llvm:clang-fuzzer: Segv on unknown address in clang::Sema::ActOnCapScopeReturnStmt

Detailed Report: https://oss-fuzz.com/testcase?key=5675708116631552 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-fuzzer Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: clang::Sema::ActOnCapScopeReturnStmt...

imagemagick:encoder_heic_fuzzer: Heap-buffer-overflow in void mc_chroma<unsigned short>

Detailed Report: https://oss-fuzz.com/testcase?key=5764648198733824 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address: 0x62b00001b63c Crash State: void mcchroma...

imagemagick:encoder_plasma_fuzzer: Use-of-uninitialized-value in RoundToUnity

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5734463269240832 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderplasmafuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value...

gnutls:gnutls_pkcs12_key_parser_fuzzer: Global-buffer-overflow in _nettle_sec_tabselect

Project: https://gitlab.com/gnutls/gnutls.git Detailed Report: https://oss-fuzz.com/testcase?key=5143428189126656 Project: gnutls Fuzzing Engine: libFuzzer Fuzz Target: gnutlspkcs12keyparserfuzzer Job Type: libfuzzerasangnutls Platform Id: linux Crash Type: Global-buffer-overflow READ 8 Crash...

qpdf:qpdf_fuzzer: Use-of-uninitialized-value in QPDFTokenizer::isSpace

Project: https://github.com/qpdf/qpdf.git Detailed Report: https://oss-fuzz.com/testcase?key=5684680336867328 Project: qpdf Fuzzing Engine: libFuzzer Fuzz Target: qpdffuzzer Job Type: libfuzzermsanqpdf Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

hostap:x509: Heap-buffer-overflow in asn1_get_next

Project: git://w1.fi/srv/git/hostap.git Detailed Report: https://oss-fuzz.com/testcase?key=5629679052783616 Project: hostap Fuzzing Engine: libFuzzer Fuzz Target: x509 Job Type: libfuzzerasani386hostap Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0xf2b03ddd Crash Stat...

wabt:wasm2wat_fuzzer: Object-size in std::__1::vector<wabt::DataSegment*, std::__1::allocator<wabt::DataSegment*> >::

Project: https://github.com/WebAssembly/wabt.git Detailed Report: https://oss-fuzz.com/testcase?key=6001483432853504 Project: wabt Fuzzing Engine: libFuzzer Fuzz Target: wasm2watfuzzer Job Type: libfuzzerubsanwabt Platform Id: linux Crash Type: Object-size Crash Address: Crash State: std::1::vect...

wabt:wasm2wat_fuzzer: Crash in wabt::BinaryReaderIR::OnFunctionSymbol

Project: https://github.com/WebAssembly/wabt.git Detailed Report: https://oss-fuzz.com/testcase?key=5204783407562752 Project: wabt Fuzzing Engine: libFuzzer Fuzz Target: wasm2watfuzzer Job Type: libfuzzerasani386wabt Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x017f0dfc Crash Stat...

hostap:x509: Heap-buffer-overflow in asn1_parse_oid

Project: git://w1.fi/srv/git/hostap.git Detailed Report: https://oss-fuzz.com/testcase?key=5687143836155904 Project: hostap Fuzzing Engine: libFuzzer Fuzz Target: x509 Job Type: libfuzzerasani386hostap Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0xf2b03ddd Crash Stat...

firefox:CompositorManagerParentIPC: Crash in mozilla::layers::TextureReadLock::AddRef

Detailed Report: https://oss-fuzz.com/testcase?key=5692629583134720 Project: firefox Fuzzing Engine: libFuzzer Fuzz Target: CompositorManagerParentIPC Job Type: libfuzzerasanfirefox Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x21807fff8001 Crash State:...

graphicsmagick:enhance_fuzzer: Unknown signal in UnpackWPG2Raster

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=5642427790786560 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: enhancefuzzer Job Type: libfuzzerubsangraphicsmagick Platform Id: linux Crash Type: Unknown signal Crash Address:...

php:php-fuzz-mbstring: Heap-use-after-free in check_called_node_in_look_behind

Detailed Report: https://oss-fuzz.com/testcase?key=5734839508795392 Project: php Fuzzing Engine: honggfuzz Fuzz Target: php-fuzz-mbstring Job Type: honggfuzzasanphp Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x6070081cdd40 Crash State: checkcallednodeinlookbehind...

jbig2dec:jbig2_fuzzer: Heap-buffer-overflow in template_image_compose_opt

Project: git://git.ghostscript.com/jbig2dec.git Detailed Report: https://oss-fuzz.com/testcase?key=5647271708590080 Project: jbig2dec Fuzzing Engine: libFuzzer Fuzz Target: jbig2fuzzer Job Type: libfuzzerasanjbig2dec Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address:...

harfbuzz:hb-subset-fuzzer: Global-buffer-overflow in hb_array_t<OT::IntType<unsigned char, 1u> const> hb_array_t<OT::IntType<unsigned

Project: https://github.com/harfbuzz/harfbuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=5747280156295168 Project: harfbuzz Fuzzing Engine: afl Fuzz Target: hb-subset-fuzzer Job Type: aflasanharfbuzz Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash Address:...

php:php-fuzz-mbstring: Heap-use-after-free in quantifiers_memory_node_info

Detailed Report: https://oss-fuzz.com/testcase?key=5672130576646144 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-mbstring Job Type: libfuzzerasani386php Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0xf5239f80 Crash State: quantifiersmemorynodeinfo...

arrow:arrow-ipc-stream-fuzz: Crash in arrow::ipc::internal::FieldFromFlatbuffer

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=5185274653179904 Project: arrow Fuzzing Engine: afl Fuzz Target: arrow-ipc-stream-fuzz Job Type: aflasanarrow Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x61c100f9e0b8 Crash State:...

unbound:fuzz_1_fuzzer: Heap-buffer-overflow in dname_pkt_compare

Project: https://github.com/NLnetLabs/unbound.git Detailed Report: https://oss-fuzz.com/testcase?key=6316796672212992 Project: unbound Fuzzing Engine: libFuzzer Fuzz Target: fuzz1fuzzer Job Type: libfuzzerasanunbound Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

Huawei EulerOS: Security Advisory for python (EulerOS-SA-2019-1934)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 16.04 LTS / 18.04 LTS : python-apt regression (USN-4247-2)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4247-2 advisory. USN-4247-1 fixed vulnerabilities in python-apt. The updated packages caused a regression when attempting to upgrade to a new Ubuntu release. This upda...

USN-4247-2 python-apt regression

USN-4247-1 fixed vulnerabilities in python-apt. The updated packages caused a regression when attempting to upgrade to a new Ubuntu release. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that python-apt would still use MD5 hashes t...