CVE-2017-4964: BOSH Azure CPI code injection vulnerability | Cloud Foundry

Severity Medium Vendor Cloud Foundry Foundation Versions Affected BOSH Azure CPI Release v22 Description The BOSH Azure CPI could potentially allow a maliciously crafted stemcell to execute arbitrary code on VMs created by the director. Mitigation OSS users are strongly encouraged to follow the...

USN-3222-1: ImageMagick vulnerabilities | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 14.04 Description It was discovered that ImageMagick incorrectly handled certain malformed image files. If a user or automated system using ImageMagick were tricked into opening a specially crafted image, an attacker could...

grpc: Heap-buffer-overflow in grpc_base64_decode

Detailed report: https://oss-fuzz.com/testcase?key=5595941564317696 Project: grpc Fuzzer: libFuzzergrpcserverfuzzer Job Type: libfuzzerasangrpc Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x608000000172 Crash State: grpcbase64decode serverfilterincomingmetadata hsonrec...

libmspub: Stack-use-after-scope in libmspub::MSPUBCollector::paintShape

Detailed report: https://oss-fuzz.com/testcase?key=4867319689904128 Project: libmspub Fuzzer: afllibmspubpubfuzzer Fuzz target binary: pubfuzzer Job Type: aflasanlibmspub Platform Id: linux Crash Type: Stack-use-after-scope READ 8 Crash Address: 0x7f23248bf9f0 Crash State:...

grpc: Heap-buffer-overflow in server_filter_incoming_metadata

Detailed report: https://oss-fuzz.com/testcase?key=5417405008314368 Project: grpc Fuzzer: libFuzzergrpcserverfuzzer Fuzz target binary: serverfuzzer Job Type: libfuzzerasangrpc Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x607000001799 Crash State:...

file: Heap-buffer-overflow in cdf_read_property_info

Project: https://github.com/file/file.git Detailed report: https://oss-fuzz.com/testcase?key=5121085282451456 Project: file Fuzzer: aflfilemagicfuzzer Fuzz target binary: magicfuzzer Job Type: aflasanfile Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x611000000280 Cra...

ots: Heap-use-after-free in ots::OTSStream::Write

Project: https://github.com/khaledhosny/ots.git Detailed report: https://oss-fuzz.com/testcase?key=5372103857537024 Project: ots Fuzzer: libFuzzerotsots-fuzzer Fuzz target binary: ots-fuzzer Job Type: libfuzzerasanots Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address:...

BGP Swiss Army Knife: ExaBGP

ExaBGP provides a convenient way to implement Software Defined Networking by transforming BGP messages into friendly plain text or JSON, which can then be easily handled by simple scripts or your BSS/OSS. It is routinely used to improve service resilience and provide protection against network or...

sqlite3: Global-buffer-overflow in sqlite3VdbeMemPrettyPrint

Detailed report: https://oss-fuzz.com/testcase?key=6749820112863232 Project: sqlite3 Fuzzer: libFuzzersqlite3ossfuzz Fuzz target binary: ossfuzz Job Type: libfuzzerasansqlite3 Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash Address: 0x000002b188a8 Crash State:...

libreoffice: Container-overflow in inflate

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5887012185833472 Project: libreoffice Fuzzer: libFuzzerlibreofficehwpfuzzer Fuzz target binary: hwpfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Container-overflow...

lcms: Heap-buffer-overflow in TetrahedralInterpFloat

Project: https://github.com/mm2/Little-CMS.git Detailed report: https://oss-fuzz.com/testcase?key=6565571653009408 Project: lcms Fuzzer: libFuzzerlcmscmstransformfuzzer Fuzz target binary: cmstransformfuzzer Job Type: libfuzzerasanlcms Platform Id: linux Crash Type: Heap-buffer-overflow READ 4...

harfbuzz: Use-of-uninitialized-value in int OT::SortedArrayOf<OT::GlyphID, OT::IntType<unsigned short, 2u> >::bsearch<un

Detailed report: https://oss-fuzz.com/testcase?key=6023178755244032 Project: harfbuzz Fuzzer: libFuzzerharfbuzzhb-fuzzer Fuzz target binary: hb-fuzzer Job Type: libfuzzermsanharfbuzz Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: int OT::SortedArrayOf...

ffmpeg: Crash in ff_emu_edge_vfix10_mmx

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=6172687908995072 Project: ffmpeg Fuzzer: libFuzzerffmpegVIDEOAVCODECIDVP6Ffuzzer Fuzz target binary: ffmpegVIDEOAVCODECIDVP6Ffuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: UNKNOWN RE...

file: Heap-buffer-overflow in file_trycdf

Project: https://github.com/file/file.git Detailed report: https://oss-fuzz.com/testcase?key=5240919450189824 Project: file Fuzzer: libFuzzerfilemagicfuzzer Fuzz target binary: magicfuzzer Job Type: libfuzzerasanfile Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address:...

libreoffice: Global-buffer-overflow in ImplUnicodeToDBCS

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5976843305877504 Project: libreoffice Fuzzer: libFuzzerlibreofficewmffuzzer Fuzz target binary: wmffuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type:...

ffmpeg: Crash in ff_put_pixels8_mmx

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=6743603416137728 Project: ffmpeg Fuzzer: libFuzzerffmpegVIDEOAVCODECIDVP6Ffuzzer Fuzz target binary: ffmpegVIDEOAVCODECIDVP6Ffuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: UNKNOWN RE...

harfbuzz: Use-of-uninitialized-value in int OT::SortedArrayOf<OT::GlyphID, OT::IntType<unsigned short, 2u> >::bsearch<un

Project: https://github.com/harfbuzz/harfbuzz.git Detailed report: https://oss-fuzz.com/testcase?key=5294584596791296 Project: harfbuzz Fuzzer: libFuzzerharfbuzzhb-fuzzer Fuzz target binary: hb-fuzzer Job Type: libfuzzermsanharfbuzz Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

libreoffice: Crash in CCIDecompressor::DecompressScanline

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5502470442713088 Project: libreoffice Fuzzer: libFuzzerlibreofficetiffuzzer Fuzz target binary: tiffuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: UNKNOWN Crash...

grpc: Heap-use-after-free in grpc_call_destroy

Detailed report: https://oss-fuzz.com/testcase?key=5414767311192064 Project: grpc Fuzzer: libFuzzergrpcapifuzzer Fuzz target binary: apifuzzer Job Type: libfuzzerasangrpc Platform Id: linux Crash Type: Heap-use-after-free WRITE 8 Crash Address: 0x621000040908 Crash State: grpccalldestroy...

grpc: Heap-buffer-overflow in parse_unix

Detailed report: https://oss-fuzz.com/testcase?key=5834320218423296 Project: grpc Fuzzer: libFuzzergrpcapifuzzer Fuzz target binary: apifuzzer Job Type: libfuzzerasangrpc Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address: 0x616000000900 Crash State: parseunix sockaddrcreate...