USN-3477-2: Firefox regression

USN-3477-1 fixed vulnerabilities in Firefox. The update caused search suggestions to not be displayed when performing Google searches from the search bar. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Multiple security issues were discovered in...

librawspeed/LJpegDecompressorFuzzer: Use-after-poison in rawspeed::unroll_loop_t<void rawspeed::LJpegDecompressor::decodeN<4>

Project: https://github.com/darktable-org/rawspeed.git Detailed report: https://oss-fuzz.com/testcase?key=6127728576167936 Project: librawspeed Fuzzer: afllibrawspeedLJpegDecompressorFuzzer Fuzz target binary: LJpegDecompressorFuzzer Job Type: aflasanlibrawspeed Platform Id: linux Crash Type:...

gdal/dxf_fuzzer: Stack-buffer-overflow in ACTextUnescape

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5360945514676224 Project: gdal Fuzzer: libFuzzergdaldxffuzzer Fuzz target binary: dxffuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address:...

unrar/unrar_fuzzer: Use-of-uninitialized-value in IsRelativeSymlinkSafe

Project: https://github.com/aawc/unrar.git Detailed report: https://oss-fuzz.com/testcase?key=5604229642190848 Project: unrar Fuzzer: libFuzzerunrarfuzzer Fuzz target binary: unrarfuzzer Job Type: libfuzzermsanunrar Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

libreoffice/xlsfuzzer: Heap-buffer-overflow in ScCompressedArray<short, unsigned short>::Iterator::operator++

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=6716895815270400 Project: libreoffice Fuzzer: libFuzzerlibreofficexlsfuzzer Fuzz target binary: xlsfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-buffer-overfl...

file/magic_fuzzer: Crash in file_getbuffer

Project: https://github.com/file/file.git Detailed report: https://oss-fuzz.com/testcase?key=6270230222340096 Project: file Fuzzer: libFuzzerfilemagicfuzzer Fuzz target binary: magicfuzzer Job Type: libfuzzermsanfile Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x708000010000 Crash...

yara/macho_fuzzer: Heap-buffer-overflow in macho_handle_segment_64_be

Project: https://github.com/VirusTotal/yara.git Detailed report: https://oss-fuzz.com/testcase?key=5917108346028032 Project: yara Fuzzer: libFuzzeryaramachofuzzer Fuzz target binary: machofuzzer Job Type: libfuzzerasanyara Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address:...

file/magic_fuzzer: Crash in __msan_memcpy.part.49

Project: https://github.com/file/file.git Detailed report: https://oss-fuzz.com/testcase?key=5553220060446720 Project: file Fuzzer: libFuzzerfilemagicfuzzer Fuzz target binary: magicfuzzer Job Type: libfuzzermsanfile Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x70210000000a Crash...

yara/macho_fuzzer: Use-of-uninitialized-value in macho_parse_file_32_be

Project: https://github.com/VirusTotal/yara.git Detailed report: https://oss-fuzz.com/testcase?key=5168348309487616 Project: yara Fuzzer: libFuzzeryaramachofuzzer Fuzz target binary: machofuzzer Job Type: libfuzzermsanyara Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

unrar/unrar_fuzzer: Heap-buffer-overflow in Unpack::CopyString

Project: https://github.com/aawc/unrar.git Detailed report: https://oss-fuzz.com/testcase?key=6224876978307072 Project: unrar Fuzzer: libFuzzerunrarfuzzer Fuzz target binary: unrarfuzzer Job Type: libfuzzerasanunrar Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address:...

Ubuntu 16.04 LTS : Apport regressions (USN-3480-2)

The remote Ubuntu 16.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3480-2 advisory. USN-3480-1 fixed vulnerabilities in Apport. The fix for CVE-2017-14177 introduced a regression in the ability to handle crashes for users that configured their...

Ubuntu: Security Advisory (USN-3480-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-3480-2 apport regressions

USN-3480-1 fixed vulnerabilities in Apport. The fix for CVE-2017-14177 introduced a regression in the ability to handle crashes for users that configured their systems to use the Upstart init system in Ubuntu 16.04 LTS and Ubuntu 17.04. The fix for CVE-2017-14180 temporarily disabled crash...

USN-3480-2: Apport regressions

USN-3480-1 fixed vulnerabilities in Apport. The fix for CVE-2017-14177 introduced a regression in the ability to handle crashes for users that configured their systems to use the Upstart init system in Ubuntu 16.04 LTS and Ubuntu 17.04. The fix for CVE-2017-14180 temporarily disabled crash...

unrar/unrar_fuzzer: Use-of-uninitialized-value in wcsncatz

Project: https://github.com/aawc/unrar.git Detailed report: https://oss-fuzz.com/testcase?key=5673561487310848 Project: unrar Fuzzer: libFuzzerunrarfuzzer Fuzz target binary: unrarfuzzer Job Type: libfuzzermsanunrar Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

open62541/fuzz_binary_decode: Heap-use-after-free in UA_Array_copy

Project: https://github.com/open62541/open62541.git Detailed report: https://oss-fuzz.com/testcase?key=4845806130561024 Project: open62541 Fuzzer: libFuzzeropen62541fuzzbinarydecode Fuzz target binary: fuzzbinarydecode Job Type: libfuzzerasanopen62541 Platform Id: linux Crash Type:...

open62541/fuzz_binary_message: Heap-double-free in ExtensionObject_deleteMembers

Project: https://github.com/open62541/open62541.git Detailed report: https://oss-fuzz.com/testcase?key=6162245819039744 Project: open62541 Fuzzer: libFuzzeropen62541fuzzbinarymessage Fuzz target binary: fuzzbinarymessage Job Type: libfuzzerasanopen62541 Platform Id: linux Crash Type:...

gdal/gdal_fuzzer: Crash in gbits

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=4963944708964352 Project: gdal Fuzzer: libFuzzergdalfuzzer Fuzz target binary: gdalfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x62cff0519cda Crash State...

unrar/unrar_fuzzer: Use-of-uninitialized-value in ExtractUnixLink30

Project: https://github.com/aawc/unrar.git Detailed report: https://oss-fuzz.com/testcase?key=6412241369825280 Project: unrar Fuzzer: libFuzzerunrarfuzzer Fuzz target binary: unrarfuzzer Job Type: libfuzzermsanunrar Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

unrar/unrar_fuzzer: Use-of-uninitialized-value in IsRelativeSymlinkSafe

Project: https://github.com/aawc/unrar.git Detailed report: https://oss-fuzz.com/testcase?key=4800962913894400 Project: unrar Fuzzer: libFuzzerunrarfuzzer Fuzz target binary: unrarfuzzer Job Type: libfuzzermsanunrar Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...