poppler:pdf_fuzzer: Container-overflow in poppler::page::text_list

Project: https://anongit.freedesktop.org/git/poppler/poppler.git Detailed Report: https://oss-fuzz.com/testcase?key=5724813351190528 Project: poppler Fuzzing Engine: afl Fuzz Target: pdffuzzer Job Type: aflasanpoppler Platform Id: linux Crash Type: Container-overflow WRITE 4 Crash Address:...

ndpi:fuzz_ndpi_reader: Heap-buffer-overflow in ndpi_search_kerberos

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5749844789690368 Project: ndpi Fuzzing Engine: libFuzzer Fuzz Target: fuzzndpireader Job Type: libfuzzerasanndpi Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6110000031c5...

binutils:fuzz_readelf: Crash in get_num_dynamic_syms

Detailed Report: https://oss-fuzz.com/testcase?key=5709125748260864 Project: binutils Fuzzing Engine: honggfuzz Fuzz Target: fuzzreadelf Job Type: honggfuzzasanbinutils Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x6117fff9f980 Crash State: getnumdynamicsyms processdynamicsection...

DRUPAL-CORE-2020-002

The jQuery project released version 3.5.0, and as part of that, disclosed two security vulnerabilities that affect all prior versions. As mentioned in the jQuery blog, both are ... security issues in jQuery’s DOM manipulation methods, as in .html, .append, and the others. Security advisories for...

keystone:fuzz_asm_sparc64be: Invalid-free in llvm_ks::SmallVectorImpl<llvm_ks::MCFixup>::~SmallVectorImpl

Detailed Report: https://oss-fuzz.com/testcase?key=5767140656545792 Project: keystone Fuzzing Engine: libFuzzer Fuzz Target: fuzzasmsparc64be Job Type: libfuzzerasankeystone Platform Id: linux Crash Type: Invalid-free Crash Address: 0x61900000059d Crash State:...

wabt:wasm2wat_fuzzer: Heap-buffer-overflow in std::__1::char_traits<char>::compare

Detailed Report: https://oss-fuzz.com/testcase?key=5644294491996160 Project: wabt Fuzzing Engine: libFuzzer Fuzz Target: wasm2watfuzzer Job Type: libfuzzerasani386wabt Platform Id: linux Crash Type: Heap-buffer-overflow READ 6 Crash Address: 0xf5000680 Crash State: std::1::chartraits::compare...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : json-c regression (USN-4360-2)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4360-2 advisory. USN-4360-1 fixed a vulnerability in json-c. The security fix introduced a memory leak in some scenarios. This update reverts the security...

CSRF Vulnerability in rails-ujs

There is an vulnerability in rails-ujs that allows attackers to send CSRF tokens to wrong domains. Versions Affected: rails = 5.2.4.3, rails = 6.0.3.1 Impact ------ This is a regression of CVE-2015-1840. In the scenario where an attacker might be able to control the href attribute of an anchor ta...

cryptofuzz:cryptofuzz-boringssl-noasm: Heap-buffer-overflow in mpih_invm_pow2

Project: https://github.com/guidovranken/cryptofuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=5671484061384704 Project: cryptofuzz Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-boringssl-noasm Job Type: libfuzzerasancryptofuzz Platform Id: linux Crash Type: Heap-buffer-overflow...

opus:opus_decode_fuzzer_fixed: Use-of-uninitialized-value in silk_LPC_analysis_filter

Project: https://gitlab.xiph.org/xiph/opus.git Detailed Report: https://oss-fuzz.com/testcase?key=5652277353512960 Project: opus Fuzzing Engine: libFuzzer Fuzz Target: opusdecodefuzzerfixed Job Type: libfuzzermsanopus Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

envoy:codec_impl_fuzz_test: Stack-use-after-scope in Envoy::Http::Http1::ConnectionImpl::readDisable

Project: https://github.com/envoyproxy/envoy.git Detailed Report: https://oss-fuzz.com/testcase?key=5716313302630400 Project: envoy Fuzzing Engine: afl Fuzz Target: codecimplfuzztest Job Type: aflasanenvoy Platform Id: linux Crash Type: Stack-use-after-scope READ 8 Crash Address: 0x7f5c31653660...

wabt:wasm2wat_fuzzer: Segv on unknown address in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch

Project: https://github.com/WebAssembly/wabt.git Detailed Report: https://oss-fuzz.com/testcase?key=5680885787787264 Project: wabt Fuzzing Engine: libFuzzer Fuzz Target: wasm2watfuzzer Job Type: libfuzzerasanwabt Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State:...

open62541:fuzz_tcp_message: Use-of-uninitialized-value in UA_Array_copy

Detailed Report: https://oss-fuzz.com/testcase?key=5740902795706368 Project: open62541 Fuzzing Engine: libFuzzer Fuzz Target: fuzztcpmessage Job Type: libfuzzermsanopen62541 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: UAArraycopy Stringcopy...

tremor:decode_fuzzer: Crash in _01inverse

Project: https://gitlab.xiph.org/xiph/tremor.git Detailed Report: https://oss-fuzz.com/testcase?key=5087225147817984 Project: tremor Fuzzing Engine: libFuzzer Fuzz Target: decodefuzzer Job Type: libfuzzermsantremor Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x70a06c800114 Crash...

USN-4360-2 json-c regression

USN-4360-1 fixed a vulnerability in json-c. The security fix introduced a memory leak in some scenarios. This update reverts the security fix pending further investigation. We apologize for the inconvenience. Original advisory details: It was discovered that json-c incorrectly handled certain JSO...

ndpi:fuzz_ndpi_reader: Heap-buffer-overflow in ndpi_search_openvpn

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5094191580577792 Project: ndpi Fuzzing Engine: afl Fuzz Target: fuzzndpireader Job Type: aflasanndpi Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x60b0000003d2 Crash State:...

USN-4360-3: json-c regression

USN-4360-1 fixed a vulnerability in json-c. The security fix introduced a memory leak in some scenarios. This update reverts the security fix pending further investigation. We apologize for the inconvenience. Original advisory details: It was discovered that json-c incorrectly handled certain JSO...

USN-4360-3 json-c regression

USN-4360-1 fixed a vulnerability in json-c. The security fix introduced a memory leak in some scenarios. This update reverts the security fix pending further investigation. We apologize for the inconvenience. Original advisory details: It was discovered that json-c incorrectly handled certain JSO...

ots:ots-fuzzer: Heap-buffer-overflow in LZ4_read16

Project: https://github.com/khaledhosny/ots.git Detailed Report: https://oss-fuzz.com/testcase?key=5651243541463040 Project: ots Fuzzing Engine: libFuzzer Fuzz Target: ots-fuzzer Job Type: libfuzzerasanots Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address: 0x6180000007e8...

capstone:fuzz_disasmnext: Global-buffer-overflow in decodeRegisterClass

Detailed Report: https://oss-fuzz.com/testcase?key=5666610666012672 Project: capstone Fuzzing Engine: libFuzzer Fuzz Target: fuzzdisasmnext Job Type: libfuzzerasancapstone Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Address: 0x00000099292c Crash State: decodeRegisterClass...