gdal/cad_fuzzer: Crash in std::__1::to_string

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5640476095938560 Project: gdal Fuzzer: libFuzzergdalcadfuzzer Fuzz target binary: cadfuzzer Job Type: libfuzzerubsangdal Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x0f80000ff414 Crash...

llvm/llvm-special-case-list-fuzzer: Heap-buffer-overflow in p_ere

Detailed report: https://oss-fuzz.com/testcase?key=6496293208719360 Project: llvm Fuzzer: libFuzzerllvmllvm-special-case-list-fuzzer Fuzz target binary: llvm-special-case-list-fuzzer Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x6140000009...

gdal/cad_fuzzer: Stack-use-after-return in void SwapEndianness<long&, unsigned long>

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5152401112694784 Project: gdal Fuzzer: libFuzzergdalcadfuzzer Fuzz target binary: cadfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Stack-use-after-return READ 1 Crash Address:...

yara/rules_fuzzer: Heap-double-free in yara_yyparse

Project: https://github.com/VirusTotal/yara.git Detailed report: https://oss-fuzz.com/testcase?key=6474914958671872 Project: yara Fuzzer: libFuzzeryararulesfuzzer Fuzz target binary: rulesfuzzer Job Type: libfuzzerasanyara Platform Id: linux Crash Type: Heap-double-free Crash Address:...

Debian DLA-1166-2 : tomcat7 regression update

The update for tomcat7 issued as DLA-1166-1 caused a regressions whereby every request, including for the root document /, returned HTTP status 404. Updated packages are now available to address this problem. For reference, the original advisory text follows. When HTTP PUT was enabled e.g., via...

chakra: Dynamic-stack-buffer-overflow in Js::JavascriptArray::NewInstance

Project: https://github.com/Microsoft/ChakraCore.git Detailed report: https://oss-fuzz.com/testcase?key=6106023170408448 Project: chakra Fuzzer: jsfuzzer Job Type: asanchakra Platform Id: linux Crash Type: Dynamic-stack-buffer-overflow READ 8 Crash Address: 0x7ffd13bb0260 Crash State:...

harfbuzz/hb-fuzzer: Use-of-uninitialized-value in hb_buffer_t::_unsafe_to_break_set_mask

Project: https://github.com/harfbuzz/harfbuzz.git Detailed report: https://oss-fuzz.com/testcase?key=6210176798425088 Project: harfbuzz Fuzzer: libFuzzerharfbuzzhb-fuzzer Fuzz target binary: hb-fuzzer Job Type: libfuzzermsanharfbuzz Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

open62541/fuzz_binary_message: Heap-use-after-free in UA_Subscription_answerPublishRequestsNoSubscription

Project: https://github.com/open62541/open62541.git Detailed report: https://oss-fuzz.com/testcase?key=5179189410922496 Project: open62541 Fuzzer: libFuzzeropen62541fuzzbinarymessage Fuzz target binary: fuzzbinarymessage Job Type: libfuzzerasanopen62541 Platform Id: linux Crash Type:...

chakra: Crash in Memory::RecyclerWriteBarrierManager::WriteBarrier

Detailed report: https://oss-fuzz.com/testcase?key=4792234600824832 Project: chakra Fuzzer: jsfuzzer Job Type: asanchakra Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x7f1ab4666000 Crash State: Memory::RecyclerWriteBarrierManager::WriteBarrier int...

harfbuzz/hb-fuzzer: Global-buffer-overflow in OT::BEInt<short, 2>::operator short

Project: https://github.com/harfbuzz/harfbuzz.git Detailed report: https://oss-fuzz.com/testcase?key=4595692015190016 Project: harfbuzz Fuzzer: libFuzzerharfbuzzhb-fuzzer Fuzz target binary: hb-fuzzer Job Type: libfuzzerasanharfbuzz Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Cra...

chakra: Crash in Js::JavascriptObject::CreateKeysHelper

Detailed report: https://oss-fuzz.com/testcase?key=5635112487092224 Project: chakra Fuzzer: jsfuzzer Job Type: asanchakra Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00072005a007 Crash State: Js::JavascriptObject::CreateKeysHelper Js::JavascriptOperators::GetOwnPropertyNames...

gdal/gdal_translate_fuzzer: Heap-buffer-overflow in CPLErr GDALResampleChunk32R_ConvolutionT<float, false>

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5641758948982784 Project: gdal Fuzzer: libFuzzergdaltranslatefuzzer Fuzz target binary: gdaltranslatefuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 8 Crash...

gdal/gdal_translate_fuzzer: Global-buffer-overflow in GDALResampleChunk32R_Gauss

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=4894972097593344 Project: gdal Fuzzer: libFuzzergdaltranslatefuzzer Fuzz target binary: gdaltranslatefuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash...

gdal/ogr_fuzzer: Heap-buffer-overflow in VSIArchiveFilesystemHandler::SplitFilename

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=4744117495005184 Project: gdal Fuzzer: libFuzzergdalogrfuzzer Fuzz target binary: ogrfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

gstreamer/typefind: Heap-buffer-overflow in pnm_type_find

Project: https://anongit.freedesktop.org/git/gstreamer/gstreamer Detailed report: https://oss-fuzz.com/testcase?key=6192837663129600 Project: gstreamer Fuzzer: libFuzzergstreamertypefind Fuzz target binary: typefind Job Type: libfuzzerasangstreamer Platform Id: linux Crash Type:...

gstreamer/gst-discoverer: Heap-buffer-overflow in webvtt_type_find

Project: https://anongit.freedesktop.org/git/gstreamer/gstreamer Detailed report: https://oss-fuzz.com/testcase?key=6349101273710592 Project: gstreamer Fuzzer: libFuzzergstreamergst-discoverer Fuzz target binary: gst-discoverer Job Type: libfuzzerasangstreamer Platform Id: linux Crash Type:...

Medium: httpd

Issue Overview: Hash character matches all IPs: A regression was found in httpd, causing comments in the "Allow" and "Deny" configuration lines to be parsed incorrectly. A web administrator could unintentionally allow any client to access a restricted HTTP resource. CVE-2017-12171 Affected...

tor/oss-fuzz-vrs: Use-of-uninitialized-value in tor_vsscanf

Project: https://git.torproject.org/tor.git Detailed report: https://oss-fuzz.com/testcase?key=5851887808020480 Project: tor Fuzzer: libFuzzertoross-fuzz-vrs Fuzz target binary: oss-fuzz-vrs Job Type: libfuzzermsantor Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

gstreamer/gst-discoverer: Stack-buffer-overflow in vorbis_handle_identification_packet

Project: https://anongit.freedesktop.org/git/gstreamer/gstreamer Detailed report: https://oss-fuzz.com/testcase?key=6419900319924224 Project: gstreamer Fuzzer: libFuzzergstreamergst-discoverer Fuzz target binary: gst-discoverer Job Type: libfuzzerasangstreamer Platform Id: linux Crash Type:...

proj4/standard_fuzzer: Crash in nad_intr

Detailed report: https://oss-fuzz.com/testcase?key=5727785197764608 Project: proj4 Fuzzer: libFuzzerproj4standardfuzzer Fuzz target binary: standardfuzzer Job Type: libfuzzerubsanproj4 Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0000000350c8 Crash State: nadintr nadcvt...