llvm/clang-fuzzer: Heap-use-after-free in clang::APValue::swap

Project: https://github.com/llvm/llvm-project.git Detailed report: https://oss-fuzz.com/testcase?key=6538719558369280 Project: llvm Fuzzer: libFuzzerllvmclang-fuzzer Fuzz target binary: clang-fuzzer Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Addres...

gdal/mitab_tab_fuzzer: Heap-use-after-free in NTFFileReader::ProcessGeometry3D

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5353512058748928 Project: gdal Fuzzer: libFuzzergdalmitabtabfuzzer Fuzz target binary: mitabtabfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address:...

libreoffice/htmlfuzzer: Crash in BigPtrArray::Index2Block

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5431178891886592 Project: libreoffice Fuzzer: libFuzzerlibreofficehtmlfuzzer Fuzz target binary: htmlfuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type: UNKNOWN READ...

curl/curl_fuzzer_imap: Heap-buffer-overflow in fuzz_read_callback

Project: https://github.com/curl/curl.git Detailed report: https://oss-fuzz.com/testcase?key=5817192030404608 Project: curl Fuzzer: aflcurlfuzzerimap Fuzz target binary: curlfuzzerimap Job Type: aflasancurl Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address: 0x62a0000054a0...

libreoffice/htmlfuzzer: Bad-cast to SdrObjectSwHTMLParser::EndMarquee in SwHTMLParser::NextToken

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5154703525543936 Project: libreoffice Fuzzer: libFuzzerlibreofficehtmlfuzzer Fuzz target binary: htmlfuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type: Bad-cast Crash...

libreoffice/htmlfuzzer: Bad-cast to SwTable from invalid vptr in HTMLTable::MakeTable

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=4587072460423168 Project: libreoffice Fuzzer: libFuzzerlibreofficehtmlfuzzer Fuzz target binary: htmlfuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type: Bad-cast Crash...

libreoffice/mmlfuzzer: Heap-buffer-overflow in SmXMLTableContext_Impl::EndElement

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=6605675816812544 Project: libreoffice Fuzzer: libFuzzerlibreofficemmlfuzzer Fuzz target binary: mmlfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-buffer-overfl...

libreoffice/htmlfuzzer: Container-overflow in HTMLTableRow::GetCell

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=6656273752784896 Project: libreoffice Fuzzer: libFuzzerlibreofficehtmlfuzzer Fuzz target binary: htmlfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Container-overfl...

Updated flash-player-plugin packages fix security vulnerability

A regression affecting Adobe Flash Player version 27.0.0.187 and earlier versions causes the unintended reset of the global settings preference file when a user clears browser data. CVE-2017-11305...

ffmpeg/ffmpeg_AV_CODEC_ID_EXR_fuzzer: Heap-buffer-overflow in decode_block

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=6152313673613312 Project: ffmpeg Fuzzer: aflffmpegAVCODECIDEXRfuzzer Fuzz target binary: ffmpegAVCODECIDEXRfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash...

Debian DLA-1208-1 : reportbug update

Reportbug, a tool designed to make the reporting of bugs in Debian easier, was further enhanced to automatically detect bug reports for potential regressions caused by a security update. After user confirmation an additional email with a copy of the report will be sent to the debian-lts mailing...

Ubuntu 16.04 LTS : Linux kernel regression (USN-3509-3)

The remote Ubuntu 16.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-3509-3 advisory. USN-3509-1 fixed vulnerabilities in the Linux kernel for Ubuntu 16.04 LTS. Unfortunately, it also introduced a regression that prevented the Ceph network filesyst...

Ubuntu 14.04 LTS : Linux kernel (Xenial HWE) regression (USN-3509-4)

The remote Ubuntu 14.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-3509-4 advisory. USN-3509-2 fixed vulnerabilities in the Linux Hardware Enablement kernel for Ubuntu 14.04 LTS. Unfortunately, it also introduced a regression that prevented the...

dlplibs/abwfuzzer: Heap-use-after-free in xmlParseGetLasts

Detailed report: https://oss-fuzz.com/testcase?key=4943753899933696 Project: dlplibs Fuzzer: libFuzzerdlplibsabwfuzzer Fuzz target binary: abwfuzzer Job Type: libfuzzerasandlplibs Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address: 0x625000009686 Crash State: xmlParseGetLasts...

boost/boost_regex_fuzzer: Bad-cast to boost::detail::sp_counted_base from invalid vptr in boost::detail::shared_count::shared_count

Project: https://github.com/boostorg/boost.git Detailed report: https://oss-fuzz.com/testcase?key=6612089117343744 Project: boost Fuzzer: libFuzzerboostregexfuzzer Fuzz target binary: boostregexfuzzer Job Type: libfuzzerubsanboost Platform Id: linux Crash Type: Bad-cast Crash Address:...

chakra: Crash in Js::DynamicProfileInfo::RecordCallSiteInfo

Project: https://github.com/Microsoft/ChakraCore.git Detailed report: https://oss-fuzz.com/testcase?key=6634271616794624 Project: chakra Fuzzer: jsfuzzer Job Type: asanchakra Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7fc57939b0da Crash State:...

librawspeed/FiffParserFuzzer-GetDecoder-Decode: Use-of-uninitialized-value in rawspeed::RawImageData::checkMemIsInitialized

Project: https://github.com/darktable-org/rawspeed.git Detailed report: https://oss-fuzz.com/testcase?key=5591786081746944 Project: librawspeed Fuzzer: libFuzzerlibrawspeedFiffParserFuzzer-GetDecoder-Decode Fuzz target binary: FiffParserFuzzer-GetDecoder-Decode Job Type: libfuzzermsanlibrawspeed...

gdal/mitab_tab_fuzzer: Heap-buffer-overflow in TABINDNode::FindFirst

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=4754517640871936 Project: gdal Fuzzer: libFuzzergdalmitabtabfuzzer Fuzz target binary: mitabtabfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

USN-3509-4: Linux kernel (Xenial HWE) regression | Cloud Foundry

Severity Unspecified Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 14.04 Description USN-3509-2 fixed vulnerabilities in the Linux Hardware Enablement kernel for Ubuntu 14.04 LTS. Unfortunately, it also introduced a regression that prevented the Ceph network filesystem from being use...

boost/boost_regex_fuzzer: Bad-cast to boost::detail::sp_counted_baseboost::detail::shared_count::shared_count in boost::shared_ptr<boost::re_detail_NUMBER::named_subexpressions>::shared_ptr

Project: https://github.com/boostorg/boost.git Detailed report: https://oss-fuzz.com/testcase?key=6395263733202944 Project: boost Fuzzer: libFuzzerboostregexfuzzer Fuzz target binary: boostregexfuzzer Job Type: libfuzzerubsanboost Platform Id: linux Crash Type: Bad-cast Crash Address:...