radare2:ia_fuzz: Heap-buffer-overflow in parse_relocation_info

Detailed Report: https://oss-fuzz.com/testcase?key=5169642948263936 Project: radare2 Fuzzing Engine: libFuzzer Fuzz Target: iafuzz Job Type: libfuzzerasanradare2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x606000013680 Crash State: parserelocationinfo getrelocs64...

AuthMatrix - A Burp Suite Extension That Provides A Simple Way To Test Authorization

AuthMatrix is an extension to Burp Suite that provides a simple way to test authorization in web applications and web services. With AuthMatrix, testers focus on thoroughly defining tables of users, roles, and requests for their specific target application upfront. These tables are structured in ...

Debian: Security Advisory (DSA-4733-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

clamav:clamav_scanfile_fuzzer: Crash in cli_vba_readdir_new

Detailed Report: https://oss-fuzz.com/testcase?key=4836521560244224 Project: clamav Fuzzing Engine: afl Fuzz Target: clamavscanfilefuzzer Job Type: aflasanclamav Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x61908ec5cbd2 Crash State: clivbareaddirnew clivbascandirnew cliscanole2...

rdkit:mol_data_stream_to_mol_fuzzer: Crash in RDKit::labelRecursivePatterns

Detailed Report: https://oss-fuzz.com/testcase?key=5694552007245824 Project: rdkit Fuzzing Engine: libFuzzer Fuzz Target: moldatastreamtomolfuzzer Job Type: libfuzzerubsanrdkit Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7fff14000000 Crash State: RDKit::labelRecursivePatterns...

OPENSUSE-SU-2020:1042-1 Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: - Mozilla Firefox 78.0.2 MFSA 2020-28 bsc1173948 MFSA-2020-0003 bmo1644076 X-Frame-Options bypass using object or embed tags - Firefox Extended Support Release 78.0.2esr ESR Fixed: Security fix Fixed: Fixed an accessibility regression in...

Security update for MozillaFirefox (moderate)

openSUSE Security Update: Security update for MozillaFirefox Announcement ID: openSUSE-SU-2020:1042-1 Rating: moderate References: 1173948 Affected Products: openSUSE Leap 15.1 An update that contains security fixes can now be installed. Description: This update for MozillaFirefox fixes the...

libyal:libfwnt_lzx_fuzzer: Use-of-uninitialized-value in libfwnt_huffman_tree_build

Detailed Report: https://oss-fuzz.com/testcase?key=5700197540429824 Project: libyal Fuzzing Engine: libFuzzer Fuzz Target: libfwntlzxfuzzer Job Type: libfuzzermsanlibyal Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: libfwnthuffmantreebuild...

libyal:libfwnt_security_descriptor_fuzzer: Heap-buffer-overflow in libfwnt_access_control_entry_copy_from_byte_stream

Detailed Report: https://oss-fuzz.com/testcase?key=6301962723917824 Project: libyal Fuzzing Engine: libFuzzer Fuzz Target: libfwntsecuritydescriptorfuzzer Job Type: libfuzzerasani386libyal Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0xf5100b13 Crash State:...

libyal:libolecf_file_fuzzer: Use-of-uninitialized-value in libolecf_io_handle_read_directory_entries

Detailed Report: https://oss-fuzz.com/testcase?key=5080423911391232 Project: libyal Fuzzing Engine: libFuzzer Fuzz Target: libolecffilefuzzer Job Type: libfuzzermsanlibyal Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: libolecfiohandlereaddirectoryentries...

Fedora 31 : php-horde-kronolith (2020-0fbd043bcf)

kronolith 4.2.29 - mjr Fix regresssion in event modification notifications Bug 15022. ---- kronolith 4.2.28 - mjr SECURITY: Don't leak private details when sending notifications for private events Bug 15011. - mjr Fix regression in display of clickable event URL property Bug 14941. Note that...

libvips:smartcrop_fuzzer: Segv on unknown address in vips_XYZ2Lab_line

Project: https://github.com/libvips/libvips.git Detailed Report: https://oss-fuzz.com/testcase?key=4829562723368960 Project: libvips Fuzzing Engine: honggfuzz Fuzz Target: smartcropfuzzer Job Type: honggfuzzasanlibvips Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash...

SUSE SLED15 / SLES15 Security Update : MozillaFirefox (SUSE-SU-2020:1958-1)

This update for MozillaFirefox fixes the following issues : Mozilla Firefox 78.0.2 MFSA 2020-28 bsc1173948 - MFSA-2020-0003 bmo1644076 X-Frame-Options bypass using object or embed tags Firefox Extended Support Release 78.0.2esr ESR - Fixed: Security fix - Fixed: Fixed an accessibility regression ...

immer:flex-vector-gc: Crash in decltype

Project: https://github.com/arximboldi/immer.git Detailed Report: https://oss-fuzz.com/testcase?key=6017886557306880 Project: immer Fuzzing Engine: libFuzzer Fuzz Target: flex-vector-gc Job Type: libfuzzerasanimmer Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00018055f9f9 Crash...

SUSE-SU-2020:1958-1 Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: - Mozilla Firefox 78.0.2 MFSA 2020-28 bsc1173948 MFSA-2020-0003 bmo1644076 X-Frame-Options bypass using object or embed tags - Firefox Extended Support Release 78.0.2esr ESR Fixed: Security fix Fixed: Fixed an accessibility regression in...

openSUSE Security Update : squid (openSUSE-2020-910)

This update for squid fixes the following issues : squid was updated to version 4.12 Security issue fixed : - CVE-2020-14059: Fixed an issue where a client could potentially deny the service of a server during TLS Handshake bsc1173304. Other issues addressed : - Reverted to slow search for new SM...

openSUSE Security Update : squid (openSUSE-2020-914)

This update for squid fixes the following issues : squid was updated to version 4.12 Security issue fixed : - CVE-2020-14059: Fixed an issue where a client could potentially deny the service of a server during TLS Handshake bsc1173304. Other issues addressed : - Reverted to slow search for new SM...

skia:image_filter_deserialize: Heap-buffer-overflow in SkVertices::Builder::init

Project: https://skia.googlesource.com/skia.git Detailed Report: https://oss-fuzz.com/testcase?key=5443473612996608 Project: skia Fuzzing Engine: afl Fuzz Target: imagefilterdeserialize Job Type: aflasanskia Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 9 Crash Address: 0x60e0000001c0...

php:php-fuzz-parser: Crash in _fini

Detailed Report: https://oss-fuzz.com/testcase?key=5630056790228992 Project: php Fuzzing Engine: honggfuzz Fuzz Target: php-fuzz-parser Job Type: honggfuzzasanphp Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x0000012fabd4 Crash State: fini Sanitizer: address ASAN Recommended...

opensc:fuzz_pkcs15_reader: Heap-buffer-overflow in asepcos_parse_sec_attr

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=5734055866531840 Project: opensc Fuzzing Engine: honggfuzz Fuzz Target: fuzzpkcs15reader Job Type: honggfuzzasanopensc Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...