lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Wed, 10 May 2017 10:59:34 -0500
From: Brandon Perry <>
Subject: Re: [FD] Numerous FreeTDS crashes fixed on master

I was asked what software this affects.

PHP - <>
Perl DBI - <>
Ruby DBI w/ Sybase - <>
Python-Sybase - <>

Other languages have less-official bindings.

Go - <>
Erlang - <>
R - <>

Also, obviously the tsql binary if used to connect to an untrusted MSSQL/Sybase server.

> On May 9, 2017, at 9:34 AM, Brandon Perry <> wrote:
> Attached is a zip file of reported TDS streams that cause segmentation faults in the FreeTDS library. The ‘tsql’ binary was used for the fuzzing, so these most likely only affect client-side functionality. These have been resolved on master and the 1.0 branch.
> Also included in the zip file is a bucket.txt, a crashwalk db dump detailing the crashes for the files in the zip file.
> You can find the bucket.txt itself in the following Github gist as well. No CVE’s have been requested.
> <>
> To test, you can compile FreeTDS, then use preeny to redirect network IO to stdin/stdout.
> export LD_PRELOAD=~/preeny/x86_64-linux-gnu/
> unzip
> cd rpt
> for i in id*; do valgrind ~/freetds/build/src/apps/tsql -S -U fdsa -P fdsa -I ~/tdsconfig < $i; done
> A simple tdsconfig file can be used to speed things up a bit.
> [global]
> timeout = 1
> connect timeout = 1
> Many thanks to Frediano Ziglio, the maintainer of FreeTDS, for quick communication and bug fix turn arounds.
> <>

Download attachment "signature.asc" of type "application/pgp-signature" (802 bytes)

Sent through the Full Disclosure mailing list
Web Archives & RSS:

Powered by blists - more mailing lists