kimageformats:kimgio_xcf_fuzzer: Use-of-uninitialized-value in RGBTOHLS

Project: git://anongit.kde.org/kimageformats Detailed Report: https://oss-fuzz.com/testcase?key=5918121289580544 Project: kimageformats Fuzzing Engine: libFuzzer Fuzz Target: kimgioxcffuzzer Job Type: libfuzzermsankimageformats Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

systemd:fuzz-netdev-parser: Use-of-uninitialized-value in l2tp_session_free

Project: https://github.com/systemd/systemd.git Detailed Report: https://oss-fuzz.com/testcase?key=5757581015646208 Project: systemd Fuzzing Engine: libFuzzer Fuzz Target: fuzz-netdev-parser Job Type: libfuzzermsansystemd Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

radare2:ia_fuzz: Segv on unknown address in pvector_free_elem

Project: https://github.com/radare/radare2.git Detailed Report: https://oss-fuzz.com/testcase?key=4916198700744704 Project: radare2 Fuzzing Engine: libFuzzer Fuzz Target: iafuzz Job Type: libfuzzerasanradare2 Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State:...

gdal:lvbag_fuzzer: Crash in [heap]

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=5267766755196928 Project: gdal Fuzzing Engine: libFuzzer Fuzz Target: lvbagfuzzer Job Type: libfuzzerubsangdal Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00000cf60484 Crash State: heap...

Ubuntu 18.04 LTS : Linux kernel regression (USN-4369-2)

The remote Ubuntu 18.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-4369-2 advisory. USN-4369-1 fixed vulnerabilities in the 5.3 Linux kernel. Unfortunately, that update introduced a regression in overlayfs. This update corrects the problem. We...

Ubuntu 20.04 LTS : Linux kernel regression (USN-4367-2)

The remote Ubuntu 20.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-4367-2 advisory. USN-4367-1 fixed vulnerabilities in the 5.4 Linux kernel. Unfortunately, that update introduced a regression in overlayfs. This update corrects the problem. We...

Ubuntu: Security Advisory (USN-4369-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-4367-2: Linux kernel regression

USN-4367-1 fixed vulnerabilities in the 5.4 Linux kernel. Unfortunately, that update introduced a regression in overlayfs. This update corrects the problem. We apologize for the inconvenience. Original advisory details: It was discovered that the btrfs implementation in the Linux kernel did not...

USN-4367-2 linux regression

USN-4367-1 fixed vulnerabilities in the 5.4 Linux kernel. Unfortunately, that update introduced a regression in overlayfs. This update corrects the problem. We apologize for the inconvenience. Original advisory details: It was discovered that the btrfs implementation in the Linux kernel did not...

USN-4369-2: Linux kernel regression

USN-4369-1 fixed vulnerabilities in the 5.3 Linux kernel. Unfortunately, that update introduced a regression in overlayfs. This update corrects the problem. We apologize for the inconvenience. Original advisory details: It was discovered that the btrfs implementation in the Linux kernel did not...

USN-4369-2 linux, linux-raspi2, linux-raspi2-5.3 regression

USN-4369-1 fixed vulnerabilities in the 5.3 Linux kernel. Unfortunately, that update introduced a regression in overlayfs. This update corrects the problem. We apologize for the inconvenience. Original advisory details: It was discovered that the btrfs implementation in the Linux kernel did not...

libspng:spng_read_fuzzer: Use-of-uninitialized-value in check_exif

Detailed Report: https://oss-fuzz.com/testcase?key=5644543818203136 Project: libspng Fuzzing Engine: libFuzzer Fuzz Target: spngreadfuzzer Job Type: libfuzzermsanlibspng Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: checkexif readnonidatchunks readchunks...

ffmpeg:ffmpeg_AV_CODEC_ID_WAVPACK_fuzzer: Heap-buffer-overflow in wavpack_decode_block

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5678686190960640 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDWAVPACKfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address:...

ffmpeg:ffmpeg_DEMUXER_fuzzer: Heap-buffer-overflow in av_parse_ratio

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5121369624018944 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegDEMUXERfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address:...

imagemagick:encoder_heic_fuzzer: Heap-buffer-overflow in void mc_chroma<unsigned short>

Detailed Report: https://oss-fuzz.com/testcase?key=5675757090373632 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address: 0x63000002e510 Crash State: void mcchroma...

ndpi:fuzz_ndpi_reader: Segv on unknown address in ndpi_strdup

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5174391532158976 Project: ndpi Fuzzing Engine: libFuzzer Fuzz Target: fuzzndpireader Job Type: libfuzzermsanndpi Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: ndpistrd...

quickjs:fuzz_eval: Stack-buffer-overflow in get_class_atom

Project: https://github.com/horhof/quickjs.git https://github.com/bellard/quickjs.git Detailed Report: https://oss-fuzz.com/testcase?key=5071407886368768 Project: quickjs Fuzzing Engine: afl Fuzz Target: fuzzeval Job Type: aflasanquickjs Platform Id: linux Crash Type: Stack-buffer-overflow WRITE ...

opensc:fuzz_pkcs15_reader: Heap-buffer-overflow in auth_read_binary

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=5666689944649728 Project: opensc Fuzzing Engine: honggfuzz Fuzz Target: fuzzpkcs15reader Job Type: honggfuzzasanopensc Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address:...

libspng:spng_read_fuzzer: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5105724534554624 Project: libspng Fuzzing Engine: libFuzzer Fuzz Target: spngreadfuzzer Job Type: libfuzzermsanlibspng Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: memory MSAN Crash Revision:...

stb:stbi_read_fuzzer: Heap-buffer-overflow in stbi__tga_load

Project: https://github.com/nothings/stb.git Detailed Report: https://oss-fuzz.com/testcase?key=5114711032201216 Project: stb Fuzzing Engine: afl Fuzz Target: stbireadfuzzer Job Type: aflasanstb Platform Id: linux Crash Type: Heap-buffer-overflow READ 3 Crash Address: 0x602000000091 Crash State:...