lcms:cms_profile_fuzzer: Crash in _cmsWriteUInt16Array

Project: https://github.com/mm2/Little-CMS.git Detailed Report: https://oss-fuzz.com/testcase?key=4609861400264704 Project: lcms Fuzzing Engine: libFuzzer Fuzz Target: cmsprofilefuzzer Job Type: libfuzzermsanlcms Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x718000010000 Crash Stat...

zeek:zeek-packet-fuzzer: Heap-buffer-overflow in zeek::BuildOptionsVal

Project: https://github.com/zeek/zeek.git Detailed Report: https://oss-fuzz.com/testcase?key=5756801487863808 Project: zeek Fuzzing Engine: libFuzzer Fuzz Target: zeek-packet-fuzzer Job Type: libfuzzerasanzeek Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6050016822b...

jackson-databind:ReadTreeFuzzer: Security exception in com.fasterxml.jackson.core.JsonPointer._parseTail

Project: https://github.com/FasterXML/jackson-databind.git Detailed Report: https://oss-fuzz.com/testcase?key=6669466951352320 Project: jackson-databind Fuzzing Engine: libFuzzer Fuzz Target: ReadTreeFuzzer Job Type: libfuzzerasanjackson-databind Platform Id: linux Crash Type: Security exception...

net-snmp:snmp_api_fuzzer: Heap-double-free in ada_fuzz_header.h

Project: git://git.code.sf.net/p/net-snmp/code https://github.com/net-snmp/net-snmp.git Detailed Report: https://oss-fuzz.com/testcase?key=5357436638199808 Project: net-snmp Fuzzing Engine: honggfuzz Fuzz Target: snmpapifuzzer Job Type: honggfuzzasannet-snmp Platform Id: linux Crash Type:...

ffmpeg:ffmpeg_AV_CODEC_ID_SPEEDHQ_fuzzer: Heap-buffer-overflow in ff_put_pixels_clamped_c

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4748914632294400 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDSPEEDHQfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Addres...

libressl:asn1: Heap-buffer-overflow in i2c_ASN1_INTEGER

Project: https://github.com/libressl-portable/portable.git Detailed Report: https://oss-fuzz.com/testcase?key=6566404500881408 Project: libressl Fuzzing Engine: afl Fuzz Target: asn1 Job Type: aflasanlibressl Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6020000032cf...

javaparser:parseFuzzer: Uncaught exception in com.github.javaparser.ast.validator.TreeVisitorValidator.accept

Project: https://github.com/javaparser/javaparser.git Detailed Report: https://oss-fuzz.com/testcase?key=6496097463304192 Project: javaparser Fuzzing Engine: libFuzzer Fuzz Target: parseFuzzer Job Type: libfuzzerasanjavaparser Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash...

libyal:libfmos_lzfse_fuzzer: Use-of-uninitialized-value in libfmos_lzfse_decompress

Detailed Report: https://oss-fuzz.com/testcase?key=4600023953833984 Project: libyal Fuzzing Engine: libFuzzer Fuzz Target: libfmoslzfsefuzzer Job Type: libfuzzermsanlibyal Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: libfmoslzfsedecompress lzfsefuzzer.cc...

libarchive:libarchive_fuzzer: Heap-use-after-free in archive_read_data

Project: https://github.com/libarchive/libarchive.git Detailed Report: https://oss-fuzz.com/testcase?key=5385866872225792 Project: libarchive Fuzzing Engine: afl Fuzz Target: libarchivefuzzer Job Type: aflasanlibarchive Platform Id: linux Crash Type: Heap-use-after-free READ Crash Address:...

libreoffice:ww6fuzzer: Heap-buffer-overflow in SwModify::Add

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=4796119074340864 Project: libreoffice Fuzzing Engine: libFuzzer Fuzz Target: ww6fuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash...

CVE-2022-37434

zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call...

dav1d:dav1d_fuzzer_mt: Use-of-uninitialized-value in cdef_filter_block_c

Project: https://code.videolan.org/videolan/dav1d.git Detailed Report: https://oss-fuzz.com/testcase?key=5118372618043392 Project: dav1d Fuzzing Engine: libFuzzer Fuzz Target: dav1dfuzzermt Job Type: libfuzzermsandav1d Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

CVE-2022-29154

An issue was discovered in rsync before 3.2.5 that allows malicious remote servers to write arbitrary files inside the directories of connecting peers. The server chooses which files/directories are sent to the client. However, the rsync client performs insufficient validation of file names. A...

libreoffice:xlsfuzzer: Heap-use-after-free in SfxItemPool::Remove

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=5142620459892736 Project: libreoffice Fuzzing Engine: libFuzzer Fuzz Target: xlsfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-use-after-free READ 2 Crash...

GSD-2022-1004224 nvmet-tcp: fix regression in data_digest calculation

nvmet-tcp: fix regression in datadigest calculation This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.10 by commit...

Huawei EulerOS: Security Advisory for subversion (EulerOS-SA-2022-2172)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

wolfssl:cryptofuzz-sp-math: Heap-buffer-overflow in sp_ecc_secret_gen_256

Project: https://github.com/wolfssl/wolfssl.git Detailed Report: https://oss-fuzz.com/testcase?key=6008055086579712 Project: wolfssl Fuzzing Engine: honggfuzz Fuzz Target: cryptofuzz-sp-math Job Type: honggfuzzasanwolfssl Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address:...

wolfssl:cryptofuzz-disable-fastmath: Heap-buffer-overflow in sp_div

Project: https://github.com/wolfssl/wolfssl.git Detailed Report: https://oss-fuzz.com/testcase?key=5175334403702784 Project: wolfssl Fuzzing Engine: honggfuzz Fuzz Target: cryptofuzz-disable-fastmath Job Type: honggfuzzasanwolfssl Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash...

SUSE-SU-2022:2526-1 Security update for rubygem-rack

This update for rubygem-rack fixes the following issues: - CVE-2022-30122: Fixed crafted multipart POST request may cause a DoS bsc1200748 - CVE-2022-30123: Fixed crafted requests can cause shell escape sequences bsc1200750 The following non-security bug was fixed: - Fixed a regression in...

libucl:ucl_add_string_fuzzer: Heap-buffer-overflow in ucl_object_dtor_unref_single

Detailed Report: https://oss-fuzz.com/testcase?key=6178711182901248 Project: libucl Fuzzing Engine: libFuzzer Fuzz Target: ucladdstringfuzzer Job Type: libfuzzerasanlibucl Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x6050000008b0 Crash State: uclobjectdtorunrefsingl...