Ubuntu: Security Advisory (USN-4403-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-4403-1: Mutt vulnerability and regression

It was discovered that Mutt incorrectly handled certain requests. An attacker could possibly use this issue to enable MITM attacks. CVE-2020-14954 This update also address a regression caused in the last update USN-4401-1. It only affected Ubuntu 12.04 ESM, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS and...

USN-4403-1 mutt vulnerability and regression

It was discovered that Mutt incorrectly handled certain requests. An attacker could possibly use this issue to enable MITM attacks. CVE-2020-14954 This update also address a regression caused in the last update USN-4401-1. It only affected Ubuntu 12.04 ESM, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS and...

ndpi:fuzz_ndpi_reader: Heap-use-after-free in check_content_type_and_change_protocol

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5161200102146048 Project: ndpi Fuzzing Engine: libFuzzer Fuzz Target: fuzzndpireader Job Type: libfuzzerasanndpi Platform Id: linux Crash Type: Heap-use-after-free READ 2 Crash Address: 0x62b0000102df Cra...

git:fuzz-commit-graph: Crash in parse_commit_graph

Detailed Report: https://oss-fuzz.com/testcase?key=5174251396268032 Project: git Fuzzing Engine: honggfuzz Fuzz Target: fuzz-commit-graph Job Type: honggfuzzasangit Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7fffe173e000 Crash State: parsecommitgraph fuzz-commit-graph.c...

Remote Code Execution

docker is vulnerable to remote code execution. The vulnerability exists due to a security regression of CVE-2019-5736 due to inclusion of vulnerable runc...

RHEL 7 : docker (RHSA-2020:2653)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:2653 advisory. Docker is an open-source engine that automates the deployment of any application as a lightweight, portable, self-sufficient container that...

USN-3911-2: file regression | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 16.04 Canonical Ubuntu 18.04 Description USN-3911-1 fixed vulnerabilities in file. One of the backported security fixes introduced a regression that caused the interpreter string to be truncated. This update fixes the...

llvm:clang-fuzzer: Segv on unknown address in clang::Expr::skipRValueSubobjectAdjustments

Detailed Report: https://oss-fuzz.com/testcase?key=4893097812295680 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-fuzzer Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: clang::Expr::skipRValueSubobjectAdjustments...

docker: Security regression of CVE-2016-9962 due to inclusion of vulnerable runc

The version of docker as released for Red Hat Enterprise Linux 7 Extras via RHBA-2020:0053 advisory included an incorrect version of runc missing the fix for CVE-2016-9962, which was previously fixed via RHSA-2017:0116. This issue could allow a malicious or compromised container to compromise the...

open62541:fuzz_tcp_message: Stack-use-after-scope with empty stacktrace

Project: https://github.com/open62541/open62541.git Detailed Report: https://oss-fuzz.com/testcase?key=5733005242138624 Project: open62541 Fuzzing Engine: libFuzzer Fuzz Target: fuzztcpmessage Job Type: libfuzzerasanopen62541 Platform Id: linux Crash Type: Stack-use-after-scope WRITE 2 Crash...

haproxy:fuzz_cfg_parser: Heap-buffer-overflow in readcfgfile

Project: https://github.com/haproxy/haproxy.git Detailed Report: https://oss-fuzz.com/testcase?key=5702089866215424 Project: haproxy Fuzzing Engine: libFuzzer Fuzz Target: fuzzcfgparser Job Type: libfuzzerasanhaproxy Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address:...

USN-4385-2: Intel Microcode regression | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 14.04 Canonical Ubuntu 16.04 Description USN-4385-1 provided updated Intel Processor Microcode. Unfortunately, that update prevented certain processors in the Intel Skylake family 064EH from booting successfully...

quickjs:fuzz_compile: Heap-buffer-overflow in js_free_function_def

Detailed Report: https://oss-fuzz.com/testcase?key=4906679195140096 Project: quickjs Fuzzing Engine: afl Fuzz Target: fuzzcompile Job Type: aflasanquickjs Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x7ff14d48563b Crash State: jsfreefunctiondef jscreatefunction...

json-c:tokener_parse_ex_fuzzer: Global-buffer-overflow in json_tokener_parse_ex

Project: https://github.com/json-c/json-c.git Detailed Report: https://oss-fuzz.com/testcase?key=6193200317595648 Project: json-c Fuzzing Engine: libFuzzer Fuzz Target: tokenerparseexfuzzer Job Type: libfuzzerasani386json-c Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Addres...

imagemagick:encoder_heic_fuzzer: Use-of-uninitialized-value in void intra_prediction_angular<unsigned char>

Detailed Report: https://oss-fuzz.com/testcase?key=4861157222645760 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: void intrapredictionangular vo...

opus:opus_decode_fuzzer_fixed: Use-of-uninitialized-value in celt_decode_lost

Project: https://gitlab.xiph.org/xiph/opus.git Detailed Report: https://oss-fuzz.com/testcase?key=6387771504852992 Project: opus Fuzzing Engine: libFuzzer Fuzz Target: opusdecodefuzzerfixed Job Type: libfuzzermsanopus Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

cras:rclient_message: Heap-buffer-overflow in cras_channel_remix_conv_create

Detailed Report: https://oss-fuzz.com/testcase?key=5362336956416000 Project: cras Fuzzing Engine: libFuzzer Fuzz Target: rclientmessage Job Type: libfuzzerasancras Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x603000000598 Crash State: craschannelremixconvcreate...

xpdf:fuzz_pdfload: Segv on unknown address in GList::getLength

Detailed Report: https://oss-fuzz.com/testcase?key=5670951261044736 Project: xpdf Fuzzing Engine: honggfuzz Fuzz Target: fuzzpdfload Job Type: honggfuzzasanxpdf Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: GList::getLength Catalog::Catalog PDFDoc::setup2...

Updated gnutls packages fix security vulnerability

Updated gnutls packages fix security vulnerability: It was found that GnuTLS 3.6.4 introduced a regression in the TLS protocol implementation. This caused the TLS server to not securely construct a session ticket encryption key considering the application supplied secret, allowing a MitM attacker...