5746 matches found
imagemagick/ping_sfw_fuzzer: Use-of-uninitialized-value in LocaleNCompare
Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5639053183025152 Project: imagemagick Fuzzer: libFuzzerimagemagickpingsfwfuzzer Fuzz target binary: pingsfwfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...
freeimage/load_from_memory_fuzzer: Heap-buffer-overflow in _MemoryReadProc
Detailed report: https://oss-fuzz.com/testcase?key=5088386304442368 Project: freeimage Fuzzer: aflfreeimageloadfrommemoryfuzzer Fuzz target binary: loadfrommemoryfuzzer Job Type: aflasanfreeimage Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 6 Crash Address: 0x6140000001f8 Crash State...
jsonnet/convert_jsonnet_fuzzer: Crash in Interpreter::evaluate
Project: https://github.com/google/jsonnet.git Detailed report: https://oss-fuzz.com/testcase?key=5706027058593792 Project: jsonnet Fuzzer: libFuzzerjsonnetconvertjsonnetfuzzer Fuzz target binary: convertjsonnetfuzzer Job Type: libfuzzerubsanjsonnet Platform Id: linux Crash Type: UNKNOWN READ Cra...
libxslt/xslt: Use-of-uninitialized-value in xmlOutputBufferWriteEscape
Project: https://gitlab.gnome.org/GNOME/libxslt.git Detailed report: https://oss-fuzz.com/testcase?key=5760846728265728 Project: libxslt Fuzzer: libFuzzerlibxsltxslt Fuzz target binary: xslt Job Type: libfuzzermsanlibxslt Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...
Virtuozzo Linux Errata and Security Advisory 2019:1763 Critical
Upstream security update. Follow RHSA-2019:1763 for details...
qpdf/qpdf_fuzzer: Use-of-uninitialized-value in deflate_slow
Project: https://github.com/qpdf/qpdf.git Detailed report: https://oss-fuzz.com/testcase?key=5710136049401856 Project: qpdf Fuzzer: libFuzzerqpdffuzzer Fuzz target binary: qpdffuzzer Job Type: libfuzzermsanqpdf Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...
Virtuozzo Linux Errata and Security Advisory 2019:1726 Important
Upstream security update. Follow RHSA-2019:1726 for details...
CVE-2017-7189
main/streams/xpsocket.c in PHP 7.x before 2017-03-07 misparses fsockopen calls, such as by interpreting fsockopen'127.0.0.1:80', 443 as if the address/port were 127.0.0.1:80:443, which is later truncated to 127.0.0.1:80. This behavior has a security risk if the explicitly provided port number i.e...
njs/njs_process_script_fuzzer: Use-of-uninitialized-value in njs_regexp_exec_result
Project: http://hg.nginx.org/njs Detailed report: https://oss-fuzz.com/testcase?key=5127028405174272 Project: njs Fuzzer: libFuzzernjsprocessscriptfuzzer Fuzz target binary: njsprocessscriptfuzzer Job Type: libfuzzermsannjs Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...
Moderate: Red Hat Security Advisory: ansible security and bug fix update
An update for ansible is now available for Ansible Engine 2.8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...
njs/njs_process_script_fuzzer: Crash in njs_object_prop_alloc
Project: http://hg.nginx.org/njs Detailed report: https://oss-fuzz.com/testcase?key=5688604573040640 Project: njs Fuzzer: libFuzzernjsprocessscriptfuzzer Fuzz target binary: njsprocessscriptfuzzer Job Type: libfuzzerubsannjs Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x001002c33f2...
Virtuozzo Linux Errata and Security Advisory 2019:1650 Low
Upstream security update. Follow RHSA-2019:1650 for details...
Virtuozzo Linux Errata and Enhancement Advisory 2019:1653
Upstream security update. Follow RHEA-2019:1653 for details...
cryptofuzz/cryptofuzz-openssl-110-noasm: Stack-buffer-overflow in RC5_32_set_key
Project: https://github.com/guidovranken/cryptofuzz.git Detailed report: https://oss-fuzz.com/testcase?key=5636104176271360 Project: cryptofuzz Fuzzer: libFuzzercryptofuzzcryptofuzz-openssl-110-noasm Fuzz target binary: cryptofuzz-openssl-110-noasm Job Type: libfuzzerasancryptofuzz Platform Id:...
CVE-2019-13147
In Audio File Library aka audiofile 0.3.6, there exists one NULL pointer dereference bug in ulaw2linearbuf in G711.cpp in libmodules.a that allows an attacker to cause a denial of service via a crafted file...
vim security update
CentOS Errata and Security Advisory CESA-2019:1619 An update for vim is now available for Red Hat Enterprise Linux 7 and Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, whic...
libarchive/libarchive_fuzzer: Crash in copy_string
Project: https://github.com/libarchive/libarchive.git Detailed report: https://oss-fuzz.com/testcase?key=5728233707798528 Project: libarchive Fuzzer: libFuzzerlibarchivefuzzer Fuzz target binary: libarchivefuzzer Job Type: libfuzzerubsanlibarchive Platform Id: linux Crash Type: UNKNOWN READ Crash...
c-ares/ares_parse_reply_fuzzer: Null-dereference READ with empty stacktrace
Project: https://github.com/c-ares/c-ares.git Detailed report: https://oss-fuzz.com/testcase?key=5674462260756480 Project: c-ares Fuzzer: libFuzzerc-aresaresparsereplyfuzzer Fuzz target binary: aresparsereplyfuzzer Job Type: libfuzzerubsanc-ares Platform Id: linux Crash Type: Null-dereference REA...
Updated kernel-linus packages fix security vulnerability
This kernel-linus update is based on the upstream 4.14.127 and fixes at least the following security issues: Jonathan Looney discovered that it is possible to send a crafted sequence of SACKs which will fragment the RACK send map. An attacker may be able to further exploit the fragmented send map...