PT-2020-22123

Name of the Vulnerable Software and Affected Versions solidity affected versions not specified Description The issue is related to a stack-use-after-return crash in the solidity software. The crash occurs in the solidity::smtutil::CHCSmtLib2Interface::querySolver function, which is called by...

solidity:solc_noopt_ossfuzz: Stack-use-after-return in solidity::smtutil::CHCSmtLib2Interface::querySolver

Project: https://github.com/ethereum/solidity.git Detailed Report: https://oss-fuzz.com/testcase?key=5750916210491392 Project: solidity Fuzzing Engine: afl Fuzz Target: solcnooptossfuzz Job Type: aflasansolidity Platform Id: linux Crash Type: Stack-use-after-return READ 8 Crash Address:...

Amazon Linux 2 : tigervnc (ALAS-2020-1552)

The version of tigervnc installed on the remote host is prior to 1.8.0-21. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2020-1552 advisory. TigerVNC version prior to 1.10.1 is vulnerable to stack use-after-return, which occurs due to incorrect usage of stack...

Scientific Linux Security Update : tigervnc on SL7.x x86_64 (20201001)

Security Fixes : - tigervnc: Stack use-after-return due to incorrect usage of stack memory in ZRLEDecoder CVE-2019-15691 - tigervnc: Heap buffer overflow triggered from CopyRectDecoder due to incorrect value checks CVE-2019-15692 - tigervnc: Heap buffer overflow in TightDecoder::FilterGradient...

CentOS 7 : tigervnc (RHSA-2020:3875)

The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:3875 advisory. - TigerVNC version prior to 1.10.1 is vulnerable to stack use-after-return, which occurs due to incorrect usage of stack memory in ZRLEDecoder. If...

Stack Use-after-return

tigervnc is vulnerable to stack use-after-return. It is triggered due to incorrect usage of stack memory in ZRLEDecoder. If decoding routine would throw an exception, ZRLEDecoder may try to access stack variable, which has been already freed during the process of stack unwinding...

tigervnc: Stack use-after-return due to incorrect usage of stack memory in ZRLEDecoder

TigerVNC version prior to 1.10.1 is vulnerable to stack use-after-return, which occurs due to incorrect usage of stack memory in ZRLEDecoder. If decoding routine would throw an exception, ZRLEDecoder may try to access stack variable, which has been already freed during the process of stack...

RHEL 7 : tigervnc (RHSA-2020:3875)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:3875 advisory. Virtual Network Computing VNC is a remote display system which allows users to view a computing desktop environment not only on the machine...

OSV-2020-1749 Stack-use-after-return in ucl_include_file_single

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25622 Crash type: Stack-use-after-return READ 6 Crash state: uclincludefilesingle uclincludefile uclincludecommon...

libucl:ucl_add_string_fuzzer: Stack-use-after-return in ucl_include_file_single

Detailed Report: https://oss-fuzz.com/testcase?key=5703828262092800 Project: libucl Fuzzing Engine: libFuzzer Fuzz Target: ucladdstringfuzzer Job Type: libfuzzerasanlibucl Platform Id: linux Crash Type: Stack-use-after-return READ 6 Crash Address: 0x7fd1ac9fc8e6 Crash State: uclincludefilesingle...

nginx:http_request_fuzzer: Stack-use-after-return in ngx_rbtree_insert_timer_value

Detailed Report: https://oss-fuzz.com/testcase?key=5092575764283392 Project: nginx Fuzzing Engine: libFuzzer Fuzz Target: httprequestfuzzer Job Type: libfuzzerasannginx Platform Id: linux Crash Type: Stack-use-after-return READ 8 Crash Address: 0x7f0bfc089ae8 Crash State: ngxrbtreeinserttimervalu...

EulerOS 2.0 SP8 : tigervnc (EulerOS-SA-2020-1885)

According to the versions of the tigervnc packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - TigerVNC version prior to 1.10.1 is vulnerable to stack use-after-return, which occurs due to incorrect usage of stack memory in ZRLEDecoder. ...

OSV-2020-1010 Stack-use-after-return in ihevcd_process_thread

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16912 Crash type: Stack-use-after-return READ 8 Crash state: ihevcdprocessthread startthread...

PT-2020-21645

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type of Stack-use-after-return READ 8. The crash state involves the ihevcd process thread and start thread functions. No...

OSV-2020-885 Stack-use-after-scope in coolkey_apdu_io

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23979 Crash type: Stack-use-after-scope READ 8 Crash state: coolkeyapduio coolkeyrsaop coolkeycomputecrypt...

PT-2020-22613

Name of the Vulnerable Software and Affected Versions CoolKey affected versions not specified Description The issue is related to a stack-use-after-scope READ 8 crash type. The crash state involves functions such as coolkey apdu io, coolkey rsa op, and coolkey compute crypt. Recommendations At th...

opensc:fuzz_pkcs15_reader: Stack-use-after-scope in coolkey_apdu_io

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=6578720056541184 Project: opensc Fuzzing Engine: libFuzzer Fuzz Target: fuzzpkcs15reader Job Type: libfuzzerasanopensc Platform Id: linux Crash Type: Stack-use-after-scope READ 8 Crash Address:...

OSV-2020-642 Stack-use-after-return in sdb_itoa

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12751 Crash type: Stack-use-after-return WRITE 1 Crash state: sdbitoa parseresourcedirectory parseresourcedirectory...

OSV-2020-631 Stack-use-after-return in ihevcd_process_thread

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17500 Crash type: Stack-use-after-return READ 8 Crash state: ihevcdprocessthread startthread...

OSV-2020-430 Stack-use-after-return in OSSL_PARAM_get_int32

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15114 Crash type: Stack-use-after-return READ 4 Crash state: OSSLPARAMgetint32 md5sha1setparams ssl3finalfinishmac...