libarchive/libarchive_fuzzer: Heap-buffer-overflow in run_arm_filter

Project: https://github.com/libarchive/libarchive.git Detailed report: https://oss-fuzz.com/testcase?key=5666609181491200 Project: libarchive Fuzzer: libFuzzerlibarchivefuzzer Fuzz target binary: libarchivefuzzer Job Type: libfuzzerasanlibarchive Platform Id: linux Crash Type: Heap-buffer-overflo...

PT-2019-4483

Name of the Vulnerable Software and Affected Versions Linux kernel version 5.0.21 Description The issue is related to a buffer overflow read in the Linux kernel, specifically in the functions f2fs build segment manager and init min max mtime in fs/f2fs/segment.c. This can be exploited by mounting...

PT-2019-1913

Name of the Vulnerable Software and Affected Versions rdesktop versions up to and including v1.8.3 Description The issue is related to a buffer overflow read in the secure.c file of the rdesktop client, which can be exploited by a remote attacker to cause a denial of service. This can result in a...

SUSE SLED15 / SLES15 Security Update : perl (SUSE-SU-2018:4187-1)

This update for perl fixes the following issues : Secuirty issues fixed : CVE-2018-18311: Fixed integer overflow with oversize environment bsc1114674. CVE-2018-18312: Fixed heap-buffer-overflow write / regnode overrun bsc1114675. CVE-2018-18313: Fixed heap-buffer-overflow read if regex contains \...

PT-2018-2718

Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.6.40 PHP versions 7.0.x through 7.1.25 PHP versions 7.2.x through 7.2.13 PHP versions 7.3.x through 7.3.0 Description An issue in PHP allows for invalid memory access due to invalid input to the xmlrpc decode function,...

Debian DSA-4347-1 : perl - security update

Multiple vulnerabilities were discovered in the implementation of the Perl programming language. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2018-18311 Jayakrishna Menon and Christophe Hauser discovered an integer overflow vulnerability in Perlmysete...

PT-2018-3188

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 69.0.3497.81 Description The issue is caused by an unintended floating-point error accumulation in SwiftShader, allowing a remote attacker to leak cross-origin data via a crafted HTML page. This can be exploited...

GPAC MP4Box Heap Overflow Vulnerability

GPAC is a set of open source multimedia framework . MP4Box is one of the multimedia wrapper . A heap overflow vulnerability exists in the 'urnRead' function in the isomedia/boxcodebase.c file of MP4Box in GPAC version 0.7.1. An attacker can exploit this vulnerability to cause a heap buffer...

CVE-2017-5412: Improper Restriction of Operations within the Bounds of a Memory Buffer

A buffer overflow read during SVG filter color value operations, resulting in data exposure. This vulnerability affects Firefox 52 and Thunderbird 52...

imagemagick/encoder_heic_fuzzer: Heap-buffer-overflow in ff_hevc_put_hevc_qpel_pixels_8_sse

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5358449251581952 Project: imagemagick Fuzzer: aflimagemagickencoderheicfuzzer Fuzz target binary: encoderheicfuzzer Job Type: aflasanimagemagick Platform Id: linux Crash Type:...

PT-2019-1900

Name of the Vulnerable Software and Affected Versions Wireshark versions 2.4.0 through 2.4.11 Wireshark versions 2.6.0 through 2.6.5 Description The issue is related to a buffer overflow read in the RTSE dissector of the Wireshark network traffic analyzer, which could lead to a denial of service...

skia/animated_image_decode: Container-overflow in piex::GetFullCropDimension

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5667932416770048 Project: skia Fuzzer: libFuzzerskiaanimatedimagedecode Fuzz target binary: animatedimagedecode Job Type: libfuzzerasanskia Platform Id: linux Crash Type: Container-overflow READ 4...

PT-2017-1671

Name of the Vulnerable Software and Affected Versions iOS versions prior to 10.3 macOS versions prior to 10.12.4 tvOS versions prior to 10.2 watchOS versions prior to 3.2 Description The issue involves the FontParser component and is caused by a buffer overflow read. It may allow a remote attacke...

PT-2017-16495

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 52 Thunderbird versions prior to 52 Description A buffer overflow read occurs during SVG filter color value operations, resulting in data exposure. Recommendations For Firefox versions prior to 52, update to version 5...

ALPINE-CVE-2016-9104

Multiple integer overflows in the 1 v9fsxattrread and 2 v9fsxattrwrite functions in hw/9pfs/9p.c in QEMU aka Quick Emulator allow local guest OS administrators to cause a denial of service QEMU process crash via a crafted offset, which triggers an out-of-bounds access...

DLA-716-1 tiff - security update

Bulletin has no description...

Updated libtiff packages fix security vulnerability

A read outside of array in tiffsplit or other utilities using TIFFNumberOfStrips CVE-2016-9273. A potential read outside buffer in TIFFPrintField CVE-2016-9297. Multiple uint32 overflows in writeBufferToSeparateStrips, writeBufferToContigTiles and writeBufferToSeparateTiles that could cause heap...

PT-2018-3361

Name of the Vulnerable Software and Affected Versions: FreeRDP versions prior to 2.0.0-rc4 Description: The issue is related to Out-Of-Bounds Reads in the NTLM Authentication module, which can result in a Denial of Service. This is caused by a buffer overflow read in the memory. An attacker could...