llvm:clang-fuzzer: Segv on unknown address in HasAccess

Detailed Report: https://oss-fuzz.com/testcase?key=5740402812649472 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-fuzzer Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: HasAccess IsAccessible CheckEffectiveAccess Sanitize...

ffmpeg:ffmpeg_AV_CODEC_ID_IFF_ILBM_fuzzer: Heap-buffer-overflow in decodeplane8

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5718556033679360 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDIFFILBMfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address...

llvm:clang-fuzzer: Segv on unknown address in clang::Decl::AccessDeclContextSanity

Detailed Report: https://oss-fuzz.com/testcase?key=5641990750601216 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-fuzzer Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: clang::Decl::AccessDeclContextSanity...

wireshark:fuzzshark_ip_proto-udp: Heap-buffer-overflow in bytestring_to_str

Project: https://code.wireshark.org/review/wireshark https://gitlab.com/wireshark/wireshark.git Detailed Report: https://oss-fuzz.com/testcase?key=5728342863249408 Project: wireshark Fuzzing Engine: afl Fuzz Target: fuzzsharkipproto-udp Job Type: aflasanwireshark Platform Id: linux Crash Type:...

llvm:clang-fuzzer: Segv on unknown address in clang::Sema::ActOnParamDeclarator

Detailed Report: https://oss-fuzz.com/testcase?key=5721768493056000 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-fuzzer Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: clang::Sema::ActOnParamDeclarator...

gdal:gdal_fuzzer: Heap-buffer-overflow in GRIB2Inventory2to7

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=5759916124143616 Project: gdal Fuzzing Engine: libFuzzer Fuzz Target: gdalfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x604000007e35 Crash...

opensc:fuzz_pkcs15_reader: Crash in bebytes2ushort

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=5178586395049984 Project: opensc Fuzzing Engine: libFuzzer Fuzz Target: fuzzpkcs15reader Job Type: libfuzzerubsanopensc Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0000024ca004 Crash...

ffmpeg:ffmpeg_AV_CODEC_ID_COOK_fuzzer: Global-buffer-overflow in joint_decode

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5734106625474560 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDCOOKfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Address:...

USN-4185-3: Linux kernel vulnerability and regression | Cloud Foundry

Severity High Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 16.04 Description USN-4185-1 fixed vulnerabilities in the Linux kernel. It was discovered that the kernel fix for CVE-2019-0155 i915 missing Blitter Command Streamer check was incomplete on 64-bit Intel x86 systems. Also, th...

opensc:fuzz_pkcs15_reader: Heap-buffer-overflow in bebytes2ulong

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=5664197442797568 Project: opensc Fuzzing Engine: libFuzzer Fuzz Target: fuzzpkcs15reader Job Type: libfuzzerasanopensc Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

njs:njs_process_script_fuzzer: Use-of-uninitialized-value in pcre_compile2

Detailed Report: https://oss-fuzz.com/testcase?key=5083619064545280 Project: njs Fuzzing Engine: libFuzzer Fuzz Target: njsprocessscriptfuzzer Job Type: libfuzzermsannjs Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: pcrecompile2 njsregexcompile...

cryptofuzz:cryptofuzz-openssl-noasm: Use-of-uninitialized-value in EVP_DecryptUpdate

Detailed Report: https://oss-fuzz.com/testcase?key=5736062923571200 Project: cryptofuzz Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-openssl-noasm Job Type: libfuzzermsancryptofuzz Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: EVPDecryptUpdate...

openssl security update

1.1.1c-2 - do not try to use EC groups disallowed in FIPS mode in TLS - fix Valgrind regression with constant-time code 1.1.1c-1 - update to the 1.1.1c release 1.1.1b-6 - adjust the default cert pbe algorithm for pkcs12 -export in the FIPS mode 1.1.1b-5 - Fix small regressions related to the reba...

ffmpeg:ffmpeg_DEMUXER_fuzzer: Index-out-of-bounds in cbs_av1_read_skip_mode_params

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5662812550725632 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegDEMUXERfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...

Important: python34

Issue Overview: A security regression of CVE-2019-9636 was discovered in python, since commit d537ab0ff9767ef024f26246899728f0116b1ec3, which still allows an attacker to exploit CVE-2019-9636 by abusing the user and password parts of a URL. When an application parses user-supplied URLs to store...

envoy:config_fuzz_test: Heap-use-after-free in Envoy::Upstream::ZoneAwareLoadBalancerBase::~ZoneAwareLoadBalancerBase

Project: https://github.com/envoyproxy/envoy.git Detailed Report: https://oss-fuzz.com/testcase?key=6136135336329216 Project: envoy Fuzzing Engine: libFuzzer Fuzz Target: configfuzztest Job Type: libfuzzerasanenvoy Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address:...

lwan:template_fuzzer: Global-buffer-overflow in template_fuzzer.cc

Project: git://github.com/lpereira/lwan Detailed Report: https://oss-fuzz.com/testcase?key=5139009378713600 Project: lwan Fuzzing Engine: libFuzzer Fuzz Target: templatefuzzer Job Type: libfuzzerasanlwan Platform Id: linux Crash Type: Global-buffer-overflow WRITE 1 Crash Address: 0x0000011aa460...

openjpeg:opj_decompress_fuzzer: Crash in opj_t2_decode_packets

Project: https://github.com/uclouvain/openjpeg.git https://github.com/uclouvain/openjpeg-data.git Detailed Report: https://oss-fuzz.com/testcase?key=5721361410686976 Project: openjpeg Fuzzing Engine: afl Fuzz Target: opjdecompressfuzzer Job Type: aflasanopenjpeg Platform Id: linux Crash Type:...

matio:matio_fuzzer: Use-of-uninitialized-value in ReadNextStructField

Project: git://git.code.sf.net/p/matio/matio Detailed Report: https://oss-fuzz.com/testcase?key=5652634996572160 Project: matio Fuzzing Engine: libFuzzer Fuzz Target: matiofuzzer Job Type: libfuzzermsanmatio Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

opensc:fuzz_pkcs15_reader: Heap-buffer-overflow in coolkey_v1_get_attribute_len

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=5650704400384000 Project: opensc Fuzzing Engine: libFuzzer Fuzz Target: fuzzpkcs15reader Job Type: libfuzzerasanopensc Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...