wpantund/wpantund-fuzz: Heap-use-after-free in nl::wpantund::SpinelNCPTaskGetNetworkTopology::parse_child_entry

Project: https://github.com/openthread/wpantund.git Detailed report: https://oss-fuzz.com/testcase?key=6322864912334848 Project: wpantund Fuzzer: libFuzzerwpantundwpantund-fuzz Fuzz target binary: wpantund-fuzz Job Type: libfuzzerasanwpantund Platform Id: linux Crash Type: Heap-use-after-free REA...

open62541/fuzz_binary_message: Crash in copyAttributeIntoNode

Project: https://github.com/open62541/open62541.git Detailed report: https://oss-fuzz.com/testcase?key=6657398270853120 Project: open62541 Fuzzer: aflopen62541fuzzbinarymessage Fuzz target binary: fuzzbinarymessage Job Type: aflasanopen62541 Platform Id: linux Crash Type: UNKNOWN WRITE Crash...

thunderbird security update

CentOS Errata and Security Advisory CESA-2017:3372 An update for thunderbird is now available for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base...

Virtuozzo Linux Errata and Security Advisory 2017:3384 Moderate

Upstream security update. Follow RHSA-2017:3384 for details...

RHEL 6 / 7 : thunderbird (RHSA-2017:3372)

The remote Redhat Enterprise Linux 6 / 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2017:3372 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 52.5.0. Security Fixes:...

libreoffice/ww8fuzzer: Heap-use-after-free in SwRangeRedline::CopyToSection

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=4560755794903040 Project: libreoffice Fuzzer: libFuzzerlibreofficeww8fuzzer Fuzz target binary: ww8fuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-use-after-fre...

libreoffice/docxfuzzer: Heap-buffer-overflow in ZipPackage::getZipFileContents

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5117584849502208 Project: libreoffice Fuzzer: libFuzzerlibreofficedocxfuzzer Fuzz target binary: docxfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type:...

open62541/fuzz_binary_message: Heap-buffer-overflow in UA_Array_copy

Project: https://github.com/open62541/open62541.git Detailed report: https://oss-fuzz.com/testcase?key=5438211573678080 Project: open62541 Fuzzer: libFuzzeropen62541fuzzbinarymessage Fuzz target binary: fuzzbinarymessage Job Type: libfuzzerasanopen62541 Platform Id: linux Crash Type:...

wireshark/fuzzshark_ip: Heap-buffer-overflow in process_netbios_name

Detailed report: https://oss-fuzz.com/testcase?key=6263911520141312 Project: wireshark Fuzzer: libFuzzerwiresharkfuzzsharkip Fuzz target binary: fuzzsharkip Job Type: libfuzzerasanwireshark Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x619000007d7f Crash State:...

libreoffice/docxfuzzer: Bad-cast to cppuhelper::detail::XExceptionThrower from cppuhelper::detail::XExceptionThrower in cppu::throwException

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=6262755737731072 Project: libreoffice Fuzzer: libFuzzerlibreofficedocxfuzzer Fuzz target binary: docxfuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type: Bad-cast Crash...

gdal/dxf_fuzzer: Stack-buffer-overflow in ACTextUnescape

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5462941290725376 Project: gdal Fuzzer: libFuzzergdaldxffuzzer Fuzz target binary: dxffuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address:...

unrar/unrar_fuzzer: NULL

Detailed report: https://oss-fuzz.com/testcase?key=6436091927199744 Project: unrar Fuzzer: libFuzzerunrarfuzzer Fuzz target binary: unrarfuzzer Job Type: libfuzzermsanunrar Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: NULL Sanitizer: memory MSAN Recommende...

Virtuozzo Linux Errata and Security Advisory 2017:3270 Important

Upstream security update. Follow RHSA-2017:3270 for details...

ctdb, libsmbclient, libwbclient, samba security update

CentOS Errata and Security Advisory CESA-2017:3260 An update for samba is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

librawspeed/LJpegDecompressorFuzzer: Use-after-poison in rawspeed::unroll_loop_t<void rawspeed::LJpegDecompressor::decodeN<4>

Project: https://github.com/darktable-org/rawspeed.git Detailed report: https://oss-fuzz.com/testcase?key=6127728576167936 Project: librawspeed Fuzzer: afllibrawspeedLJpegDecompressorFuzzer Fuzz target binary: LJpegDecompressorFuzzer Job Type: aflasanlibrawspeed Platform Id: linux Crash Type:...

openSUSE Security Update : tboot (openSUSE-2017-1308)

This update for tboot fixes the following issues : Security issues fixed : - CVE-2017-16837: Fix tbootfailed to validate a number of immutable function pointers, which could allow an attacker to bypass the chain of trust and execute arbitrary code boo1068390. - Make tboot package compatible with...

Linux - mincore() Uninitialized Kernel Heap Page Disclosure Exploit

Linux mincore discloses uninitialized kernel heap pages. When walkpagerange is used on a VMHUGETLB VMA, callbacks from the mmwalk structure are only invoked for present pages. However, domincore assumes that it will always get callbacks for all pages in the range passed to walkpagerange, and when...

Linux Kernel - mincore() Uninitialized Kernel Heap Page Disclosure

Linux Kernel - mincore Uninitialized Kernel Heap Page Disclosure / Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1431 I found the following bug with an AFL-based fuzzer: When walkpagerange is used on a VMHUGETLB VMA, callbacks from the mmwalk structure are only invoked for...

yara/macho_fuzzer: Use-of-uninitialized-value in macho_parse_file_32_be

Project: https://github.com/VirusTotal/yara.git Detailed report: https://oss-fuzz.com/testcase?key=5168348309487616 Project: yara Fuzzer: libFuzzeryaramachofuzzer Fuzz target binary: machofuzzer Job Type: libfuzzermsanyara Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

PWR-Q200 vulnerable to DNS cache poisoning attacks

Overview PWR-Q200 provided by NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION is a mobile WiFi router. PWR-Q200 is vulnerable to DNS cache poisoning attacks as DNS queries are done with a fixed source port CWE-330. Toshifumi Sakaguchi reported this vulnerability to IPA. JPCERT/CC coordinated with...