nestegg/fuzz: Global-buffer-overflow in ne_find_element

Project: https://github.com/kinetiknz/nestegg.git Detailed report: https://oss-fuzz.com/testcase?key=5729846619013120 Project: nestegg Fuzzer: libFuzzernesteggfuzz Fuzz target binary: fuzz Job Type: libfuzzerasannestegg Platform Id: linux Crash Type: Global-buffer-overflow READ 8 Crash Address:...

readstat/fuzz_format_spss_commands: Stack-buffer-overflow in readstat_copy_quoted

Project: https://github.com/WizardMac/ReadStat.git Detailed report: https://oss-fuzz.com/testcase?key=5701415210582016 Project: readstat Fuzzer: libFuzzerreadstatfuzzformatspsscommands Fuzz target binary: fuzzformatspsscommands Job Type: libfuzzerasanreadstat Platform Id: linux Crash Type:...

cryptofuzz/cryptofuzz-openssl-102-noasm: Heap-buffer-overflow in RC4

Project: https://github.com/guidovranken/cryptofuzz.git Detailed report: https://oss-fuzz.com/testcase?key=5695841819426816 Project: cryptofuzz Fuzzer: libFuzzercryptofuzzcryptofuzz-openssl-102-noasm Fuzz target binary: cryptofuzz-openssl-102-noasm Job Type: libfuzzerasancryptofuzz Platform Id:...

unicorn/fuzz_emu_mips_32be: Heap-buffer-overflow in tlb_set_page_mips

Project: https://github.com/unicorn-engine/unicorn.git Detailed report: https://oss-fuzz.com/testcase?key=5645992751267840 Project: unicorn Fuzzer: aflunicornfuzzemumips32be Fuzz target binary: fuzzemumips32be Job Type: aflasanunicorn Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Cra...

Updated kernel packages fix security vulnerabilities

This kernel update provides the upstream 4.14.121. It adds additional fixes to the kernel side mitigations for the Microarchitectural Data Sampling MDS, also called ZombieLoad attack vulnerabilities. It also fixes the following security issues: A flaw was found in the Linux kernel's freescale...

hostap/ap-mgmt-fuzzer: Crash in copy_supp_rates

Project: git://w1.fi/srv/git/hostap.git Detailed report: https://oss-fuzz.com/testcase?key=5737950014341120 Project: hostap Fuzzer: libFuzzerhostapap-mgmt-fuzzer Fuzz target binary: ap-mgmt-fuzzer Job Type: libfuzzerubsanhostap Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

hostap/ap-mgmt-fuzzer: Crash in ap_free_sta

Project: git://w1.fi/srv/git/hostap.git Detailed report: https://oss-fuzz.com/testcase?key=5713840416751616 Project: hostap Fuzzer: libFuzzerhostapap-mgmt-fuzzer Fuzz target binary: ap-mgmt-fuzzer Job Type: libfuzzerubsanhostap Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

hostap/ap-mgmt-fuzzer: Crash in mlme_deauthenticate_indication

Project: git://w1.fi/srv/git/hostap.git Detailed report: https://oss-fuzz.com/testcase?key=5675224822972416 Project: hostap Fuzzer: libFuzzerhostapap-mgmt-fuzzer Fuzz target binary: ap-mgmt-fuzzer Job Type: libfuzzerubsanhostap Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

hostap/ap-mgmt-fuzzer: Crash in handle_auth

Project: git://w1.fi/srv/git/hostap.git Detailed report: https://oss-fuzz.com/testcase?key=5686935802085376 Project: hostap Fuzzer: libFuzzerhostapap-mgmt-fuzzer Fuzz target binary: ap-mgmt-fuzzer Job Type: libfuzzermsanhostap Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

hostap/ap-mgmt-fuzzer: Crash in hostapd_is_dfs_required

Project: git://w1.fi/srv/git/hostap.git Detailed report: https://oss-fuzz.com/testcase?key=5666753884979200 Project: hostap Fuzzer: aflhostapap-mgmt-fuzzer Fuzz target binary: ap-mgmt-fuzzer Job Type: aflasanhostap Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7f6600000018 Crash...

hostap/ap-mgmt-fuzzer: Crash in mlme_deauthenticate_indication

Project: git://w1.fi/srv/git/hostap.git Detailed report: https://oss-fuzz.com/testcase?key=5187354119110656 Project: hostap Fuzzer: libFuzzerhostapap-mgmt-fuzzer Fuzz target binary: ap-mgmt-fuzzer Job Type: libfuzzerubsanhostap Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

radare2/ia_fuzz: Heap-buffer-overflow in check_buffer

Project: https://github.com/radare/radare2.git Detailed report: https://oss-fuzz.com/testcase?key=5679932656582656 Project: radare2 Fuzzer: libFuzzerradare2iafuzz Fuzz target binary: iafuzz Job Type: libfuzzerasanradare2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

envoy/h1_capture_direct_response_fuzz_test: Crash in Envoy::TestUtility::findCounter

Detailed report: https://oss-fuzz.com/testcase?key=5756178220449792 Project: envoy Fuzzer: libFuzzerenvoyh1capturedirectresponsefuzztest Fuzz target binary: h1capturedirectresponsefuzztest Job Type: libfuzzerasanenvoy Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7f55425a59b0 Crash...

Fedora 29 : python3 (2019-ec26883852)

Security fix for CVE-2019-9740 and CVE-2019-9947. Fix a regression introduced by the fix for CVE-2019-9636. Add manual page link for python3.7m. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted t...

Ubuntu 16.04 LTS / 18.04 LTS : Samba regression (USN-3976-3)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3976-3 advisory. USN-3976-1 fixed a vulnerability in Samba. The update introduced a regression causing Samba to occasionally crash. This update fixes the problem. We...

Ubuntu: Security Advisory (USN-3976-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 14.04 LTS : samba vulnerability (USN-3976-4)

USN-3976-1 fixed a vulnerability in Samba. The update introduced a regression causing Samba to occasionally crash. This update fixes the problem. Original advisory details : Isaac Boukris and Andrew Bartlett discovered that Samba incorrectly checked S4U2Self packets. In certain environments, a...

USN-3976-4 samba vulnerability

USN-3976-1 fixed a vulnerability in Samba. The update introduced a regression causing Samba to occasionally crash. This update fixes the problem. Original advisory details: Isaac Boukris and Andrew Bartlett discovered that Samba incorrectly checked S4U2Self packets. In certain environments, a...

USN-3976-4: Samba vulnerability

USN-3976-1 fixed a vulnerability in Samba. The update introduced a regression causing Samba to occasionally crash. This update fixes the problem. Original advisory details: Isaac Boukris and Andrew Bartlett discovered that Samba incorrectly checked S4U2Self packets. In certain environments, a...

graphicsmagick/coder_JPEG_fuzzer: Heap-buffer-overflow in Read32s

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=5758005565456384 Project: graphicsmagick Fuzzer: aflgraphicsmagickcoderJPEGfuzzer Fuzz target binary: coderJPEGfuzzer Job Type: aflasangraphicsmagick Platform Id: linux Crash Type:...