opensc:fuzz_pkcs15_reader: Heap-buffer-overflow in asepcos_parse_sec_attr

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=5734055866531840 Project: opensc Fuzzing Engine: honggfuzz Fuzz Target: fuzzpkcs15reader Job Type: honggfuzzasanopensc Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

leptonica:dewarp_fuzzer: Heap-buffer-overflow in rasteropGeneralLow

Project: https://github.com/DanBloomberg/leptonica.git Detailed Report: https://oss-fuzz.com/testcase?key=5696549393530880 Project: leptonica Fuzzing Engine: afl Fuzz Target: dewarpfuzzer Job Type: aflasanleptonica Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address:...

c-blosc2:decompress_fuzzer: Heap-use-after-free in ZSTD_DDict_dictContent

Detailed Report: https://oss-fuzz.com/testcase?key=6101295449767936 Project: c-blosc2 Fuzzing Engine: libFuzzer Fuzz Target: decompressfuzzer Job Type: libfuzzerasanc-blosc2 Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x62b00000e208 Crash State: ZSTDDDictdictContent...

libreoffice:ww8fuzzer: Index-out-of-bounds in WW8ListManager::ReadLVL

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=5733197544161280 Project: libreoffice Fuzzing Engine: libFuzzer Fuzz Target: ww8fuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type: Index-out-of-bounds Crash Address:...

Debian DLA-2278-3 : squid3 regression update

The update of squid3 released as DLA-2278-2 introduced a regression due to the updated fix for CVE-2019-12529. The new Kerberos authentication code prevented base64 token negotiation. Updated squid3 packages are now available to correct this issue. For Debian 9 stretch, this problem has been fixe...

CVE-2020-14300

The docker packages version docker-1.13.1-108.git4ef4b30.el7 as released for Red Hat Enterprise Linux 7 Extras via RHBA-2020:0053 https://access.redhat.com/errata/RHBA-2020:0053 included an incorrect version of runc that was missing multiple bug and security fixes. One of the fixes regressed in...

CVE-2020-14300

The docker packages version docker-1.13.1-108.git4ef4b30.el7 as released for Red Hat Enterprise Linux 7 Extras via RHBA-2020:0053 https://access.redhat.com/errata/RHBA-2020:0053 included an incorrect version of runc that was missing multiple bug and security fixes. One of the fixes regressed in...

CVE-2020-14300

The docker packages version docker-1.13.1-108.git4ef4b30.el7 as released for Red Hat Enterprise Linux 7 Extras via RHBA-2020:0053 https://access.redhat.com/errata/RHBA-2020:0053 included an incorrect version of runc that was missing multiple bug and security fixes. One of the fixes regressed in...

Code injection

The docker packages version docker-1.13.1-108.git4ef4b30.el7 as released for Red Hat Enterprise Linux 7 Extras via RHBA-2020:0053 https://access.redhat.com/errata/RHBA-2020:0053 included an incorrect version of runc that was missing multiple bug and security fixes. One of the fixes regressed in...

CVE-2020-14300

The docker packages version docker-1.13.1-108.git4ef4b30.el7 as released for Red Hat Enterprise Linux 7 Extras via RHBA-2020:0053 https://access.redhat.com/errata/RHBA-2020:0053 included an incorrect version of runc that was missing multiple bug and security fixes. One of the fixes regressed in...

CVE-2020-14300

CVE-2020-14300 affects Red Hat Enterprise Linux 7 Extras Docker packaging (docker-1.13.1-108.git4ef4b30.el7). The issue arises from an incorrect runc version in that package, regressing the fix for CVE-2016-9962 and potentially allowing a process inside a container to escape the container namespa...

CVE-2020-14300

The docker packages version docker-1.13.1-108.git4ef4b30.el7 as released for Red Hat Enterprise Linux 7 Extras via RHBA-2020:0053 https://access.redhat.com/errata/RHBA-2020:0053 included an incorrect version of runc that was missing multiple bug and security fixes. One of the fixes regressed in...

arrow:arrow-ipc-stream-fuzz: Negative-size-param in arrow::ConcatenateBuffers

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=4964779626856448 Project: arrow Fuzzing Engine: afl Fuzz Target: arrow-ipc-stream-fuzz Job Type: aflasanarrow Platform Id: linux Crash Type: Negative-size-param Crash Address: Crash State:...

DSA-4714-3 chromium - regression update

Bulletin has no description...

minify:minify-number-fuzzer: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5729119573377024 Project: minify Fuzzing Engine: libFuzzer Fuzz Target: minify-number-fuzzer Job Type: libfuzzerasanminify Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00000000772e Crash State: NULL Sanitizer: address ASAN...

leptonica:dewarp_fuzzer: Heap-buffer-overflow in rasteropGeneralLow

Detailed Report: https://oss-fuzz.com/testcase?key=5743324372402176 Project: leptonica Fuzzing Engine: libFuzzer Fuzz Target: dewarpfuzzer Job Type: libfuzzerasanleptonica Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x6020000002c0 Crash State: rasteropGeneralLow...

sqlite3:ossfuzz: Use-of-uninitialized-value in sqlite3Atoi64

Detailed Report: https://oss-fuzz.com/testcase?key=4899130430980096 Project: sqlite3 Fuzzing Engine: libFuzzer Fuzz Target: ossfuzz Job Type: libfuzzermsansqlite3 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: sqlite3Atoi64 computeNumericType numericType...

draco:draco_pc_decoder_fuzzer: Heap-use-after-free in draco::Metadata::AddSubMetadata

Detailed Report: https://oss-fuzz.com/testcase?key=6326315129765888 Project: draco Fuzzing Engine: afl Fuzz Target: dracopcdecoderfuzzer Job Type: aflasandraco Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x6040000000b0 Crash State: draco::Metadata::AddSubMetadata...

libxml2:html: Heap-use-after-free in xmlParserPrintFileContextInternal

Project: https://gitlab.gnome.org/GNOME/libxml2.git Detailed Report: https://oss-fuzz.com/testcase?key=6147358168711168 Project: libxml2 Fuzzing Engine: afl Fuzz Target: html Job Type: aflasanlibxml2 Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address: 0x621000008d00 Crash...

git:fuzz-commit-graph: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5166823746830336 Project: git Fuzzing Engine: libFuzzer Fuzz Target: fuzz-commit-graph Job Type: libfuzzerasangit Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x61b000004000 Crash State: NULL Sanitizer: address ASAN Recommended...