CVE-2019-17402

Exiv2 0.27.2 allows attackers to trigger a crash in Exiv2::getULong in types.cpp when called from Exiv2::Internal::CiffDirectory::readDirectory in crwimageint.cpp, because there is no validation of the relationship of the total size to the offset and size...

gdal:fgb_fuzzer: Negative-size-param in OGRSimpleCurve::setPoints

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=5676931189571584 Project: gdal Fuzzing Engine: libFuzzer Fuzz Target: fgbfuzzer Job Type: libfuzzerasani386gdal Platform Id: linux Crash Type: Negative-size-param Crash Address: Crash State:...

USN-4122-2 firefox regression

USN-4122-1 fixed vulnerabilities in Firefox. The update caused a regression that resulted in a crash when changing YouTube playback speed in some circumstances. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Multiple security issues were discovered i...

USN-4122-2: Firefox regression

USN-4122-1 fixed vulnerabilities in Firefox. The update caused a regression that resulted in a crash when changing YouTube playback speed in some circumstances. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Multiple security issues were discovered i...

usrsctp:fuzzer_connect: Heap-buffer-overflow in sctp_handle_asconf

Project: https://github.com/weinrank/usrsctp.git https://github.com/sctplab/usrsctp.git Detailed Report: https://oss-fuzz.com/testcase?key=5665964259016704 Project: usrsctp Fuzzing Engine: afl Fuzz Target: fuzzerconnect Job Type: aflasanusrsctp Platform Id: linux Crash Type: Heap-buffer-overflow...

[SECURITY] [DSA 4539-2] openssh regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-4539-2 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 07, 2019 https://www.debian.org/security/faq -...

libsass:data_context_fuzzer: Use-of-uninitialized-value in std::__1::vector<std::__1::vector<Sass::SharedImpl<Sass::ComplexSelector>, std::

Detailed Report: https://oss-fuzz.com/testcase?key=5721443934928896 Project: libsass Fuzzing Engine: libFuzzer Fuzz Target: datacontextfuzzer Job Type: libfuzzermsanlibsass Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: std::1::vector, std::...

libhevc:hevc_dec_fuzzer: Heap-buffer-overflow in ihevcd_process

Project: https://android.googlesource.com/platform/external/libhevc Detailed Report: https://oss-fuzz.com/testcase?key=5710018845868032 Project: libhevc Fuzzing Engine: libFuzzer Fuzz Target: hevcdecfuzzer Job Type: libfuzzerasani386libhevc Platform Id: linux Crash Type: Heap-buffer-overflow READ...

Fedora 31 : mosquitto (2019-4c69fb4cd7)

1.6.7 ===== Broker : - Add workaround for working with libwebsockets 3.2.0. - Fix potential crash when reloading config. Client library : - Don't use / in autogenerated client ids, to avoid confusing with topics. - Fix mosquittomaxinflightmessagesset and mosquittointoption..., MOSQOPTMAX,...

DSA-4539-2 openssh - regression update

Bulletin has no description...

imagemagick:ping_mvg_fuzzer: Use-of-uninitialized-value in FindNeedleInHaystack

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5653360948019200 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: pingmvgfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

usrsctp:fuzzer_connect: Use-of-uninitialized-value in sctp_find_ifa_by_addr

Project: https://github.com/weinrank/usrsctp.git https://github.com/sctplab/usrsctp.git Detailed Report: https://oss-fuzz.com/testcase?key=5649242005176320 Project: usrsctp Fuzzing Engine: libFuzzer Fuzz Target: fuzzerconnect Job Type: libfuzzermsanusrsctp Platform Id: linux Crash Type:...

ffmpeg:ffmpeg_AV_CODEC_ID_HCOM_fuzzer: Crash in hcom_decode

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5647235349479424 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDHCOMfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000002f45db8...

imagemagick:ping_jpg_fuzzer: Use-of-uninitialized-value in LocaleNCompare

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5651751306264576 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: pingjpgfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

php:php-fuzz-mbstring: Heap-buffer-overflow in match_at

Detailed Report: https://oss-fuzz.com/testcase?key=5192679935180800 Project: php Fuzzing Engine: afl Fuzz Target: php-fuzz-mbstring Job Type: aflasanphp Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x60200000e6b7 Crash State: matchat searchinrange onigsearchwithparam...

freetype2:cidtype1: Heap-double-free in woff2_open_font

Detailed Report: https://oss-fuzz.com/testcase?key=5698158495006720 Project: freetype2 Fuzzing Engine: libFuzzer Fuzz Target: cidtype1 Job Type: libfuzzerasanfreetype2 Platform Id: linux Crash Type: Heap-double-free Crash Address: 0x624000002100 Crash State: woff2openfont sfntopenfont sfntinitfac...

php:php-fuzz-parser: Crash in zend_compile_array

Detailed Report: https://oss-fuzz.com/testcase?key=5697413519507456 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-parser Job Type: libfuzzerasanphp Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x61f000000a74 Crash State: zendcompilearray zendcompileassign...

curl:curl_fuzzer_http: Heap-use-after-free in seturl

Project: https://github.com/curl/curl.git Detailed Report: https://oss-fuzz.com/testcase?key=5168359280214016 Project: curl Fuzzing Engine: libFuzzer Fuzz Target: curlfuzzerhttp Job Type: libfuzzerasancurl Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address: 0x60300002cfbb Cra...

SUSE-SU-2019:2502-1 Security update for bind

This update for bind fixes the following issues: Security issues fixed: - CVE-2019-6465: Fixed an issue where controls for zone transfers may not be properly applied to Dynamically Loadable Zones bsc1126069. - CVE-2019-6471: Fixed a reachable assert in dispatch.c. bsc1138687 - CVE-2018-5745: Fixe...

[SECURITY] [DLA 1900-2] apache2 regression update

Package : apache2 Version : 2.4.10-10+deb8u16 CVE ID : CVE-2019-10092 Debian Bug : 941202 The update of apache2 released as DLA-1900-1 contained an incomplete fix for CVE-2019-10092, a limited cross-site scripting issue affecting the modproxy error page. The old patch rather introduced a new CSRF...