6662 matches found
USN-4202-2 thunderbird regression
USN-4202-1 fixed vulnerabilities in Thunderbird. After upgrading, Thunderbird created a new profile for some users. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that a specially crafted S/MIME message with an inner encryption laye...
matio:matio_fuzzer: Segv on unknown address in H5O_chunk_deserialize
Detailed Report: https://oss-fuzz.com/testcase?key=5124816558620672 Project: matio Fuzzing Engine: libFuzzer Fuzz Target: matiofuzzer Job Type: libfuzzerasanmatio Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: H5Ochunkdeserialize H5Ocachechkload H5Cprotect...
ffmpeg:ffmpeg_BSF_MP3_HEADER_DECOMPRESS_fuzzer: Global-buffer-overflow in mp3_header_decompress
Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5651002950942720 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegBSFMP3HEADERDECOMPRESSfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Global-buffer-overflow READ 2 Crash...
ffmpeg:ffmpeg_BSF_HEVC_MP4TOANNEXB_fuzzer: Heap-buffer-overflow in hevc_mp4toannexb_filter
Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5169193398042624 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegBSFHEVCMP4TOANNEXBfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Addres...
llvm:clang-fuzzer: Segv on unknown address in llvm::APInt::udiv
Detailed Report: https://oss-fuzz.com/testcase?key=5711340262129664 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-fuzzer Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: llvm::APInt::udiv llvm::APInt::sdiv...
ffmpeg:ffmpeg_AV_CODEC_ID_VC1IMAGE_fuzzer: Heap-buffer-overflow in sprite_h_c
Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5389219325542400 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDVC1IMAGEfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...
SUSE SLED12 / SLES12 Security Update : permissions (SUSE-SU-2019:3183-1)
This update for permissions fixes the following issues : Security issues fixed : CVE-2019-3688: Changed wrong ownership in /usr/sbin/pinger to root:squid which could have allowed a squid user to gain persistence by changing the binary bsc1093414. CVE-2019-3690: Fixed a privilege escalation throug...
SUSE SLES15 Security Update : dpdk (SUSE-SU-2019:3179-1)
This update of dpdk to version 18.11.3 provides the following fixes : dpdk was updated to 18.11.3 fate327817, bsc1145713, jscECO-274, fate325916, fate325951 fate326025, fate326992, bsc1134968, jscSLE-4715 Security issue fixed : CVE-2019-14818: Fixed a memory leak vulnerability caused by a maliciu...
llvm:clang-fuzzer: Segv on unknown address in clang::CXXRecordDecl::data
Detailed Report: https://oss-fuzz.com/testcase?key=5673340807413760 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-fuzzer Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: clang::CXXRecordDecl::data getDefaultInitValue...
USN-4182-4: Intel Microcode regression
USN-4182-2 provided updated Intel Processor Microcode. A regression was discovered that caused some Skylake processors to hang after a warm reboot. This update reverts the microcode for that specific processor family. We apologize for the inconvenience. Original advisory details: Stephan van...
USN-4182-4 intel-microcode regression
USN-4182-2 provided updated Intel Processor Microcode. A regression was discovered that caused some Skylake processors to hang after a warm reboot. This update reverts the microcode for that specific processor family. We apologize for the inconvenience. Original advisory details: Stephan van...
USN-4182-3: Intel Microcode regression
USN-4182-1 provided updated Intel Processor Microcode. A regression was discovered that caused some Skylake processors to hang after a warm reboot. This update reverts the microcode for that specific processor family. We apologize for the inconvenience. Original advisory details: Stephan van...
Ubuntu 16.04 LTS / 18.04 LTS : Intel Microcode regression (USN-4182-3)
The remote Ubuntu 16.04 LTS / 18.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-4182-3 advisory. USN-4182-1 provided updated Intel Processor Microcode. A regression was discovered that caused some Skylake processors to hang after a warm reboot. Th...
opensc:fuzz_pkcs15_reader: Heap-buffer-overflow in coolkey_get_attribute_bytes
Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=5655953538285568 Project: opensc Fuzzing Engine: honggfuzz Fuzz Target: fuzzpkcs15reader Job Type: honggfuzzasanopensc Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address:...
matio:matio_fuzzer: Crash in H5O_sdspace_shared_decode
Project: git://git.code.sf.net/p/matio/matio Detailed Report: https://oss-fuzz.com/testcase?key=5675535468593152 Project: matio Fuzzing Engine: afl Fuzz Target: matiofuzzer Job Type: aflasanmatio Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x6140000126c8 Crash State:...
Fedora 31 : 1:grub2 (2019-e99ebf23c8)
Fix a grub hidden-menu regression and a bug in blscfg variable expansion ---- Security fix for CVE-2019-14865 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it...
Debian DLA-2017-2 : asterisk regression update
The backport of the CVE-2019-13161 fix caused a regression and has been reverted. For Debian 8 'Jessie', this problem has been fixed in version 1:11.13.1dfsg-2+deb8u8. We recommend that you upgrade your asterisk packages. NOTE: Tenable Network Security has extracted the preceding description bloc...
libreoffice:cgmfuzzer: Heap-buffer-overflow in CGM::ImplDoClass7
Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=5129086141988864 Project: libreoffice Fuzzing Engine: libFuzzer Fuzz Target: cgmfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash...
llvm:clang-fuzzer: Segv on unknown address in clang::SourceManager::getFileIDLoaded
Detailed Report: https://oss-fuzz.com/testcase?key=5697366384705536 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-fuzzer Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: clang::SourceManager::getFileIDLoaded...