util-linux:test_fdisk_script_fuzz: Heap-buffer-overflow in fdisk_partname

Project: https://github.com/karelzak/util-linux.git Detailed Report: https://oss-fuzz.com/testcase?key=5705475858104320 Project: util-linux Fuzzing Engine: libFuzzer Fuzz Target: testfdiskscriptfuzz Job Type: libfuzzerasani386util-linux Platform Id: linux Crash Type: Heap-buffer-overflow READ 1...

CVE-2020-17487

radare2 4.5.0 misparses signature information in PE files, causing a segmentation fault in rx509parsealgorithmidentifier in libr/util/x509.c. This is due to a malformed object identifier in IMAGEDIRECTORYENTRYSECURITY...

PT-2020-15022

Name of the Vulnerable Software and Affected Versions radare2 version 4.5.0 Description The issue is caused by radare2 misparsing signature information in PE files, leading to a segmentation fault in the r x509 parse algorithmidentifier function in libr/util/x509.c. This occurs due to a malformed...

GNU GLOBAL: Arbitrary code execution

Background GNU GLOBAL is a source code tagging system that works the same way across diverse environments, such as Emacs editor, Vi editor, Less viewer, Bash shell, various web browsers, etc. Description A vulnerability was found in an undocumented function of gozilla. Impact A remote attacker...

Security Bulletin: Nss-util vulnerabilities affect IBM SmartCloud Entry( CVE-2016-1950 )

Summary IBM SmartCloud Entry is vulnerable to a nss-tuil vulnerability, attackers could exploit it to cause the application to crash. Vulnerability Details CVEID: CVE-2016-1950 DESCRIPTION: Mozilla Firefox is vulnerable to a heap-based buffer overflow, caused by improper bounds checking when the...

Security Bulletin: Multiple vulnerabilities in coreutils, sudo, jasper, bind, bash, libtirpc, nss and nss-util affect IBM SmartCloud Entry

Summary Multiple vulnerabilities have been identified in coreutils, sudo, jasper, bind, bash, libtirpc, nss and nss-util. coreutils, sudo, jasper, bind, bash, libtirpc, nss and nss-util shipped with IBM SmartCloud Entry Appliance. IBM SmartCloud Entry Appliance has addressed the vulnerabilities...

Security Bulletin: Nss,Nss-util and Nspr vulnerabilities affect IBM SmartCloud Entry (CVE-2016-1978, CVE-2016-1979 )

Summary IBM SmartCloud Entry is vulnerable to multiple vulnerabilities in nss, nss-util and nspr. Attackers could exloit them using unknown attack vectors to execute arbitrary code on the vulnerable system or cause a denial of service. Vulnerability Details CVEID: CVE-2016-1978 DESCRIPTION: Mozil...

PT-2020-13348

Name of the Vulnerable Software and Affected Versions Yubico libykpiv versions prior to 2.1.0 Description An issue was discovered in the ykpiv util generate key function in lib/util.c, where incorrect error handling code can trigger an incorrect free. This could be used to cause a denial of servi...

Huawei EulerOS: Security Advisory for util-linux (EulerOS-SA-2020-1715)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization 3.0.6.0 : util-linux (EulerOS-SA-2020-1715)

According to the version of the util-linux packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - Buffer overflow in text-utils/colcrt.c in colcrt in util-linux before 2.27 allows local users to cause a denial of service crash...

OSV-2020-104 Heap-buffer-overflow in void arrow::util::internal::ByteStreamSlitDecodeSSE2<double>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21420 Crash type: Heap-buffer-overflow READ 1 Crash state: void arrow::util::internal::ByteStreamSlitDecodeSSE2 virtual thunk to parquet::ByteStreamSplitDecoderparquet::PhysicalType parquet::TypedDecoderparquet::PhysicalType...

PT-2020-22593

Name of the Vulnerable Software and Affected Versions Parquet affected versions not specified Description The issue is related to a heap buffer overflow error. Technical details indicate that the problem occurs in the arrow::util::RleDecoder::NextCounts function, specifically when...

PT-2020-21962

Name of the Vulnerable Software and Affected Versions Parquet affected versions not specified Description The issue is related to a heap-buffer-overflow write error. Technical details indicate that the crash occurs in the GetBatch function of arrow::BitUtil::BitReader and arrow::util::RleDecoder,...

PT-2020-22313

Name of the Vulnerable Software and Affected Versions Apache Arrow affected versions not specified Description A heap buffer overflow issue has been identified. The crash occurs in the arrow::util::RleDecoder::NextCounts and arrow::util::RleDecoder::GetBatchWithDictSpaced functions. This issue is...

Design/Logic Flaw

Convos before 4.20 does not properly generate a random secret in Core/Settings.pm and Util.pm. This leads to a predictable CONVOSLOCALSECRET value, affecting password resets and invitations...

EulerOS 2.0 SP2 : apr-util (EulerOS-SA-2020-1639)

According to the version of the apr-util packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The overflow protection in Expat is removed by compilers with certain optimization settings, which allows remote attackers to cause a denial of...

EulerOS 2.0 SP2 : util-linux (EulerOS-SA-2020-1620)

According to the version of the util-linux packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - runuser in util-linux allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes characters to the...

Huawei EulerOS: Security Advisory for util-linux (EulerOS-SA-2020-1620)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for apr-util (EulerOS-SA-2020-1639)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-13388

An exploitable vulnerability exists in the configuration-loading functionality of the jw.util package before 2.3 for Python. When loading a configuration with FromString or FromStream with YAML, one can execute arbitrary Python code, resulting in OS command execution, because safeload is not used...