freerdp: Out-of-bounds read in security_fips_decrypt in libfreerdp/core/security.c

An issue was discovered in FreeRDP before 2.1.1. An out-of-bounds OOB read vulnerability has been detected in securityfipsdecrypt in libfreerdp/core/security.c due to an uninitialized value...

Moderate: Red Hat Security Advisory: httpd security, bug fix, and enhancement update

An update for httpd is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

kernel: null pointer dereference in drivers/scsi/qla2xxx/qla_os.c

A flaw was found in the Linux kernel. A NULL pointer dereference flaw was found in the QLOGIC drivers for HBA. A call to allocworkqueue return was not validated and can cause a denial of service. The highest threat from this vulnerability is to system availability...

OSV-2020-1886 Use-of-uninitialized-value in gs_scan_token

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21622 Crash type: Use-of-uninitialized-value Crash state: gsscantoken interp gscallinterp...

OSV-2020-1883 Use-of-uninitialized-value in s_exD_process

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22225 Crash type: Use-of-uninitialized-value Crash state: sexDprocess sreadbuf sprocessreadbuf...

OSV-2020-1882 Use-of-uninitialized-value in gx_dc_ht_colored_read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21617 Crash type: Use-of-uninitialized-value Crash state: gxdchtcoloredread clistplaybackband clistplaybackfilebands...

OSV-2020-1880 Use-of-uninitialized-value in c_pdf14trans_clist_read_update

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21640 Crash type: Use-of-uninitialized-value Crash state: cpdf14transclistreadupdate applycreatecompositor executecompositorqueue...

OSV-2020-1878 Use-of-uninitialized-value in s_A85D_process

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21616 Crash type: Use-of-uninitialized-value Crash state: sA85Dprocess gsscantoken interp...

OSV-2020-1877 Use-of-uninitialized-value in FAPI_FF_get_glyph

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23115 Crash type: Use-of-uninitialized-value Crash state: FAPIFFgetglyph getfapiglyphdata loadtruetypeglyph...

OSV-2020-1874 Use-of-uninitialized-value in load_truetype_glyph

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22182 Crash type: Use-of-uninitialized-value Crash state: loadtruetypeglyph TTLoadGlyph ttglyphload...

OSV-2020-1872 Use-of-uninitialized-value in s_exD_process

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21643 Crash type: Use-of-uninitialized-value Crash state: sexDprocess sreadbuf sgets...

OSV-2020-1873 Use-of-uninitialized-value in zcheck_r6_password

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23440 Crash type: Use-of-uninitialized-value Crash state: zcheckr6password interp gscallinterp...

OSV-2020-1869 Use-of-uninitialized-value in gs_scan_token

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21625 Crash type: Use-of-uninitialized-value Crash state: gsscantoken tokenexeccontinue interp...

OSV-2020-1867 Use-of-uninitialized-value in PerceptibleReciprocal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26023 Crash type: Use-of-uninitialized-value Crash state: PerceptibleReciprocal CompositeImage loadlevel...

Open-Xchange: XSS - Search - Unescaped contact job

The function responsible for formatting the contact's job company and position doesn't escape its value, which allows to inject arbitrary HTML content. javascript // master/ui/apps/io.ox/contacts/common-extensions.js // develop/ui/apps/io.ox/contacts/listview.js bright: function baton var text =...

EulerOS 2.0 SP3 : ImageMagick (EulerOS-SA-2020-2090)

According to the versions of the ImageMagick packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - ImageMagick version 7.0.7-28 contains a memory leak in ReadYCBCRImage in coders/ycbcr.c.CVE-2018-10805 - ImageMagick version 7.0.7-28...

c-ares:ares_parse_reply_fuzzer: Use-of-uninitialized-value in ares_parse_caa_reply

Project: https://github.com/c-ares/c-ares.git Detailed Report: https://oss-fuzz.com/testcase?key=5149417215361024 Project: c-ares Fuzzing Engine: libFuzzer Fuzz Target: aresparsereplyfuzzer Job Type: libfuzzermsanc-ares Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Cras...

OSV-2020-1854 Use-of-uninitialized-value in UpdateDecStatNoFreezingInfo

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25970 Crash type: Use-of-uninitialized-value Crash state: UpdateDecStatNoFreezingInfo UpdateDecStat WelsDec::DecodeFrameConstruction...

grok:grk_decompress_fuzzer: Use-of-uninitialized-value in grk::t1_part1::T1Part1::postDecode

Detailed Report: https://oss-fuzz.com/testcase?key=4787678997118976 Project: grok Fuzzing Engine: libFuzzer Fuzz Target: grkdecompressfuzzer Job Type: libfuzzermsangrok Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: grk::t1part1::T1Part1::postDecode...

openh264:decoder_fuzzer: Use-of-uninitialized-value in UpdateDecStatNoFreezingInfo

Project: https://github.com/cisco/openh264.git Detailed Report: https://oss-fuzz.com/testcase?key=5186538382819328 Project: openh264 Fuzzing Engine: libFuzzer Fuzz Target: decoderfuzzer Job Type: libfuzzermsanopenh264 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...