58 matches found
libbpf:bpf-object-fuzzer: Heap-use-after-free in btf_ext_parse_sec_info
Project: https://github.com/libbpf/libbpf.git Detailed Report: https://oss-fuzz.com/testcase?key=4722152942403584 Project: libbpf Fuzzing Engine: libFuzzer Fuzz Target: bpf-object-fuzzer Job Type: libfuzzerasani386libbpf Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address:...
libbpf:bpf-object-fuzzer: Crash in bpf_object_post_load_cleanup
Detailed Report: https://oss-fuzz.com/testcase?key=4726053129224192 Project: libbpf Fuzzing Engine: libFuzzer Fuzz Target: bpf-object-fuzzer Job Type: libfuzzermsanlibbpf Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xffffafffc0da9188 Crash State: bpfobjectpostloadcleanup...
libbpf:bpf-object-fuzzer: Crash in btf__set_pointer_size
Detailed Report: https://oss-fuzz.com/testcase?key=6306551366483968 Project: libbpf Fuzzing Engine: libFuzzer Fuzz Target: bpf-object-fuzzer Job Type: libfuzzermsanlibbpf Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0xffffafff8688012c Crash State: btfsetpointersize bpfobjectinitbtf...
libbpf:bpf-object-fuzzer: Crash in btf_new
Detailed Report: https://oss-fuzz.com/testcase?key=4847158254960640 Project: libbpf Fuzzing Engine: libFuzzer Fuzz Target: bpf-object-fuzzer Job Type: libfuzzerasani386libbpf Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x01803244 Crash State: btfnew btfnew bpfobjectinitbtf Sanitize...
libbpf:bpf-object-fuzzer: Heap-buffer-overflow in btf_ext_parse_sec_info
Detailed Report: https://oss-fuzz.com/testcase?key=4671393433452544 Project: libbpf Fuzzing Engine: libFuzzer Fuzz Target: bpf-object-fuzzer Job Type: libfuzzerasani386libbpf Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0xf4303598 Crash State: btfextparsesecinfo...
EUVD-2021-32649
Malicious code in bioql PyPI...
EUVD-2025-31995
Malicious code in bioql PyPI...
PT-2025-40135
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The libbpf component in the Linux kernel contains an issue where it directly uses the e shnum field in the ELF header as the section header count. This can lead to a heap-buffer overflow...
SUSE CVE-2025-29481
Buffer Overflow vulnerability in libbpf 1.5.0 allows a local attacker to execute arbitrary code via the bpfobjectinitprog function of libbpf. This has been disputed by third parties who assert that "no one in their sane mind should be passing untrusted ELF files into libbpf while running under...
AZL-59745 CVE-2025-29481 affecting package bcc for versions less than 0.29.1-3
Buffer Overflow vulnerability in libbpf 1.5.0 allows a local attacker to execute arbitrary code via the bpfobjectinitprog function of libbpf. This has been disputed by third parties who assert that "no one in their sane mind should be passing untrusted ELF files into libbpf while running under...
CVE-2025-29481
Buffer Overflow vulnerability in libbpf 1.5.0 allows a local attacker to execute arbitrary code via the bpfobjectinitprog function of libbpf. This has been disputed by third parties who assert that "no one in their sane mind should be passing untrusted ELF files into libbpf while running under...
DEBIAN-CVE-2025-29481
Buffer Overflow vulnerability in libbpf 1.5.0 allows a local attacker to execute arbitrary code via the bpfobjectinitprog function of libbpf. This has been disputed by third parties who assert that "no one in their sane mind should be passing untrusted ELF files into libbpf while running under...
libbpf 安全漏洞
libbpf is a libbpf open source user-space library/ API for loading and interacting with BPF programs. A security vulnerability exists in libbpf version 1.5.0, which originates from a buffer overflow that can be exploited by a local attacker to execute arbitrary code via the bpfobjectinitprog...
The vulnerability of the bpf_object_load_prog() function in the tools/lib/bpf/libbpf.c file of the Linux operating system’s kernel allows a hacker to induce a service failure.
The vulnerability of the bpfobjectloadprog function in the tools/lib/bpf/libbpf.c file of the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a system failure...
libbpf:bpf-object-fuzzer: Heap-buffer-overflow in btf_ext_parse_info
Project: https://github.com/libbpf/libbpf.git Detailed Report: https://oss-fuzz.com/testcase?key=4662246847873024 Project: libbpf Fuzzing Engine: libFuzzer Fuzz Target: bpf-object-fuzzer Job Type: libfuzzerasanlibbpf Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address:...
BIT-BPFTOOL-2021-45940
libbpf 0.6.0 and 0.6.1 has a heap-based buffer overflow 4 bytes in bpfobjectopen called from bpfobjectopenmem and bpf-object-fuzzer.c...
PT-2024-28073 · Linux +3 · Linux Kernel +3
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a null-pointer dereference in the libbpf component of the Linux kernel. Specifically, in the bpf objec load prog function, there is no guarantee that obj-btf is...
PT-2024-14637 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A NULL pointer dereference issue occurred in the libbpf component of the Linux kernel, specifically in the bpf object collect prog relos function. Recommendations: At the moment, there...
PT-2023-35647
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type of UNKNOWN READ. The crash state includes functions such as init struct ops maps, bpf object init maps, and bpf object...