golang-protobuf:wirefuzz: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5652073511387136 Project: golang-protobuf Fuzzing Engine: libFuzzer Fuzz Target: wirefuzz Job Type: libfuzzerasangolang-protobuf Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0000059044a4 Crash State: NULL Sanitizer: address ASAN...

njs:njs_process_script_fuzzer: Heap-buffer-overflow in njs_lexer_multi

Project: http://hg.nginx.org/njs Detailed Report: https://oss-fuzz.com/testcase?key=5716123570143232 Project: njs Fuzzing Engine: afl Fuzz Target: njsprocessscriptfuzzer Job Type: aflasannjs Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x612000000442 Crash State:...

llvm:clang-fuzzer: Segv on unknown address in FindDeclaringClass

Detailed Report: https://oss-fuzz.com/testcase?key=5744309964111872 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-fuzzer Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: FindDeclaringClass diagnoseBadDirectAccess...

envoy:stat_merger_fuzz_test: Crash in Envoy::Stats::SymbolTableImpl::Encoding::decodeTokens

Project: https://github.com/envoyproxy/envoy.git Detailed Report: https://oss-fuzz.com/testcase?key=5713856297172992 Project: envoy Fuzzing Engine: libFuzzer Fuzz Target: statmergerfuzztest Job Type: libfuzzerubsanenvoy Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00000ac3b000 Cra...

imagemagick:encoder_radial-gradient_fuzzer: Use-of-uninitialized-value in RoundToUnity

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5697699351625728 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderradial-gradientfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

envoy:stat_merger_fuzz_test: Heap-buffer-overflow in Envoy::Stats::SymbolTableImpl::Encoding::decodeNumber

Project: https://github.com/envoyproxy/envoy.git Detailed Report: https://oss-fuzz.com/testcase?key=5690814401609728 Project: envoy Fuzzing Engine: libFuzzer Fuzz Target: statmergerfuzztest Job Type: libfuzzerasanenvoy Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

pcre2:pcre2_fuzzer: Heap-buffer-overflow in set_start_bits

Project: svn://vcs.exim.org/pcre2/code/trunk Detailed Report: https://oss-fuzz.com/testcase?key=5170113773043712 Project: pcre2 Fuzzing Engine: libFuzzer Fuzz Target: pcre2fuzzer Job Type: libfuzzerasani386pcre2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0xf2b04f6a...

HTTP Request Smuggling

tomcat-coyote is vulnerable to HTTP request smuggling. The vulnerability exists due to mishandling of incorrect transfer encoding headers introduced by a regression if server is placed after a reverse proxy...

CVE-2019-17569

The refactoring present in Apache Tomcat 9.0.28 to 9.0.30, 8.5.48 to 8.5.50 and 7.0.98 to 7.0.99 introduced a regression. The result of the regression was that invalid Transfer-Encoding headers were incorrectly processed leading to a possibility of HTTP Request Smuggling if Tomcat was located...

CVE-2019-17569

The refactoring present in Apache Tomcat 9.0.28 to 9.0.30, 8.5.48 to 8.5.50 and 7.0.98 to 7.0.99 introduced a regression. The result of the regression was that invalid Transfer-Encoding headers were incorrectly processed leading to a possibility of HTTP Request Smuggling if Tomcat was located...

CVE-2019-17569

The refactoring present in Apache Tomcat 9.0.28 to 9.0.30, 8.5.48 to 8.5.50 and 7.0.98 to 7.0.99 introduced a regression. The result of the regression was that invalid Transfer-Encoding headers were incorrectly processed leading to a possibility of HTTP Request Smuggling if Tomcat was located...

Input validation

The refactoring present in Apache Tomcat 9.0.28 to 9.0.30, 8.5.48 to 8.5.50 and 7.0.98 to 7.0.99 introduced a regression. The result of the regression was that invalid Transfer-Encoding headers were incorrectly processed leading to a possibility of HTTP Request Smuggling if Tomcat was located...

CVE-2019-17569

The refactoring present in Apache Tomcat 9.0.28 to 9.0.30, 8.5.48 to 8.5.50 and 7.0.98 to 7.0.99 introduced a regression. The result of the regression was that invalid Transfer-Encoding headers were incorrectly processed leading to a possibility of HTTP Request Smuggling if Tomcat was located...

skia:api_skdescriptor: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5755812456955904 Project: skia Fuzzing Engine: libFuzzer Fuzz Target: apiskdescriptor Job Type: libfuzzermsanskia Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000004050020 Crash State: NULL Sanitizer: memory MSAN Recommended...

ndpi:fuzz_process_packet: Heap-buffer-overflow in check_ymsg

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5753857978400768 Project: ndpi Fuzzing Engine: libFuzzer Fuzz Target: fuzzprocesspacket Job Type: libfuzzerasanndpi Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x607000000452...

ffmpeg:ffmpeg_BSF_HEVC_METADATA_fuzzer: Index-out-of-bounds in cbs_h265_read_slice_segment_header

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5160442882424832 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegBSFHEVCMETADATAfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash...

Debian DLA-2115-2 : proftpd-dfsg regression update

It was discovered that there was a regression in a previous fix for a use-after-free vulnerability in the proftpd-dfsg FTP server. Exploitation of the original vulnerability within the memory pool handling could have allowed a remote attacker to execute arbitrary code on the affected system...

binutils:fuzz_bfd: Crash in _bfd_vms_lib_archive_p

Detailed Report: https://oss-fuzz.com/testcase?key=5115371025858560 Project: binutils Fuzzing Engine: libFuzzer Fuzz Target: fuzzbfd Job Type: libfuzzerubsanbinutils Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000023d4257b Crash State: bfdvmslibarchivep bfdcheckformatmatches...

libvips:jpegsave_file_fuzzer: Heap-use-after-free in vips_buf_vappendf

Project: https://github.com/libvips/libvips.git Detailed Report: https://oss-fuzz.com/testcase?key=5663684670259200 Project: libvips Fuzzing Engine: honggfuzz Fuzz Target: jpegsavefilefuzzer Job Type: honggfuzzasanlibvips Platform Id: linux Crash Type: Heap-use-after-free READ 2 Crash Address:...

imagemagick:encoder_radial-gradient_fuzzer: Stack-buffer-overflow in ReadGRADIENTImage

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5659238976454656 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderradial-gradientfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type:...