glib:fuzz_bookmark: Use-of-uninitialized-value in g_date_time_get_week_number

Project: https://gitlab.gnome.org/GNOME/glib.git Detailed Report: https://oss-fuzz.com/testcase?key=5745896058257408 Project: glib Fuzzing Engine: libFuzzer Fuzz Target: fuzzbookmark Job Type: libfuzzermsanglib Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

ffmpeg:ffmpeg_AV_CODEC_ID_LIBFDK_AAC_fuzzer: Index-out-of-bounds in processDrcTime

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5699860921057280 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDLIBFDKAACfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Cra...

curl:curl_fuzzer_http: Use-of-uninitialized-value in Curl_rand_hex

Project: https://github.com/curl/curl.git Detailed Report: https://oss-fuzz.com/testcase?key=5638014398627840 Project: curl Fuzzing Engine: libFuzzer Fuzz Target: curlfuzzerhttp Job Type: libfuzzermsancurl Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

USN-4134-2 ibus regression

USN-4134-1 fixed a vulnerability in IBus. The security fix introduced a regression when being used with Qt applications. This update reverts the security fix pending further investigation. Original advisory details: Simon McVittie discovered that IBus did not enforce appropriate access controls o...

USN-4134-2: IBus regression

USN-4134-1 fixed a vulnerability in IBus. The security fix introduced a regression when being used with Qt applications. This update reverts the security fix pending further investigation. Original advisory details: Simon McVittie discovered that IBus did not enforce appropriate access controls o...

SUSE SLED15 / SLES15 Security Update : nmap (SUSE-SU-2019:2425-1)

This update for nmap fixes the following issues : Security issue fixed : CVE-2017-18594: Fixed a denial of service condition due to a double free when an SSH connection fails. bsc1148742 Non-security issue fixed: Fixed a regression in the version scanner caused, by the fix for CVE-2018-15173...

libhevc:hevc_dec_fuzzer: Stack-use-after-return in ihevcd_process_thread

Project: https://android.googlesource.com/platform/external/libhevc Detailed Report: https://oss-fuzz.com/testcase?key=5176835272343552 Project: libhevc Fuzzing Engine: libFuzzer Fuzz Target: hevcdecfuzzer Job Type: libfuzzerasani386libhevc Platform Id: linux Crash Type: Stack-use-after-return RE...

cryptofuzz:cryptofuzz-openssl-noasm: Use-of-uninitialized-value in CRYPTO_clear_free

Detailed Report: https://oss-fuzz.com/testcase?key=5630642053709824 Project: cryptofuzz Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-openssl-noasm Job Type: libfuzzermsancryptofuzz Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: CRYPTOclearfree...

libssh:libssh_server_fuzzer: Use-of-uninitialized-value in ssh_buffer_unpack_va

Detailed Report: https://oss-fuzz.com/testcase?key=5661411098755072 Project: libssh Fuzzing Engine: libFuzzer Fuzz Target: libsshserverfuzzer Job Type: libfuzzermsanlibssh Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: sshbufferunpackva sshbufferunpack...

cryptofuzz:cryptofuzz-openssl-noasm: Heap-use-after-free in aes_ocb_get_ctx_params

Detailed Report: https://oss-fuzz.com/testcase?key=5641235758317568 Project: cryptofuzz Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-openssl-noasm Job Type: libfuzzerasancryptofuzz Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x618000000898 Crash State:...

cryptofuzz:cryptofuzz-openssl-noasm: Heap-use-after-free in aes_ocb_dupctx

Detailed Report: https://oss-fuzz.com/testcase?key=5714057063038976 Project: cryptofuzz Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-openssl-noasm Job Type: libfuzzerasancryptofuzz Platform Id: linux Crash Type: Heap-use-after-free READ Crash Address: 0x618000000880 Crash State: aesocbdupctx...

libhevc:hevc_dec_fuzzer: Heap-use-after-free in ihevcd_jobq_lock

Project: https://android.googlesource.com/platform/external/libhevc Detailed Report: https://oss-fuzz.com/testcase?key=5093765538119680 Project: libhevc Fuzzing Engine: libFuzzer Fuzz Target: hevcdecfuzzer Job Type: libfuzzerasani386libhevc Platform Id: linux Crash Type: Heap-use-after-free READ ...

SUSE-SU-2019:2426-1 Security update for nmap

This update for nmap fixes the following issues: - Fixed a regression in the version scanner, caused by the fix for CVE-2018-15173. bsc1135350...

SUSE-SU-2019:2425-1 Security update for nmap

This update for nmap fixes the following issues: Security issue fixed: - CVE-2017-18594: Fixed a denial of service condition due to a double free when an SSH connection fails. bsc1148742 Non-security issue fixed: - Fixed a regression in the version scanner caused, by the fix for CVE-2018-15173...

cryptofuzz:cryptofuzz-openssl: Heap-use-after-free in CRYPTO_ocb128_cleanup

Detailed Report: https://oss-fuzz.com/testcase?key=5696250967490560 Project: cryptofuzz Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-openssl Job Type: libfuzzerasani386cryptofuzz Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0xbf9036fc Crash State:...

cryptofuzz:cryptofuzz-openssl-noasm: Heap-use-after-free in CRYPTO_ocb128_cleanup

Detailed Report: https://oss-fuzz.com/testcase?key=5685695649153024 Project: cryptofuzz Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-openssl-noasm Job Type: libfuzzerasancryptofuzz Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x618000000b48 Crash State:...

cryptofuzz:cryptofuzz-openssl-noasm: Heap-buffer-overflow in load_u32_be

Detailed Report: https://oss-fuzz.com/testcase?key=5662852966252544 Project: cryptofuzz Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-openssl-noasm Job Type: libfuzzerasancryptofuzz Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6020000009d1 Crash State: loadu32be...

cryptofuzz:cryptofuzz-openssl: Heap-use-after-free in aes_ocb_set_ctx_params

Detailed Report: https://oss-fuzz.com/testcase?key=5091570776276992 Project: cryptofuzz Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-openssl Job Type: libfuzzerasancryptofuzz Platform Id: linux Crash Type: Heap-use-after-free WRITE 8 Crash Address: 0x618000000ca0 Crash State:...

xvid:fuzzer-decoder: Crash in image_setedges

Detailed Report: https://oss-fuzz.com/testcase?key=5631794212241408 Project: xvid Fuzzing Engine: libFuzzer Fuzz Target: fuzzer-decoder Job Type: libfuzzerasanxvid Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x62f10001047f Crash State: imagesetedges decoderpframe decoderdecode...

xvid:fuzzer-decoder: Stack-buffer-overflow in BitstreamReadHeaders

Detailed Report: https://oss-fuzz.com/testcase?key=5638255688548352 Project: xvid Fuzzing Engine: libFuzzer Fuzz Target: fuzzer-decoder Job Type: libfuzzerasanxvid Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 4 Crash Address: 0x7fff6d7f8058 Crash State: BitstreamReadHeaders...