gnutls:gnutls_client_fuzzer: Null-dereference READ with empty stacktrace

Project: https://gitlab.com/gnutls/gnutls.git Detailed Report: https://oss-fuzz.com/testcase?key=5102053377703936 Project: gnutls Fuzzing Engine: afl Fuzz Target: gnutlsclientfuzzer Job Type: aflasangnutls Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash...

systemd:fuzz-netdev-parser: Heap-use-after-free in network_config_compare_func

Project: https://github.com/systemd/systemd.git Detailed Report: https://oss-fuzz.com/testcase?key=5133720507121664 Project: systemd Fuzzing Engine: libFuzzer Fuzz Target: fuzz-netdev-parser Job Type: libfuzzerasansystemd Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address:...

curl:curl_fuzzer_ftp: Stack-buffer-overflow in Curl_pp_readresp

Project: https://github.com/curl/curl.git Detailed Report: https://oss-fuzz.com/testcase?key=6613612490915840 Project: curl Fuzzing Engine: libFuzzer Fuzz Target: curlfuzzerftp Job Type: libfuzzerasancurl Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Address: 0x7ffe58b2ef40 Cra...

curl:curl_fuzzer_imap: Stack-buffer-overflow in Curl_pp_readresp

Project: https://github.com/curl/curl.git Detailed Report: https://oss-fuzz.com/testcase?key=5727799779524608 Project: curl Fuzzing Engine: honggfuzz Fuzz Target: curlfuzzerimap Job Type: honggfuzzasancurl Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Address: 0x7ffa0b94c420...

jsoncpp:jsoncpp_fuzzer: Use-of-uninitialized-value in Json::OurReader::parse

Detailed Report: https://oss-fuzz.com/testcase?key=5740748428541952 Project: jsoncpp Fuzzing Engine: libFuzzer Fuzz Target: jsoncppfuzzer Job Type: libfuzzermsanjsoncpp Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: Json::OurReader::parse...

cryptofuzz:cryptofuzz-openssl-noasm: Heap-buffer-overflow in CRYPTO_128_wrap

Detailed Report: https://oss-fuzz.com/testcase?key=4752556705447936 Project: cryptofuzz Fuzzing Engine: afl Fuzz Target: cryptofuzz-openssl-noasm Job Type: aflasancryptofuzz Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 16 Crash Address: 0x603000013a07 Crash State: CRYPTO128wrap...

llvm:clang-fuzzer: Segv on unknown address in clang::Sema::SetCtorInitializers

Detailed Report: https://oss-fuzz.com/testcase?key=5789742166966272 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-fuzzer Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: clang::Sema::SetCtorInitializers...

ndpi:fuzz_ndpi_reader: Heap-use-after-free in ndpi_strncasestr

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5698722582495232 Project: ndpi Fuzzing Engine: libFuzzer Fuzz Target: fuzzndpireader Job Type: libfuzzerasanndpi Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address: 0x62b00000f730 Cra...

llvm:llvm-opt-fuzzer--x86_64-sccp: Use-of-uninitialized-value in SCCPSolver::visitPHINode

Detailed Report: https://oss-fuzz.com/testcase?key=5383383097278464 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: llvm-opt-fuzzer--x8664-sccp Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: SCCPSolver::visitPHINode...

skia:sksl2metal: Heap-buffer-overflow in std::__1::unique_ptr<SkSL::Expression, std::__1::default_delete<SkSL::Expression

Project: https://skia.googlesource.com/skia.git Detailed Report: https://oss-fuzz.com/testcase?key=5703652466753536 Project: skia Fuzzing Engine: honggfuzz Fuzz Target: sksl2metal Job Type: honggfuzzasanskia Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x60500005a318...

leptonica:barcode_fuzzer: Use-of-uninitialized-value in numaCrossingsByThreshold

Project: https://github.com/DanBloomberg/leptonica.git Detailed Report: https://oss-fuzz.com/testcase?key=4719495372603392 Project: leptonica Fuzzing Engine: libFuzzer Fuzz Target: barcodefuzzer Job Type: libfuzzermsanleptonica Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

leptonica:barcode_fuzzer: Heap-use-after-free in pixAverageRasterScans

Project: https://github.com/DanBloomberg/leptonica.git Detailed Report: https://oss-fuzz.com/testcase?key=5643281198481408 Project: leptonica Fuzzing Engine: afl Fuzz Target: barcodefuzzer Job Type: aflasanleptonica Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address:...

envoy:codec_impl_fuzz_test: Null-dereference READ with empty stacktrace

Project: https://github.com/envoyproxy/envoy.git Detailed Report: https://oss-fuzz.com/testcase?key=5176497475420160 Project: envoy Fuzzing Engine: libFuzzer Fuzz Target: codecimplfuzztest Job Type: libfuzzerubsanenvoy Platform Id: linux Crash Type: Null-dereference READ Crash Address:...

qt:qtbase_gui_image_qimage_loadfromdata: Crash in QGIFFormat::decode

Project: git://code.qt.io/qt/qt5.git Detailed Report: https://oss-fuzz.com/testcase?key=6311221929443328 Project: qt Fuzzing Engine: libFuzzer Fuzz Target: qtbaseguiimageqimageloadfromdata Job Type: libfuzzerasanqt Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x7f8fc7841eac Crash...

kimageformats:kimgio_xcf_fuzzer: Use-of-uninitialized-value in RGBTOHLS

Project: git://anongit.kde.org/kimageformats Detailed Report: https://oss-fuzz.com/testcase?key=5918121289580544 Project: kimageformats Fuzzing Engine: libFuzzer Fuzz Target: kimgioxcffuzzer Job Type: libfuzzermsankimageformats Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

systemd:fuzz-netdev-parser: Use-of-uninitialized-value in l2tp_session_free

Project: https://github.com/systemd/systemd.git Detailed Report: https://oss-fuzz.com/testcase?key=5757581015646208 Project: systemd Fuzzing Engine: libFuzzer Fuzz Target: fuzz-netdev-parser Job Type: libfuzzermsansystemd Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

radare2:ia_fuzz: Segv on unknown address in pvector_free_elem

Project: https://github.com/radare/radare2.git Detailed Report: https://oss-fuzz.com/testcase?key=4916198700744704 Project: radare2 Fuzzing Engine: libFuzzer Fuzz Target: iafuzz Job Type: libfuzzerasanradare2 Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State:...

gdal:lvbag_fuzzer: Crash in [heap]

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=5267766755196928 Project: gdal Fuzzing Engine: libFuzzer Fuzz Target: lvbagfuzzer Job Type: libfuzzerubsangdal Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00000cf60484 Crash State: heap...

Ubuntu: Security Advisory (USN-4369-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 18.04 LTS : Linux kernel regression (USN-4369-2)

The remote Ubuntu 18.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-4369-2 advisory. USN-4369-1 fixed vulnerabilities in the 5.3 Linux kernel. Unfortunately, that update introduced a regression in overlayfs. This update corrects the problem. We...