libreoffice/wksfuzzer: Heap-buffer-overflow in std::__1::unique_ptr<ScColumn, std::__1::default_delete<ScColumn> >::operator*

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5644717359890432 Project: libreoffice Fuzzer: libFuzzerlibreofficewksfuzzer Fuzz target binary: wksfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-buffer-overfl...

libreoffice/diffuzzer: Heap-buffer-overflow in std::__1::unique_ptr<ScColumn, std::__1::default_delete<ScColumn> >::operator*

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5661196948078592 Project: libreoffice Fuzzer: libFuzzerlibreofficediffuzzer Fuzz target binary: diffuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-buffer-overfl...

SUSE SLED15 / SLES15 Security Update : Recommended update for xen (SUSE-SU-2019:0875-1)

This update for xen fixes the following issues : Security issues fixed : CVE-2018-19967: Fixed HLE constructs that allowed guests to lock up the host, resulting in a Denial of Service DoS. XSA-282 bsc1114988 Fixed an issue which could allow malicious PV guests may cause a host crash or gain acces...

SUSE-SU-2019:0875-1 Recommended update for xen

This update for xen fixes the following issues: Security issues fixed: - CVE-2018-19967: Fixed HLE constructs that allowed guests to lock up the host, resulting in a Denial of Service DoS. XSA-282 bsc1114988 - Fixed an issue which could allow malicious PV guests may cause a host crash or gain...

opencv/imdecode_fuzzer: Heap-buffer-overflow in Luv32toXYZ

Project: https://github.com/opencv/opencv.git Detailed report: https://oss-fuzz.com/testcase?key=5638950225444864 Project: opencv Fuzzer: libFuzzeropencvimdecodefuzzer Fuzz target binary: imdecodefuzzer Job Type: libfuzzerasanopencv Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Cras...

php/php-fuzz-exif: Heap-buffer-overflow in _estrndup

Detailed report: https://oss-fuzz.com/testcase?key=5740255098961920 Project: php Fuzzer: libFuzzerphpphp-fuzz-exif Fuzz target binary: php-fuzz-exif Job Type: libfuzzerasanphp Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x6120000032e0 Crash State: estrndup...

CVE-2019-2025

In binderthreadread of binder.c, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndro...

openh264/decoder_fuzzer: Heap-use-after-free in WelsDec::WelsReorderRefList

Project: https://github.com/cisco/openh264.git Detailed report: https://oss-fuzz.com/testcase?key=5190290674024448 Project: openh264 Fuzzer: libFuzzeropenh264decoderfuzzer Fuzz target binary: decoderfuzzer Job Type: libfuzzerasanopenh264 Platform Id: linux Crash Type: Heap-use-after-free READ 4...

kimageformats/kimgio_fuzzer: Negative-size-param in QImage::fill

Project: git://anongit.kde.org/kimageformats Detailed report: https://oss-fuzz.com/testcase?key=5118681342803968 Project: kimageformats Fuzzer: aflkimageformatskimgiofuzzer Fuzz target binary: kimgiofuzzer Job Type: aflasankimageformats Platform Id: linux Crash Type: Negative-size-param Crash...

radare2/ia_fuzz: Heap-buffer-overflow in dex_parse_debug_item

Project: https://github.com/radare/radare2.git Detailed report: https://oss-fuzz.com/testcase?key=5664432685842432 Project: radare2 Fuzzer: libFuzzerradare2iafuzz Fuzz target binary: iafuzz Job Type: libfuzzerasanradare2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

libssh2 security update

CentOS Errata and Security Advisory CESA-2019:0679 An update for libssh2 is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

opencv/imdecode_fuzzer: Heap-buffer-overflow in LogLuv24toXYZ

Project: https://github.com/opencv/opencv.git Detailed report: https://oss-fuzz.com/testcase?key=5637208565874688 Project: opencv Fuzzer: libFuzzeropencvimdecodefuzzer Fuzz target binary: imdecodefuzzer Job Type: libfuzzerasanopencv Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Cras...

CVE-2019-3836

It was discovered in gnutls before version 3.6.7 upstream that there is an uninitialized pointer access in gnutls versions 3.6.3 or later which can be triggered by certain post-handshake messages...

DLA-1745-1 libdatetime-timezone-perl - new upstream version

Bulletin has no description...

lzma/7z_fuzzer: Use-of-uninitialized-value in CrcUpdateT8

Detailed report: https://oss-fuzz.com/testcase?key=5695345578737664 Project: lzma Fuzzer: libFuzzerlzma7zfuzzer Fuzz target binary: 7zfuzzer Job Type: libfuzzermsanlzma Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: CrcUpdateT8 CrcCalc SzArExExtract Sanitize...

ffmpeg/ffmpeg_AV_CODEC_ID_RSCC_fuzzer: Heap-buffer-overflow in inflate

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5734128093233152 Project: ffmpeg Fuzzer: aflffmpegAVCODECIDRSCCfuzzer Fuzz target binary: ffmpegAVCODECIDRSCCfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash...

php/php-fuzz-exif: Heap-buffer-overflow in exif_iif_add_value

Detailed report: https://oss-fuzz.com/testcase?key=5724097968865280 Project: php Fuzzer: aflphpphp-fuzz-exif Fuzz target binary: php-fuzz-exif Job Type: aflasanphp Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x60400002cbba Crash State: exifiifaddvalue exifiifaddtag...

Fedora 28 : firefox (2019-a0ccc78064)

Fixed popup issues on Wayland mozbz1423598 - Fixed rendering artifacts on Wayland mozbz1468911 ---- - New upstream version 66.0 - Details at https://www.mozilla.org/en-US/firefox/66.0/releasenotes/ Note that Tenable Network Security has extracted the preceding description block directly from the...

openSUSE Security Update : java-11-openjdk (openSUSE-2019-818)

This update for java-11-openjdk fixes the following issues : Update to upstream tag jdk-11.0.1+13 Oracle October 2018 CPU Security fixes : - S8202936, CVE-2018-3183, bsc1112148: Improve script engine support - S8199226, CVE-2018-3169, bsc1112146: Improve field accesses - S8199177, CVE-2018-3149,...

openSUSE Security Update : hylafax+ (openSUSE-2019-711)

This update for hylafax+ fixes the following issues : Security issues fixed in 5.6.1 : - CVE-2018-17141: multiple vulnerabilities affecting fax page reception in JPEG format Specially crafted input may have allowed remote execution of arbitrary code boo1109084 Additionally, this update also...