ndpi:fuzz_ndpi_reader: Heap-buffer-overflow in ndpi_workflow_process_packet

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5102630670565376 Project: ndpi Fuzzing Engine: libFuzzer Fuzz Target: fuzzndpireader Job Type: libfuzzerasanndpi Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address: 0x606000196740...

clamav:clamav_dbload_WDB_fuzzer: Stack-buffer-overflow in load_regex_matcher

Project: https://github.com/Cisco-Talos/clamav.git Detailed Report: https://oss-fuzz.com/testcase?key=4580711766556672 Project: clamav Fuzzing Engine: afl Fuzz Target: clamavdbloadWDBfuzzer Job Type: aflasanclamav Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 1 Crash Address:...

USN-5174-2: Samba regression | Cloud Foundry

Severity Unknown Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 18.04 Description USN-5174-1 fixed vulnerabilities in Samba. Some of the changes introduced a regression in Kerberos authentication in certain environments. Please see the following upstream bug for more information:...

USN-5210-2: Linux kernel regression | Cloud Foundry

Severity Unknown Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 18.04 Description USN-5210-1 fixed vulnerabilities in the Linux kernel. Unfortunately, that update introduced a regression that caused failures to boot in environments with AMD Secure Encrypted Virtualization SEV enabled...

libbpf:bpf-object-fuzzer: Heap-buffer-overflow in bpf_object__init_maps

Project: https://github.com/libbpf/libbpf.git Detailed Report: https://oss-fuzz.com/testcase?key=5979506983174144 Project: libbpf Fuzzing Engine: libFuzzer Fuzz Target: bpf-object-fuzzer Job Type: libfuzzerasanlibbpf Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

matio:matio_fuzzer: Bad-cast to UT_hash_bucket' (aka 'struct UT_hash_bucket')H5I__remove_common in H5I_dec_ref

Project: git://git.code.sf.net/p/matio/matio https://github.com/tbeu/matio.git Detailed Report: https://oss-fuzz.com/testcase?key=6427353037799424 Project: matio Fuzzing Engine: libFuzzer Fuzz Target: matiofuzzer Job Type: libfuzzerubsanmatio Platform Id: linux Crash Type: Bad-cast Crash Address:...

CVE-2018-5738

Change 4777 introduced in October 2017 introduced an unforeseen issue in releases which were issued after that date, affecting which clients are permitted to make recursive queries to a BIND nameserver. The intended and documented behavior is that if an operator has not specified a value for the...

Ubuntu 18.04 LTS / 20.04 LTS : Linux kernel regression (USN-5210-2)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-5210-2 advisory. USN-5210-1 fixed vulnerabilities in the Linux kernel. Unfortunately, that update introduced a regression that caused failures to boot in environments...

Ubuntu: Security Advisory (USN-5210-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-5210-2 linux, linux-gcp, linux-gcp-5.4, linux-hwe-5.4 regression

USN-5210-1 fixed vulnerabilities in the Linux kernel. Unfortunately, that update introduced a regression that caused failures to boot in environments with AMD Secure Encrypted Virtualization SEV enabled. This update fixes the problem. We apologize for the inconvenience. Original advisory details:...

USN-5210-2: Linux kernel regression

USN-5210-1 fixed vulnerabilities in the Linux kernel. Unfortunately, that update introduced a regression that caused failures to boot in environments with AMD Secure Encrypted Virtualization SEV enabled. This update fixes the problem. We apologize for the inconvenience. Original advisory details:...

tcmalloc:profile_builder_fuzz: Use-after-poison in absl::BytesToHexString

Project: https://github.com/google/tcmalloc.git Detailed Report: https://oss-fuzz.com/testcase?key=5100807425490944 Project: tcmalloc Fuzzing Engine: honggfuzz Fuzz Target: profilebuilderfuzz Job Type: honggfuzzasantcmalloc Platform Id: linux Crash Type: Use-after-poison READ 1 Crash Address:...

Ubuntu: Security Advisory (USN-5043-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-5043-2 exiv2 regression

USN-5043-1 fixed vulnerabilities in Exiv2. The update introduced a new regression that could cause a crash in applications using libexiv2. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that Exiv2 incorrectly handled certain image...

freetype2:cidtype1: Use-of-uninitialized-value in sfnt_init_face

Detailed Report: https://oss-fuzz.com/testcase?key=4693744627089408 Project: freetype2 Fuzzing Engine: libFuzzer Fuzz Target: cidtype1 Job Type: libfuzzermsanfreetype2 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: sfntinitface ttfaceinit openface Sanitizer:...

ghostscript:gstoraster_fuzzer: Heap-use-after-free in pdfi_dereference

Detailed Report: https://oss-fuzz.com/testcase?key=4552956672868352 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x7fec79ca2e84 Crash State: pdfidereference...

DLA-2480-2 salt - regression update

Bulletin has no description...

PT-2025-8068

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.18-rc1 Description A regression issue in the Linux kernel has been identified, causing a problem with nbd. The issue is related to a commit that was reverted due to reports of a regression with nbd, resulting i...

envoy:codec_impl_fuzz_test: Crash in Envoy::Http::HttpStream::HttpStream

Project: https://github.com/envoyproxy/envoy.git Detailed Report: https://oss-fuzz.com/testcase?key=6708149317402624 Project: envoy Fuzzing Engine: libFuzzer Fuzz Target: codecimplfuzztest Job Type: libfuzzerubsanenvoy Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00000a844f70 Cras...

curl:curl_fuzzer_scp: Heap-buffer-overflow in seturl

Project: https://github.com/curl/curl.git Detailed Report: https://oss-fuzz.com/testcase?key=5662228513161216 Project: curl Fuzzing Engine: afl Fuzz Target: curlfuzzerscp Job Type: aflasancurl Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x6040000021b4 Crash State: setu...