chakra: Crash in Js::JavascriptOperators::CallGetter

Project: https://github.com/Microsoft/ChakraCore.git Detailed report: https://oss-fuzz.com/testcase?key=5678752915783680 Project: chakra Fuzzer: jsfuzzer Job Type: asanchakra Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x20007fff8001 Crash State: Js::JavascriptOperators::CallGetter...

skcms/iccprofile_transform: Index-out-of-bounds in read_mft_common

Project: https://skia.googlesource.com/skcms.git Detailed report: https://oss-fuzz.com/testcase?key=5168080767418368 Project: skcms Fuzzer: libFuzzerskcmsiccprofiletransform Fuzz target binary: iccprofiletransform Job Type: libfuzzerubsanskcms Platform Id: linux Crash Type: Index-out-of-bounds...

Updated mpv packages fix security vulnerability

Josef Gajdusek reported that mpv 0.27.0 was vulnerable to an attack through it's youtube-dl hook. This could cause remote code execution. This upstream update creates of list of sure protocols to use through the hook...

skia/path_deserialize: Use-of-uninitialized-value in is_finite

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5721994512302080 Project: skia Fuzzer: libFuzzerskiapathdeserialize Fuzz target binary: pathdeserialize Job Type: libfuzzermsanskia Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

SUSE-SU-2018:0509-1 Security update for drm

This update for drm provides the following fixes: This security issue was fixed: - CVE-2017-10810: Memory leak in the virtiogpuobjectcreate function in drivers/gpu/drm/virtio/virtgpuobject.c allowed attackers to cause a denial of service memory consumption by triggering object-initialization...

ffmpeg/ffmpeg_AV_CODEC_ID_SCPR_fuzzer: Heap-buffer-overflow in decompress_p

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=6289698747056128 Project: ffmpeg Fuzzer: aflffmpegAVCODECIDSCPRfuzzer Fuzz target binary: ffmpegAVCODECIDSCPRfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Cras...

CVE-2015-9253

An issue was discovered in PHP 7.3.x before 7.3.0alpha3, 7.2.x before 7.2.8, and before 7.1.20. The php-fpm master process restarts a child process in an endless loop when using program execution functions e.g., passthru, exec, shellexec, or system with a non-blocking STDIN stream, causing this...

Tunna - Set Of Tools Which Will Wrap And Tunnel Any TCP Communication Over HTTP

Tunna is a set of tools which will wrap and tunnel any TCP communication over HTTP. It can be used to bypass network restrictions in fully firewalled environments. SUMMARY TLDR: Tunnels TCP connections over HTTP In a fully firewalled inbound and outbound connections restricted - except the...

libreoffice/ww2fuzzer: Heap-use-after-free in rtl::OUString::OUString

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5739217767366656 Project: libreoffice Fuzzer: libFuzzerlibreofficeww2fuzzer Fuzz target binary: ww2fuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-use-after-fre...

libreoffice/pptfuzzer: Bad-cast to SdrObjectSdrEdgeObj::Notify in SfxBroadcaster::Broadcast

Detailed report: https://oss-fuzz.com/testcase?key=5146943924731904 Project: libreoffice Fuzzer: libFuzzerlibreofficepptfuzzer Fuzz target binary: pptfuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type: Bad-cast Crash Address: 0x000010fd2e70 Crash State: Bad-cast to...

libreoffice/pptfuzzer: Heap-use-after-free in SdrObject::RemoveListener

Detailed report: https://oss-fuzz.com/testcase?key=5653960519057408 Project: libreoffice Fuzzer: libFuzzerlibreofficepptfuzzer Fuzz target binary: pptfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x61500015b3d8 Crash State:...

libreoffice/tiffuzzer: Heap-buffer-overflow in TIFFReader::ReadTIFF

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=4857944500862976 Project: libreoffice Fuzzer: libFuzzerlibreofficetiffuzzer Fuzz target binary: tiffuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-buffer-overfl...

wireshark/fuzzshark_ip_proto-udp: Heap-buffer-overflow in dissect_udvm_reference_operand_memory

Project: https://code.wireshark.org/review/wireshark Detailed report: https://oss-fuzz.com/testcase?key=6195652263411712 Project: wireshark Fuzzer: aflwiresharkfuzzsharkipproto-udp Fuzz target binary: fuzzsharkipproto-udp Job Type: aflasanwireshark Platform Id: linux Crash Type:...

wireshark/fuzzshark_ip_proto-udp: Heap-buffer-overflow in print_address_prefix_buf

Project: https://code.wireshark.org/review/wireshark Detailed report: https://oss-fuzz.com/testcase?key=5676598553477120 Project: wireshark Fuzzer: libFuzzerwiresharkfuzzsharkipproto-udp Fuzz target binary: fuzzsharkipproto-udp Job Type: libfuzzerasanwireshark Platform Id: linux Crash Type:...

openSUSE Security Update : openssl-steam (openSUSE-2018-168)

This update for openssl-steam fixes the following issues : - Merged changes from upstream openssl Factory rev 137 into this fork for Steam. Updated to openssl 1.0.2k : - CVE-2016-7055: Montgomery multiplication may produce incorrect results boo1009528 - CVE-2016-7056: ECSDA P-256 timing attack ke...

yara/dex_fuzzer: Heap-buffer-overflow in read_uleb128

Project: https://github.com/VirusTotal/yara.git Detailed report: https://oss-fuzz.com/testcase?key=5150212461953024 Project: yara Fuzzer: aflyaradexfuzzer Fuzz target binary: dexfuzzer Job Type: aflasanyara Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x612000000900...

imagemagick/enhance_fuzzer: Use-of-uninitialized-value in EnhanceImage

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5778181106696192 Project: imagemagick Fuzzer: libFuzzerimagemagickenhancefuzzer Fuzz target binary: enhancefuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

imagemagick/encoder_pcx_fuzzer: Use-of-uninitialized-value in IsPixelMonochrome

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5648049637425152 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderpcxfuzzer Fuzz target binary: encoderpcxfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

Moderate: Red Hat Security Advisory: openstack-aodh security update

An update for openstack-aodh is now available for Red Hat OpenStack Platform 11.0 Ocata. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

libreoffice/rasfuzzer: Heap-buffer-overflow in Color::GetBlue

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=4819351925424128 Project: libreoffice Fuzzer: libFuzzerlibreofficerasfuzzer Fuzz target binary: rasfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-buffer-overfl...