cryptofuzz:cryptofuzz-boringssl-noasm: Use-of-uninitialized-value in selftest

Detailed Report: https://oss-fuzz.com/testcase?key=5666948349427712 Project: cryptofuzz Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-boringssl-noasm Job Type: libfuzzermsancryptofuzz Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: selftest dessetkey...

kimageformats:kimgio_xcf_fuzzer: Use-of-uninitialized-value in XCFImageFormat::mergeRGBToRGB

Detailed Report: https://oss-fuzz.com/testcase?key=5752637241950208 Project: kimageformats Fuzzing Engine: libFuzzer Fuzz Target: kimgioxcffuzzer Job Type: libfuzzermsankimageformats Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: XCFImageFormat::mergeRGBToRG...

keystone:fuzz_asm_x86_64: Use-of-uninitialized-value in llvm_ks::APFloat::isFinite

Detailed Report: https://oss-fuzz.com/testcase?key=5649484475531264 Project: keystone Fuzzing Engine: libFuzzer Fuzz Target: fuzzasmx8664 Job Type: libfuzzermsankeystone Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: llvmks::APFloat::isFinite...

imagemagick:encoder_xcf_fuzzer: Use-of-uninitialized-value in PerceptibleReciprocal

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5632675526475776 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderxcffuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Cra...

ZSQL: Server Logging Levels

The LOGLEVEL parameter specifies the levels of run logs and debug logs to be written into the server. The default value is 7, indicating that run logs in all levels are written into the server. If LOGLEVEL is set to 0, not only RUN and DEBUG logging, but also ALARM logging will be disabled. This...

The vulnerability of the SVGKeyValuePairs function in the ImageMagick console-based graphics editor allows a hacker to trigger a service failure.

The vulnerability of the SVGKeyValuePairs function coders/svg.c in the ImageMagick console-based graphics editor is related to resource management errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions using a specially crafted image...

Security Bulletin: Multiple vulnerabilities in IBM HTTP Server used by WebSphere Application Server

Summary There are multiple vulnerabilities in the IBM HTTP Server used by WebSphere Application Server. This has been addressed. Vulnerability Details CVEID: CVE-2020-1927 DESCRIPTION: Apache HTTP Server could allow a remote attacker to conduct phishing attacks, caused by an open redirect...

Principles of a Cloud Migration – Security, The W5H

Whosawhatsit?! - WHO is responsible for this anyways? For as long as cloud providers have been in business, we’ve been discussing the Shared Responsibility Model when it comes to customer operation teams. It defines the different aspects of control, and with that control, comes the need to secure...

imagemagick:encoder_dng_fuzzer: Use-of-uninitialized-value in LibRaw::parse_fuji_compressed_header

Detailed Report: https://oss-fuzz.com/testcase?key=5634881263763456 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderdngfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: LibRaw::parsefujicompressedhead...

libspectre:spectre_read_fuzzer: Use-of-uninitialized-value in psscan

Project: https://gitlab.freedesktop.org/libspectre/libspectre.git Detailed Report: https://oss-fuzz.com/testcase?key=5678076710354944 Project: libspectre Fuzzing Engine: libFuzzer Fuzz Target: spectrereadfuzzer Job Type: libfuzzermsanlibspectre Platform Id: linux Crash Type:...

ghostscript:gstoraster_fuzzer: Use-of-uninitialized-value in s_exD_process

Detailed Report: https://oss-fuzz.com/testcase?key=5645873112678400 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzermsanghostscript Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: sexDprocess sreadbuf sgets...

leptonica:pix_rotate_shear_fuzzer: Use-of-uninitialized-value in putgreytile

Project: https://github.com/DanBloomberg/leptonica.git Detailed Report: https://oss-fuzz.com/testcase?key=5644392036827136 Project: leptonica Fuzzing Engine: libFuzzer Fuzz Target: pixrotateshearfuzzer Job Type: libfuzzermsanleptonica Platform Id: linux Crash Type: Use-of-uninitialized-value Cras...

ghostscript:gstoraster_fuzzer: Use-of-uninitialized-value in c_pdf14trans_clist_read_update

Detailed Report: https://oss-fuzz.com/testcase?key=5733777335910400 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzermsanghostscript Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: cpdf14transclistreadupdate...

libspectre:spectre_read_fuzzer: Use-of-uninitialized-value in readline

Project: https://gitlab.freedesktop.org/libspectre/libspectre.git Detailed Report: https://oss-fuzz.com/testcase?key=5681684906508288 Project: libspectre Fuzzing Engine: libFuzzer Fuzz Target: spectrereadfuzzer Job Type: libfuzzermsanlibspectre Platform Id: linux Crash Type:...

Denial Of Service (DoS)

mysql is vulnerable to denial of service. A flaw in the way MySQL evaluated the arguments of extreme-value functions, such as LEAST and GREATEST, could allow a remote, authenticated attacker to crash mysqld...

Denial Of Service (DoS)

The kernel package is vulnerable to denial of service DoS. The possibility of a timeout value overflow was found in the Linux kernel high-resolution timers functionality, hrtimers. This could allow a local, unprivileged user to execute arbitrary code, or cause a denial of service kernel panic...

Information Disclosure

conga is vulnerable to information disclosure. An attacker is able to retrieve passwords from the source file of the web page as the passwords are found in the Value attribute of a password entry field...

CVE-2018-18849

In Qemu 3.0.0, lsidomsgin in hw/scsi/lsi53c895a.c allows out-of-bounds access by triggering an invalid msglen value...

ghostscript:gstoraster_fuzzer: Use-of-uninitialized-value in gs_scan_token

Detailed Report: https://oss-fuzz.com/testcase?key=5109631614713856 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzermsanghostscript Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: gsscantoken tokenexeccontinue...

ghostscript:gstoraster_fuzzer: Use-of-uninitialized-value in gs_scan_token

Detailed Report: https://oss-fuzz.com/testcase?key=6257668319870976 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzermsanghostscript Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: gsscantoken interp gscallinterp...