binutils:fuzz_bfd: Heap-buffer-overflow in bfd_getl16

Detailed Report: https://oss-fuzz.com/testcase?key=6280598203400192 Project: binutils Fuzzing Engine: afl Fuzz Target: fuzzbfd Job Type: aflasanbinutils Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x603000000a21 Crash State: bfdgetl16 bfdvmslibarchivep...

osquery:osqueryfuzz-sqlquery: Heap-use-after-free in binCollFunc

Project: https://github.com/osquery/osquery.git Detailed Report: https://oss-fuzz.com/testcase?key=5174631483047936 Project: osquery Fuzzing Engine: libFuzzer Fuzz Target: osqueryfuzz-sqlquery Job Type: libfuzzerasanosquery Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address:...

ndpi:fuzz_process_packet: Heap-buffer-overflow in get16

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5743421140762624 Project: ndpi Fuzzing Engine: afl Fuzz Target: fuzzprocesspacket Job Type: aflasanndpi Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address: 0x60b0000252ab Crash State...

ndpi:fuzz_process_packet: Index-out-of-bounds in ndpi_search_mail_imap_tcp

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5110863348629504 Project: ndpi Fuzzing Engine: libFuzzer Fuzz Target: fuzzprocesspacket Job Type: libfuzzerubsanndpi Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...

ndpi:fuzz_process_packet: Heap-buffer-overflow in ndpi_netbios_name_interpret

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5692504412520448 Project: ndpi Fuzzing Engine: afl Fuzz Target: fuzzprocesspacket Job Type: aflasanndpi Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x60800000bf00 Crash State...

openssl:client: Heap-use-after-free in CRYPTO_DOWN_REF

Project: https://github.com/openssl/openssl.git Detailed Report: https://oss-fuzz.com/testcase?key=5131160508432384 Project: openssl Fuzzing Engine: libFuzzer Fuzz Target: client Job Type: libfuzzerasanopenssl Platform Id: linux Crash Type: Heap-use-after-free WRITE 4 Crash Address: 0x60f00002d56...

open62541:fuzz_json_decode_encode: Index-out-of-bounds in writeJsonObjStart

Project: https://github.com/open62541/open62541.git Detailed Report: https://oss-fuzz.com/testcase?key=5685684407107584 Project: open62541 Fuzzing Engine: libFuzzer Fuzz Target: fuzzjsondecodeencode Job Type: libfuzzerubsanopen62541 Platform Id: linux Crash Type: Index-out-of-bounds Crash Address...

gonids:fuzz_parserule: Null-dereference READ with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5637363944652800 Project: gonids Fuzzing Engine: libFuzzer Fuzz Target: fuzzparserule Job Type: libfuzzerasangonids Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: NULL Sanitizer: address ASAN Crash...

ffmpeg:ffmpeg_AV_CODEC_ID_IFF_ILBM_fuzzer: Heap-buffer-overflow in decode_deep_rle32

Detailed Report: https://oss-fuzz.com/testcase?key=5111364702175232 Project: ffmpeg Fuzzing Engine: honggfuzz Fuzz Target: ffmpegAVCODECIDIFFILBMfuzzer Job Type: honggfuzzasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x61a000018bb9 Crash State: decodedeeprle32...

Ubuntu 16.04 LTS : PHP regression (USN-4279-2)

The remote Ubuntu 16.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4279-2 advisory. USN-4279-1 fixed vulnerabilities in PHP. The updated packages caused a regression. This update fixes the problem. We apologize for the inconvenience. Tenable has...

SUSE SLES12 Security Update : dpdk (SUSE-SU-2020:0412-1)

This update for dpdk to version 18.11.3 fixes the following issues : dpdk was updated to 18.11.3 Security issue fixed : CVE-2019-14818: Fixed a memory leak vulnerability caused by a malicious container may lead to to denial of service bsc1156146. Other issues addressed: Changed to multibuild...

USN-4279-2: PHP regression

USN-4279-1 fixed vulnerabilities in PHP. The updated packages caused a regression. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that PHP incorrectly handled certain scripts. An attacker could possibly use this issue to cause a...

USN-4279-2 php7.0 regression

USN-4279-1 fixed vulnerabilities in PHP. The updated packages caused a regression. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that PHP incorrectly handled certain scripts. An attacker could possibly use this issue to cause a...

llvm:clang-fuzzer: Segv on unknown address in llvm::llvm_unreachable_internal

Detailed Report: https://oss-fuzz.com/testcase?key=5738963006652416 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-fuzzer Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: llvm::llvmunreachableinternal findDefaultInitializer...

llvm:llvm-isel-fuzzer--wasm32-O2: Use-after-poison in WebAssemblyRegStackify::runOnMachineFunction

Detailed Report: https://oss-fuzz.com/testcase?key=5717684832698368 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: llvm-isel-fuzzer--wasm32-O2 Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: Use-after-poison READ 8 Crash Address: 0x621000071080 Crash State:...

SUSE-SU-2020:0412-1 Security update for dpdk

This update for dpdk to version 18.11.3 fixes the following issues: dpdk was updated to 18.11.3 Security issue fixed: - CVE-2019-14818: Fixed a memory leak vulnerability caused by a malicious container may lead to to denial of service bsc1156146. Other issues addressed: - Changed to multibuild...

open62541:fuzz_json_decode_encode: Index-out-of-bounds in writeJsonObjStart

Project: https://github.com/open62541/open62541.git Detailed Report: https://oss-fuzz.com/testcase?key=5682041805078528 Project: open62541 Fuzzing Engine: libFuzzer Fuzz Target: fuzzjsondecodeencode Job Type: libfuzzerubsanopen62541 Platform Id: linux Crash Type: Index-out-of-bounds Crash Address...

ndpi:fuzz_ndpi_reader: Heap-buffer-overflow in ndpi_workflow_process_packet

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5150955381456896 Project: ndpi Fuzzing Engine: libFuzzer Fuzz Target: fuzzndpireader Job Type: libfuzzerasanndpi Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address: 0x60400000013d...

ffmpeg:ffmpeg_AV_CODEC_ID_MAGICYUV_fuzzer: Heap-buffer-overflow in add_left_pred_int16_c

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5759562508664832 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDMAGICYUVfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address:...

mysql-server:fuzz_real_query: Memcpy-param-overlap in read_ok_ex

Detailed Report: https://oss-fuzz.com/testcase?key=5111911572307968 Project: mysql-server Fuzzing Engine: libFuzzer Fuzz Target: fuzzrealquery Job Type: libfuzzerasanmysql-server Platform Id: linux Crash Type: Memcpy-param-overlap Crash Address: 0x7f0132daf848,0x999a189acc73fd41 and 0x62700000942...