usrsctp:fuzzer_connect: Heap-use-after-free in uiomove

Detailed Report: https://oss-fuzz.com/testcase?key=6358765870055424 Project: usrsctp Fuzzing Engine: afl Fuzz Target: fuzzerconnect Job Type: aflasanusrsctp Platform Id: linux Crash Type: Heap-use-after-free READ Crash Address: 0x512000005aa8 Crash State: uiomove sctpsorecvmsg usrsctprecvv...

MiracleLinux 4 : thunderbird-68.8.0-1.AXS4 (AXSA:2020-057:04)

The remote MiracleLinux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2020-057:04 advisory. Mozilla: Use-after-free during worker shutdown CVE-2020-12387 Mozilla: Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8 CVE-2020-12395...

EUVD-2019-11047

Malware in sbrugna...

Linux Distros Unpatched Vulnerability : CVE-2019-20503

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usrsctp before 2019-12-20 has out-of-bounds reads in sctploadaddressesfrominit. CVE-2019-20503 Note that Nessus relies on the presence of the package as reporte...

CentOS 6 : chromium-browser (RHSA-2020:1270)

The remote CentOS Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:1270 advisory. - usrsctp before 2019-12-20 has out-of-bounds reads in sctploadaddressesfrominit. CVE-2019-20503 - Use after free in WebGL in Google Chrome prior to...

CBL Mariner 2.0 Security Update: usrsctp (CVE-2019-20503)

The version of usrsctp installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2019-20503 advisory. - usrsctp before 2019-12-20 has out-of-bounds reads in sctploadaddressesfrominit. CVE-2019-20503 Note that...

usrsctp:fuzzer_connect: Heap-use-after-free in sodealloc

Detailed Report: https://oss-fuzz.com/testcase?key=4958762998235136 Project: usrsctp Fuzzing Engine: libFuzzer Fuzz Target: fuzzerconnect Job Type: libfuzzerasanusrsctp Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x51900000cf00 Crash State: sodealloc sctptimeouthandle...

RHEL 5 : usrsctp (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - usrsctp: Buffer overflow in AUTH chunk input validation CVE-2020-6831 - usrsctp before 2019-12-20 has...

CVE-2019-20503 affecting package usrsctp for versions less than 0.9.5.0-1

CVE-2019-20503 affecting package usrsctp for versions less than 0.9.5.0-1. A patched version of the package is available...

Oracle Linux 8 : firefox (ELSA-2020-0820)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2020-0820 advisory. 68.6.0-1.0.1.el81 - Rebuild to pickup Oracle default bookmarks Orabug: 30069264 - Add firefox-oracle-default-prefs.js and remove the corresponding Red...

SUSE CVE-2019-20503

usrsctp before 2019-12-20 has out-of-bounds reads in sctploadaddressesfrominit...

Mozilla: libusrsctp library out of date

The Mozilla Foundation Security Advisory describes this flaw as: An out of date library libusrsctp contained vulnerabilities that could potentially be exploited...

CVE-2019-20503 affecting package usrsctp for versions less than 0.9.5.0-1

CVE-2019-20503 affecting package usrsctp for versions less than 0.9.5.0-1. A patched version of the package is available...

usrsctp:fuzzer_fragment: Bad-cast to struct sctp_sndrcvinfosctp_lower_sosend in usrsctp_sendv

Project: https://github.com/weinrank/usrsctp.git https://github.com/sctplab/usrsctp.git Detailed Report: https://oss-fuzz.com/testcase?key=6146632577581056 Project: usrsctp Fuzzing Engine: libFuzzer Fuzz Target: fuzzerfragment Job Type: libfuzzerubsanusrsctp Platform Id: linux Crash Type: Bad-cas...

Denial Of Service (DoS)

chromium is vulnerable to denial of service. An out-of-bounds read in sctploadaddressesfrominit in usrsctp allows an attacker to crash the application...

usrsctp:fuzzer_connect: Heap-use-after-free with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5430338945941504 Project: usrsctp Fuzzing Engine: libFuzzer Fuzz Target: fuzzerconnect Job Type: libfuzzerasanusrsctp Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x6110006b9450 Crash State: NULL Sanitizer: address ASA...

PT-2021-28065

Name of the Vulnerable Software and Affected Versions usrsctp affected versions not specified Description The issue is related to a heap-use-after-free error, which occurs when the program attempts to access memory that has already been freed. This can lead to a crash. The crash is associated wit...

usrsctp:fuzzer_connect: Heap-use-after-free in sctp_sorecvmsg

Project: https://github.com/weinrank/usrsctp.git https://github.com/sctplab/usrsctp.git Detailed Report: https://oss-fuzz.com/testcase?key=5234968953487360 Project: usrsctp Fuzzing Engine: honggfuzz Fuzz Target: fuzzerconnect Job Type: honggfuzzasanusrsctp Platform Id: linux Crash Type:...

PT-2021-28044

Name of the Vulnerable Software and Affected Versions usrsctp affected versions not specified Description The issue is related to a heap-use-after-free error, which occurs when the program attempts to access memory that has already been freed. This can lead to a crash. The crash is associated wit...

usrsctp:fuzzer_connect: Heap-use-after-free in sctp_sorecvmsg

Project: https://github.com/weinrank/usrsctp.git https://github.com/sctplab/usrsctp.git Detailed Report: https://oss-fuzz.com/testcase?key=6017971061391360 Project: usrsctp Fuzzing Engine: honggfuzz Fuzz Target: fuzzerconnect Job Type: honggfuzzasanusrsctp Platform Id: linux Crash Type:...