CVE-2020-12762

json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbufmemappend...

ndpi:fuzz_ndpi_reader: Segv on unknown address in process_ndpi_collected_info

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5715653119180800 Project: ndpi Fuzzing Engine: libFuzzer Fuzz Target: fuzzndpireader Job Type: libfuzzerasanndpi Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State:...

imagemagick:encoder_ept_fuzzer: Heap-buffer-overflow in PushShortPixel

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5755535581511680 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encodereptfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type: Heap-buffer-overflow READ 1...

imagemagick:encoder_heic_fuzzer: Heap-buffer-overflow in Op_RGB_to_RGB24_32::convert_colorspace

Detailed Report: https://oss-fuzz.com/testcase?key=5696729493274624 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x621000063d0f Crash State:...

envoy:codec_impl_fuzz_test: Crash in Envoy::Http::HttpStream::directionalAction

Detailed Report: https://oss-fuzz.com/testcase?key=5766628005642240 Project: envoy Fuzzing Engine: libFuzzer Fuzz Target: codecimplfuzztest Job Type: libfuzzerasanenvoy Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x6190017d3f48 Crash State: Envoy::Http::HttpStream::directionalActio...

imagemagick:encoder_heic_fuzzer: Use-of-uninitialized-value in put_weighted_pred_8_fallback

Detailed Report: https://oss-fuzz.com/testcase?key=5633401861439488 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: putweightedpred8fallback...

envoy:codec_impl_fuzz_test: Stack-use-after-scope in Envoy::Http::Http1::ConnectionImpl::readDisable

Project: https://github.com/envoyproxy/envoy.git Detailed Report: https://oss-fuzz.com/testcase?key=5664448854622208 Project: envoy Fuzzing Engine: libFuzzer Fuzz Target: codecimplfuzztest Job Type: libfuzzerasanenvoy Platform Id: linux Crash Type: Stack-use-after-scope READ 8 Crash Address:...

SUSE SLES15 Security Update : permissions (SUSE-SU-2020:1163-1)

This update for permissions fixes the following issues : Security issue fixed : CVE-2020-8013: Fixed a local privilege escalation with mrsh and wodim bsc1163922. Non-security issues fixed : Fixed regression where chkstat breaks without /proc available bsc1160764, bsc1160594 Fixed capability...

graphicsmagick:coder_WPG_fuzzer: Heap-use-after-free in ImportGrayQuantumType

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=6294798204141568 Project: graphicsmagick Fuzzing Engine: afl Fuzz Target: coderWPGfuzzer Job Type: aflasangraphicsmagick Platform Id: linux Crash Type: Heap-use-after-free WRITE 2 Crash Address...

curl:curl_fuzzer: Crash in http2_handle_stream_close

Project: https://github.com/curl/curl.git Detailed Report: https://oss-fuzz.com/testcase?key=5753981206003712 Project: curl Fuzzing Engine: libFuzzer Fuzz Target: curlfuzzer Job Type: libfuzzerasani386curl Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x5d502c64 Crash State:...

Windows 10 Insider Preview Fast win32kbase HMMarkObjectDestroy Arbitrary Code Execution Vulnerability Regression

Summary A use after free vulnerability exists in Windows 10, Insider Preview Fast 10.0.19582.1001, when a Win32k component fails to properly handle objects in memory. Successful exploitation of this vulnerability can lead to arbitrary code execution in the kernel context and elevation of...

openvswitch:odp_target: Use-of-uninitialized-value in tun_key_to_attr

Project: https://github.com/openvswitch/ovs.git Detailed Report: https://oss-fuzz.com/testcase?key=5715581933453312 Project: openvswitch Fuzzing Engine: libFuzzer Fuzz Target: odptarget Job Type: libfuzzermsanopenvswitch Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Cra...

ndpi:fuzz_process_packet: Heap-buffer-overflow in ndpi_strnstr

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5681891455008768 Project: ndpi Fuzzing Engine: afl Fuzz Target: fuzzprocesspacket Job Type: aflasanndpi Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6040000002b8 Crash State...

SUSE-SU-2020:1163-1 Security update for permissions

This update for permissions fixes the following issues: Security issue fixed: - CVE-2020-8013: Fixed a local privilege escalation with mrsh and wodim bsc1163922. Non-security issues fixed: - Fixed regression where chkstat breaks without /proc available bsc1160764, bsc1160594 - Fixed capability...

ghostscript:gstoraster_fuzzer: Crash in mem_mapped4_fill_rectangle

Detailed Report: https://oss-fuzz.com/testcase?key=5702235993669632 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00000526dcdc Crash State: memmapped4fillrectangle...

[SECURITY] [DLA 2196-2] pound regression update

Package : pound Version : 2.6-6+deb8u3 CVE ID : CVE-2016-10711 A regression has been found in the patch for CVE-2016-10711 of pound, a reverse proxy, load balancer and HTTPS front-end for Web servers. Without the fix pound can be tricked to use 100% CPU. For Debian 8 "Jessie", this problem has be...

oniguruma:fuzzer: Heap-use-after-free in node_min_byte_len

Project: https://github.com/kkos/oniguruma.git Detailed Report: https://oss-fuzz.com/testcase?key=5650250581934080 Project: oniguruma Fuzzing Engine: afl Fuzz Target: fuzzer Job Type: aflasanoniguruma Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x6070000005d0 Crash...

DLA-2196-2 pound - regression update

Bulletin has no description...

libzmq:test_connect_null_fuzzer: Heap-buffer-overflow in zmq::tcp_read

Project: https://github.com/zeromq/libzmq.git Detailed Report: https://oss-fuzz.com/testcase?key=5696322561900544 Project: libzmq Fuzzing Engine: libFuzzer Fuzz Target: testconnectnullfuzzer Job Type: libfuzzerasani386libzmq Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address:...

imagemagick:encoder_tiff64_fuzzer: Heap-buffer-overflow in PushLongPixel

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5737439391121408 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encodertiff64fuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type: Heap-buffer-overflow READ 1...