duckdb:parse_fuzz_test: Bad-cast to duckdb::ResetVariableStatement from duckdb::SetStatement in duckdb::Binder::Bind

Project: https://github.com/duckdb/duckdb.git Detailed Report: https://oss-fuzz.com/testcase?key=6048141818593280 Project: duckdb Fuzzing Engine: libFuzzer Fuzz Target: parsefuzztest Job Type: libfuzzerubsanduckdb Platform Id: linux Crash Type: Bad-cast Crash Address: 0x0000050794b0 Crash State:...

ndpi:fuzz_ndpi_reader_alloc_fail: Use-of-uninitialized-value in ndpi_set_risk

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=4795281269194752 Project: ndpi Fuzzing Engine: libFuzzer Fuzz Target: fuzzndpireaderallocfail Job Type: libfuzzermsanndpi Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

TYPO3 Sensitive Information Disclosure Vulnerability (TYPO3-CORE-SA-2022-016)

TYPO3 is prone to a sensitive information disclosure vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:typo3:typo3";...

DLA-3239-2 git - regression update

Bulletin has no description...

Important: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 9.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

USN-5771-1 squid3 regression

USN-3557-1 fixed vulnerabilities in Squid. This update introduced a regression which could cause the cache log to be filled with many Vary loop messages. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Mathias Fischer discovered that Squid incorrectly...

Ubuntu 16.04 ESM : Squid regression (USN-5771-1)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-5771-1 advisory. USN-3557-1 fixed vulnerabilities in Squid. This update introduced a regression which could cause the cache log to be filled with many Vary loop messages. This...

libredwg:llvmfuzz: Heap-buffer-overflow in bit_read_B

Project: https://github.com/LibreDWG/libredwg.git Detailed Report: https://oss-fuzz.com/testcase?key=4766722093875200 Project: libredwg Fuzzing Engine: libFuzzer Fuzz Target: llvmfuzz Job Type: libfuzzerasanlibredwg Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

graphicsmagick:coder_TIFF_fuzzer: Use-of-uninitialized-value in AccumulateRGB

Detailed Report: https://oss-fuzz.com/testcase?key=4862840762925056 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderTIFFfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: AccumulateRGB...

c-blosc2:decompress_frame_fuzzer: Heap-buffer-overflow in ZSTD_createDDict

Project: https://github.com/Blosc/c-blosc2.git Detailed Report: https://oss-fuzz.com/testcase?key=5308907021271040 Project: c-blosc2 Fuzzing Engine: afl Fuzz Target: decompressframefuzzer Job Type: aflasanc-blosc2 Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address:...

Ubuntu: Security Advisory (USN-5745-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-5745-2: shadow regression

USN-5745-1 fixed vulnerabilities in shadow. Unfortunately that update introduced a regression that caused useradd to behave incorrectly in Ubuntu 14.04 ESM, Ubuntu 16.04 ESM, Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. This update reverts the security fix pending further investigation. We apologize fo...

USN-5745-2 shadow regression

USN-5745-1 fixed vulnerabilities in shadow. Unfortunately that update introduced a regression that caused useradd to behave incorrectly in Ubuntu 14.04 ESM, Ubuntu 16.04 ESM, Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. This update reverts the security fix pending further investigation. We apologize fo...

ghostscript:gs_device_ps2write_fuzzer: Heap-use-after-free in gs_font_finalize

Detailed Report: https://oss-fuzz.com/testcase?key=4965064002371584 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdeviceps2writefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x63100a627798 Crash State:...

jackson-databind:AdaLObjectReader3Fuzzer: Security exception in com.fasterxml.jackson.databind.jsontype.impl.AsArrayTypeDeserializer.deserialize

Detailed Report: https://oss-fuzz.com/testcase?key=5145374413422592 Project: jackson-databind Fuzzing Engine: libFuzzer Fuzz Target: AdaLObjectReader3Fuzzer Job Type: libfuzzerasanjackson-databind Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

unicorn:fuzz_emu_mips_32le: Index-out-of-bounds in mipsdsp_sat32_acc_q31

Project: https://github.com/unicorn-engine/unicorn.git Detailed Report: https://oss-fuzz.com/testcase?key=5269576915222528 Project: unicorn Fuzzing Engine: libFuzzer Fuzz Target: fuzzemumips32le Job Type: libfuzzerubsanunicorn Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Cras...

harfbuzz:hb-shape-fuzzer: Heap-buffer-overflow in OT::hb_ot_apply_context_t::skipping_iterator_t::next

Project: https://github.com/harfbuzz/harfbuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=5205467683225600 Project: harfbuzz Fuzzing Engine: libFuzzer Fuzz Target: hb-shape-fuzzer Job Type: libfuzzerasanharfbuzz Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address:...

USN-5638-3 expat vulnerability

USN-5638-1 fixed a vulnerability in Expat. This update provides the corresponding updates for Ubuntu 16.04 ESM, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS and Ubuntu 22.10. CVE-2022-43680 This update also fixes a minor regression introduced in Ubuntu 18.04 LTS. We apologize for the...

libarchive:libarchive_fuzzer: Heap-buffer-overflow in archive_read_has_encrypted_entries

Project: https://github.com/libarchive/libarchive.git Detailed Report: https://oss-fuzz.com/testcase?key=6556641101479936 Project: libarchive Fuzzing Engine: honggfuzz Fuzz Target: libarchivefuzzer Job Type: honggfuzzasanlibarchive Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash...

spring-data-mongodb:ParameterBindingJsonReaderFuzzer: Security exception in org.springframework.expression.spel.standard.InternalSpelExpressionParser.eatExp

Project: https://github.com/spring-projects/spring-data-mongodb.git Detailed Report: https://oss-fuzz.com/testcase?key=5019995084292096 Project: spring-data-mongodb Fuzzing Engine: libFuzzer Fuzz Target: ParameterBindingJsonReaderFuzzer Job Type: libfuzzerasanspring-data-mongodb Platform Id: linu...