USN-3746-1: APT vulnerability | Cloud Foundry

Severity High Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 18.04 Description It was discovered that APT incorrectly handled the mirror method mirror://. If a remote attacker were able to perform a man-in-the-middle attack, this flaw could potentially be used to install altered...

USN-3740-2: Linux kernel (HWE) vulnerabilities | Cloud Foundry

Severity High Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 16.04 Description USN-3740-1 fixed vulnerabilities in the Linux kernel for Ubuntu 18.04 LTS. This update provides the corresponding updates for the Linux Hardware Enablement HWE kernel from Ubuntu 18.04 LTS for Ubuntu 16.04...

libreoffice/hwpfuzzer: Heap-use-after-free in HMemIODev::read4b

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5753299056197632 Project: libreoffice Fuzzer: libFuzzerlibreofficehwpfuzzer Fuzz target binary: hwpfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-use-after-fre...

libreoffice/hwpfuzzer: Heap-use-after-free in HMemIODev::read4b

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=6331102684250112 Project: libreoffice Fuzzer: libFuzzerlibreofficehwpfuzzer Fuzz target binary: hwpfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-use-after-fre...

libreoffice/hwpfuzzer: Crash in __dynamic_cast

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5708932111138816 Project: libreoffice Fuzzer: libFuzzerlibreofficehwpfuzzer Fuzz target binary: hwpfuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type: UNKNOWN READ Cras...

libreoffice/hwpfuzzer: Heap-use-after-free in Picture::Read

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5194249000189952 Project: libreoffice Fuzzer: libFuzzerlibreofficehwpfuzzer Fuzz target binary: hwpfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-use-after-fre...

libaom/av1_dec_fuzzer_threaded: Heap-buffer-overflow in av1_loop_restoration_filter_frame_mt

Detailed report: https://oss-fuzz.com/testcase?key=5681902774648832 Project: libaom Fuzzer: afllibaomav1decfuzzerthreaded Fuzz target binary: av1decfuzzerthreaded Job Type: aflasanlibaom Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address: 0x60b00000041c Crash State:...

ffmpeg/ffmpeg_AV_CODEC_ID_MPEG4_fuzzer: Heap-buffer-overflow in get_bits

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5071833448054784 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDMPEG4fuzzer Fuzz target binary: ffmpegAVCODECIDMPEG4fuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overfl...

radare2/ia_fuzz: Heap-buffer-overflow in r_bin_mdmp_get_mem_info

Project: https://github.com/radare/radare2.git https://github.com/radareorg/radare2.git Detailed report: https://oss-fuzz.com/testcase?key=5080237558202368 Project: radare2 Fuzzer: libFuzzerradare2iafuzz Fuzz target binary: iafuzz Job Type: libfuzzerasanradare2 Platform Id: linux Crash Type:...

libaom/av1_dec_fuzzer_threaded: Crash in set_planes_to_neutral_grey

Detailed report: https://oss-fuzz.com/testcase?key=6281289628385280 Project: libaom Fuzzer: libFuzzerlibaomav1decfuzzerthreaded Fuzz target binary: av1decfuzzerthreaded Job Type: libfuzzerubsanlibaom Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x7faf82e07260 Crash State:...

libaom/av1_dec_fuzzer: Heap-use-after-free in read_uncompressed_header

Detailed report: https://oss-fuzz.com/testcase?key=5631259649245184 Project: libaom Fuzzer: libFuzzerlibaomav1decfuzzer Fuzz target binary: av1decfuzzer Job Type: libfuzzerasanlibaom Platform Id: linux Crash Type: Heap-use-after-free WRITE 2 Crash Address: 0x7f08e0263260 Crash State:...

freetype2/cff: Heap-buffer-overflow in tt_face_palette_set

Detailed report: https://oss-fuzz.com/testcase?key=5745733882347520 Project: freetype2 Fuzzer: aflfreetype2cff Fuzz target binary: cff Job Type: aflasanfreetype2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x617000000a74 Crash State: ttfacepaletteset ttfaceloadcpal...

freetype2/type1-tar: Heap-buffer-overflow in next_field

Detailed report: https://oss-fuzz.com/testcase?key=5654048309510144 Project: freetype2 Fuzzer: aflfreetype2type1-tar Fuzz target binary: type1-tar Job Type: aflasanfreetype2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x61500000e57f Crash State: nextfield...

libreoffice/xlsfuzzer: Container-overflow in ScDPResultDimension::LateInitFrom

Detailed report: https://oss-fuzz.com/testcase?key=5694719535874048 Project: libreoffice Fuzzer: afllibreofficexlsfuzzer Fuzz target binary: xlsfuzzer Job Type: aflasanlibreoffice Platform Id: linux Crash Type: Container-overflow READ 4 Crash Address: 0x603000253634 Crash State:...

imagemagick/encoder_heic_fuzzer: Use-of-uninitialized-value in void intra_prediction_sample_filtering<unsigned char>

Detailed report: https://oss-fuzz.com/testcase?key=5712367019622400 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderheicfuzzer Fuzz target binary: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: voi...

imagemagick/encoder_heic_fuzzer: Use-of-uninitialized-value in put_unweighted_pred_16_fallback

Detailed report: https://oss-fuzz.com/testcase?key=5652950542712832 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderheicfuzzer Fuzz target binary: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

wireshark/fuzzshark_ip: Heap-buffer-overflow in proto_tree_new_item

Project: https://code.wireshark.org/review/wireshark https://gitlab.com/wireshark/wireshark.git Detailed report: https://oss-fuzz.com/testcase?key=5164376168857600 Project: wireshark Fuzzer: libFuzzerwiresharkfuzzsharkip Fuzz target binary: fuzzsharkip Job Type: libfuzzerasanwireshark Platform Id...

wget2/wget_options_fuzzer: Heap-buffer-overflow in set_char_prefix

Project: https://gitlab.com/gnuwget/wget2.git Detailed report: https://oss-fuzz.com/testcase?key=5704034783068160 Project: wget2 Fuzzer: libFuzzerwget2wgetoptionsfuzzer Fuzz target binary: wgetoptionsfuzzer Job Type: libfuzzerasanwget2 Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1...

poppler/pdf_fuzzer: Heap-buffer-overflow in SplashPath::lineTo

Project: https://anongit.freedesktop.org/git/poppler/poppler.git https://gitlab.freedesktop.org/poppler/poppler.git https://gitlab.freedesktop.org/ceyhunalp/poppler.git Detailed report: https://oss-fuzz.com/testcase?key=5765145289031680 Project: poppler Fuzzer: libFuzzerpopplerpdffuzzer Fuzz targ...

graphicsmagick/coder_JNX_fuzzer: Use-of-uninitialized-value in funcDCM_PhotometricInterpretation

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=5642969676251136 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderJNXfuzzer Fuzz target binary: coderJNXfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type:...