USN-4341-3: Samba regression

USN-4341-1 fixed vulnerabilities in Samba. The updated packages for Ubuntu 16.04 LTS introduced a regression when using LDAP. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that Samba incorrectly handled certain LDAP queries. A remo...

qt:qtbase_gui_painting_qcolorspace_fromiccprofile: Heap-buffer-overflow in QSpecialInteger<QBigEndianStorageType<unsigned int> >::operator unsigned int

Project: git://code.qt.io/qt/qt5.git Detailed Report: https://oss-fuzz.com/testcase?key=5699424467812352 Project: qt Fuzzing Engine: libFuzzer Fuzz Target: qtbaseguipaintingqcolorspacefromiccprofile Job Type: libfuzzerasani386qt Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash...

perfetto:trace_processor_fuzzer: Heap-use-after-free in std::__1::vector<unsigned long, std::__1::allocator<unsigned long> >::begin

Project: https://android.googlesource.com/platform/external/perfetto/ Detailed Report: https://oss-fuzz.com/testcase?key=5636845317914624 Project: perfetto Fuzzing Engine: honggfuzz Fuzz Target: traceprocessorfuzzer Job Type: honggfuzzasanperfetto Platform Id: linux Crash Type: Heap-use-after-fre...

libzmq:socket_bind_fuzzer: Heap-buffer-overflow in zmq::tcp_read

Project: https://github.com/zeromq/libzmq.git Detailed Report: https://oss-fuzz.com/testcase?key=5669751377625088 Project: libzmq Fuzzing Engine: libFuzzer Fuzz Target: socketbindfuzzer Job Type: libfuzzerasani386libzmq Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address:...

CVE-2019-15790 Apport reads PID files with elevated privileges

Apport reads and writes information on a crashed process to /proc/pid with elevated privileges. Apport then determines which user the crashed process belongs to by reading /proc/pid through getpidinfo in data/apport. An unprivileged user could exploit this to read information about a privileged...

gdal:wasp_fuzzer: Crash in pj_vlog

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=5721450167402496 Project: gdal Fuzzing Engine: libFuzzer Fuzz Target: waspfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x633000020000 Crash State: pjvlog...

ffmpeg:ffmpeg_AV_CODEC_ID_ADPCM_IMA_CUNNING_fuzzer: Global-buffer-overflow in adpcm_ima_cunning_expand_nibble

Detailed Report: https://oss-fuzz.com/testcase?key=5717917221257216 Project: ffmpeg Fuzzing Engine: honggfuzz Fuzz Target: ffmpegAVCODECIDADPCMIMACUNNINGfuzzer Job Type: honggfuzzasanffmpeg Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash Address: 0x000000a39768 Crash State:...

neomutt:address-fuzz: Stack-buffer-overflow in mutt_addrlist_parse

Project: https://github.com/neomutt/neomutt.git Detailed Report: https://oss-fuzz.com/testcase?key=5731491599613952 Project: neomutt Fuzzing Engine: libFuzzer Fuzz Target: address-fuzz Job Type: libfuzzerasanneomutt Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 1 Crash Address:...

radare2:ia_fuzz: Heap-buffer-overflow in populate_relocs_record

Project: https://github.com/radare/radare2.git Detailed Report: https://oss-fuzz.com/testcase?key=5729028771414016 Project: radare2 Fuzzing Engine: libFuzzer Fuzz Target: iafuzz Job Type: libfuzzerasanradare2 Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address: 0x61a0000179e...

radare2:ia_fuzz: Heap-buffer-overflow in populate_relocs_record

Project: https://github.com/radare/radare2.git Detailed Report: https://oss-fuzz.com/testcase?key=5718918753943552 Project: radare2 Fuzzing Engine: libFuzzer Fuzz Target: iafuzz Job Type: libfuzzerasanradare2 Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address: 0x6140000013f...

radare2:ia_fuzz: Heap-buffer-overflow in read_reloc

Project: https://github.com/radare/radare2.git Detailed Report: https://oss-fuzz.com/testcase?key=5635500556943360 Project: radare2 Fuzzing Engine: libFuzzer Fuzz Target: iafuzz Job Type: libfuzzerasanradare2 Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 8 Crash Address: 0x6210000a897...

mysql-server:fuzz_docommand: Stack-use-after-scope in get_one_variable_ext

Detailed Report: https://oss-fuzz.com/testcase?key=5633080384815104 Project: mysql-server Fuzzing Engine: honggfuzz Fuzz Target: fuzzdocommand Job Type: honggfuzzasanmysql-server Platform Id: linux Crash Type: Stack-use-after-scope READ 1 Crash Address: 0x7fb0aa7d52ac Crash State: getonevariablee...

cryptofuzz:cryptofuzz-nss: Use-of-uninitialized-value in selftest_basic_128

Detailed Report: https://oss-fuzz.com/testcase?key=5749776827285504 Project: cryptofuzz Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-nss Job Type: libfuzzermsancryptofuzz Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: selftestbasic128 selftest dosetkey...

ndpi:fuzz_process_packet: Heap-buffer-overflow in ndpi_netbios_name_interpret

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5729916529410048 Project: ndpi Fuzzing Engine: afl Fuzz Target: fuzzprocesspacket Job Type: aflasanndpi Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x60b000000210 Crash State...

kimageformats:kimgio_xcf_fuzzer: Use-of-uninitialized-value in fetchARGB32ToRGBA64PM_avx2

Detailed Report: https://oss-fuzz.com/testcase?key=5700723099828224 Project: kimageformats Fuzzing Engine: libFuzzer Fuzz Target: kimgioxcffuzzer Job Type: libfuzzermsankimageformats Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: fetchARGB32ToRGBA64PMavx2...

ffmpeg:ffmpeg_AV_CODEC_ID_MV30_fuzzer: Heap-buffer-overflow in idct_add

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5673678898724864 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDMV30fuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

imagemagick:encoder_psd_fuzzer: Use-of-uninitialized-value in PerceptibleReciprocal

Detailed Report: https://oss-fuzz.com/testcase?key=5671531362910208 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderpsdfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: PerceptibleReciprocal...

cryptofuzz:cryptofuzz-nss: Use-of-uninitialized-value in _gcry_camellia_encrypt128

Detailed Report: https://oss-fuzz.com/testcase?key=5190522215071744 Project: cryptofuzz Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-nss Job Type: libfuzzermsancryptofuzz Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: gcrycamelliaencrypt128...

libfmt:fuzzer_named_arg: Stack-buffer-underflow in fmt::v6::basic_format_args<fmt::v6::basic_format_context<std::__1::back_insert_i

Detailed Report: https://oss-fuzz.com/testcase?key=5747676286287872 Project: libfmt Fuzzing Engine: libFuzzer Fuzz Target: fuzzernamedarg Job Type: libfuzzerasanlibfmt Platform Id: linux Crash Type: Stack-buffer-underflow READ 16 Crash Address: 0x7f200d9a6110 Crash State:...

cryptofuzz:cryptofuzz-boringssl-noasm: Use-of-uninitialized-value in selftest

Detailed Report: https://oss-fuzz.com/testcase?key=5666948349427712 Project: cryptofuzz Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-boringssl-noasm Job Type: libfuzzermsancryptofuzz Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: selftest dessetkey...