detailed report: https://oss-fuzz.com/testcase?key=5641953338720256 Project: wget2 Fuzzer: libFuzzerwget2libwgetirifuzzer Fuzz target binary: libwgetirifuzzer Job Type: libfuzzerasanwget2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Cras...

wget2/libwget_metalink_parse_fuzzer: Heap-buffer-overflow in _iri_unescape_inline

Project: https://gitlab.com/gnuwget/wget2.git Detailed report: https://oss-fuzz.com/testcase?key=5138114927919104 Project: wget2 Fuzzer: libFuzzerwget2libwgetmetalinkparsefuzzer Fuzz target binary: libwgetmetalinkparsefuzzer Job Type: libfuzzerasanwget2 Platform Id: linux Crash Type:...

Fedora 29 : python-urllib3 (2019-a6c56f9756)

Fix an issue similar to CVE-2018-20060 where the authorization header was removed only when the case matched. - Fix an issue where the system CA bundle was loaded even when an alternate bundle was explicitly specified https://www.openwall.com/lists/oss-security/2019/04/17/ 3 Full changelog at:...

openh264/decoder_fuzzer: Heap-use-after-free in WelsDec::DecreasePicBuff

Project: https://github.com/cisco/openh264.git Detailed report: https://oss-fuzz.com/testcase?key=6260234055581696 Project: openh264 Fuzzer: libFuzzeropenh264decoderfuzzer Fuzz target binary: decoderfuzzer Job Type: libfuzzerasanopenh264 Platform Id: linux Crash Type: Heap-use-after-free READ 8...

graphicsmagick/coder_TIFF_fuzzer: Use-of-uninitialized-value in TIFFYCbCrtoRGB

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=5640694644867072 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderTIFFfuzzer Fuzz target binary: coderTIFFfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type:...

dlplibs/wqfuzzer: Stack-buffer-overflow in WPSEmbeddedObject::operator=

Detailed report: https://oss-fuzz.com/testcase?key=5119335720288256 Project: dlplibs Fuzzer: libFuzzerdlplibswqfuzzer Fuzz target binary: wqfuzzer Job Type: libfuzzerasandlplibs Platform Id: linux Crash Type: Stack-buffer-overflow READ 8 Crash Address: 0x7f774d6f6158 Crash State:...