Ubuntu: Security Advisory (USN-4474-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DLA-2278-3 squid3 - regression update

Bulletin has no description...

rnp:fuzz_keyring_kbx: Heap-buffer-overflow in mem_src_read

Project: https://github.com/rnpgp/rnp.git Detailed Report: https://oss-fuzz.com/testcase?key=6221139846889472 Project: rnp Fuzzing Engine: libFuzzer Fuzz Target: fuzzkeyringkbx Job Type: libfuzzerasanrnp Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x60e000000376 Crash...

rnp:fuzz_keyring_kbx: Heap-buffer-overflow in rnp_key_store_kbx_from_src

Project: https://github.com/rnpgp/rnp.git Detailed Report: https://oss-fuzz.com/testcase?key=5632243442384896 Project: rnp Fuzzing Engine: libFuzzer Fuzz Target: fuzzkeyringkbx Job Type: libfuzzerasanrnp Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6030000005d2 Cras...

yara:macho_fuzzer: Heap-buffer-overflow in macho_handle_segment

Project: https://github.com/VirusTotal/yara.git Detailed Report: https://oss-fuzz.com/testcase?key=5067096227315712 Project: yara Fuzzing Engine: libFuzzer Fuzz Target: machofuzzer Job Type: libfuzzerasanyara Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x60600000011b...

php:php-fuzz-execute: Crash in zend_gc_delref

Detailed Report: https://oss-fuzz.com/testcase?key=5700128755941376 Project: php Fuzzing Engine: honggfuzz Fuzz Target: php-fuzz-execute Job Type: honggfuzzasanphp Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7f67427c7800 Crash State: zendgcdelref izvalptrdtor zenduncleanzvalptrdt...

go-dns:fuzz_msg_unpack: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5706613619687424 Project: go-dns Fuzzing Engine: libFuzzer Fuzz Target: fuzzmsgunpack Job Type: libfuzzerasango-dns Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0000016a280c Crash State: NULL Sanitizer: address ASAN Recommended...

uwebsockets:TopicTree: Index-out-of-bounds in uWS::TopicTree::publish

Project: https://github.com/uNetworking/uWebSockets.git Detailed Report: https://oss-fuzz.com/testcase?key=5926030899150848 Project: uwebsockets Fuzzing Engine: libFuzzer Fuzz Target: TopicTree Job Type: libfuzzerubsanuwebsockets Platform Id: linux Crash Type: Index-out-of-bounds Crash Address:...

uwebsockets:TopicTree: Segv on unknown address in std::__1::__tree<std::__1::__value_type<unsigned int, std::__1::pair<std::__1::b

Project: https://github.com/uNetworking/uWebSockets.git Detailed Report: https://oss-fuzz.com/testcase?key=4796114929451008 Project: uwebsockets Fuzzing Engine: libFuzzer Fuzz Target: TopicTree Job Type: libfuzzerasanuwebsockets Platform Id: linux Crash Type: Segv on unknown address Crash Address...

ffmpeg:ffmpeg_AV_CODEC_ID_CFHD_fuzzer: Crash in ff_cfhd_vert_filter_sse2

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4865603750592512 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDCFHDfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7f8722a790e0...

Ubuntu 16.04 LTS / 18.04 LTS : Net-SNMP regression (USN-4471-2)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4471-2 advisory. USN-4471-1 fixed a vulnerability in Net-SNMP. The updated introduced a regression making nsExtendCacheTime not settable. This update fixes the problem...

libyal:libewf_handle_fuzzer: Heap-buffer-overflow in libfvalue_table_copy_from_utf8_xml_string

Detailed Report: https://oss-fuzz.com/testcase?key=4872028845506560 Project: libyal Fuzzing Engine: libFuzzer Fuzz Target: libewfhandlefuzzer Job Type: libfuzzerasanlibyal Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x618000000398 Crash State:...

php:php-fuzz-execute: Heap-use-after-free in zend_generator_search_multi_children_node

Detailed Report: https://oss-fuzz.com/testcase?key=6185129708617728 Project: php Fuzzing Engine: honggfuzz Fuzz Target: php-fuzz-execute Job Type: honggfuzzasanphp Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x612000014de0 Crash State:...

USN-4471-2: Net-SNMP regression

USN-4471-1 fixed a vulnerability in Net-SNMP. The updated introduced a regression making nsExtendCacheTime not settable. This update fixes the problem adding the cacheTime feature flag. Original advisory details: Tobias Neitzel discovered that Net-SNMP incorrectly handled certain symlinks. An...

arrow:arrow-ipc-stream-fuzz: Heap-buffer-overflow in void arrow::internal::TransferBitmap<

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=5677954426994688 Project: arrow Fuzzing Engine: afl Fuzz Target: arrow-ipc-stream-fuzz Job Type: aflasanarrow Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x619000000ee4...

php:php-fuzz-execute: Use-of-uninitialized-value in ZEND_JMP_NULL_SPEC_TMPVARCV_HANDLER

Detailed Report: https://oss-fuzz.com/testcase?key=6303398201393152 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-execute Job Type: libfuzzermsanphp Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: ZENDJMPNULLSPECTMPVARCVHANDLER fuzzerexecuteex...

php:php-fuzz-execute: Crash in zend_gc_delref

Detailed Report: https://oss-fuzz.com/testcase?key=5758025133195264 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-execute Job Type: libfuzzerasani386php Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xbebebebe Crash State: zendgcdelref zvaldelrefp zvalptrdtornogc...

ipfs:ipfs_ds_flatfs: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5141448788541440 Project: ipfs Fuzzing Engine: libFuzzer Fuzz Target: ipfsdsflatfs Job Type: libfuzzerasanipfs Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00001c3161ef Crash State: NULL Sanitizer: address ASAN Recommended Securit...

c-blosc2:decompress_fuzzer: Nested bug in the same thread, aborting. with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6211547465252864 Project: c-blosc2 Fuzzing Engine: libFuzzer Fuzz Target: decompressfuzzer Job Type: libfuzzermsanc-blosc2 Platform Id: linux Crash Type: Nested bug in the same thread, aborting. Crash Address: Crash State: NULL Sanitizer: memory...

skia:sksl2spirv: Segv on unknown address in std::__1::default_delete<SkSL::Statement>::operator

Project: https://skia.googlesource.com/skia.git Detailed Report: https://oss-fuzz.com/testcase?key=4664685717356544 Project: skia Fuzzing Engine: libFuzzer Fuzz Target: sksl2spirv Job Type: libfuzzermsanskia Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State:...