Libbpf 缓冲区错误漏洞

Libbpf is BPF is a kernel technology that allows anyone to choose how the kernel runs without extensive kernel development experience and spending a lot of time setting up for kernel development. A buffer error vulnerability exists in Libbpf that stems from the product's bpfobjectopenmem and...

CVE-2021-45940

CVE-2021-45940 affects libbpf 0.6.0 and 0.6.1, causing a heap-based buffer overflow (4 bytes) in __bpf_object__open (invoked by bpf_object__open_mem and bpf-object-fuzzer.c). The vulnerability could cause the application to crash. The provided documents do not specify a vendor patch or remediatio...

CVE-2021-45940

libbpf 0.6.0 and 0.6.1 has a heap-based buffer overflow 4 bytes in bpfobjectopen called from bpfobjectopenmem and bpf-object-fuzzer.c...

CVE-2021-45940

libbpf 0.6.0 and 0.6.1 has a heap-based buffer overflow 4 bytes in bpfobjectopen called from bpfobjectopenmem and bpf-object-fuzzer.c...

CVE-2021-45941

CVE-2021-45941 — A heap-based buffer overflow (8 bytes) in libbpf's __bpf_object__open (invoked by bpf_object__open_mem and bpf-object-fuzzer.c) affects libbpf versions 0.6.0 and 0.6.1. Connected sources (e.g., Nessus/Red Hat mentions of CVE-2021-45941) describe an impact of potential crash for a...

CVE-2021-45941

libbpf 0.6.0 and 0.6.1 has a heap-based buffer overflow 8 bytes in bpfobjectopen called from bpfobjectopenmem and bpf-object-fuzzer.c...

CVE-2021-45941

libbpf 0.6.0 and 0.6.1 has a heap-based buffer overflow 8 bytes in bpfobjectopen called from bpfobjectopenmem and bpf-object-fuzzer.c...

PT-2021-24329 · Libbpf +3 · Libbpf +3

Name of the Vulnerable Software and Affected Versions: libbpf versions 0.6.0 through 0.6.1 Description: The issue is a heap-based buffer overflow of 4 bytes in the bpf object open function, which is called from bpf object open mem and bpf-object-fuzzer.c. This overflow can potentially lead to...

PT-2021-24330 · Libbpf +3 · Libbpf +3

Name of the Vulnerable Software and Affected Versions: libbpf versions 0.6.0 through 0.6.1 Description: The issue is a heap-based buffer overflow of 8 bytes in the bpf object open function, which is called from bpf object open mem and bpf-object-fuzzer.c. Recommendations: For libbpf versions 0.6....

libbpf bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

libbpf bug fix and enhancement update

An update is available for libbpf. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Enterprise...

ALEA-2021:4491 libbpf bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

GSD-2021-1001694 libbpf: Fix memory leak in strset

libbpf: Fix memory leak in strset This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.12 by commit 9e8e7504e09831c469b67d6dc11d9a72654bdb8c, i...

UVI-2021-1001694 libbpf: Fix memory leak in strset

libbpf: Fix memory leak in strset This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.12 by commit 9e8e7504e09831c469b67d6dc11d9a72654bdb8c, i...

Fedora: Security Advisory for libbpf (FEDORA-2021-4786624190)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 33 Update: libbpf-0.4.0-1.fc33

A mirror of bpf-next linux tree bpf-next/tools/lib/bpf directory plus its supporting header files. The version of the package reflects the version of ABI...

UVI-2021-1000016 libbpf: Fix potential NULL pointer dereference

libbpf: Fix potential NULL pointer dereference This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.11.16 by commit...

UVI-2021-1000212 libbpf: Fix signed overflow in ringbuf_process_ring

libbpf: Fix signed overflow in ringbufprocessring This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.5 by commit...

GSD-2021-1000329 libbpf: Fix signed overflow in ringbuf_process_ring

libbpf: Fix signed overflow in ringbufprocessring This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.38 by commit...

GSD-2021-1000016 libbpf: Fix potential NULL pointer dereference

libbpf: Fix potential NULL pointer dereference This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.11.16 by commit...