PT-2021-28780

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.9 through v5.10.37 Description A potential security issue exists due to a NULL dereference when a SEND operation is completed with an error in nvmet-rdma. The actual impact and attack plausibility have not yet been...

PT-2021-28799

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 5.10.17 through 5.10.37 Description A potential null dereference issue was identified in the idxd dmaengine component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

go-snappy:fuzz_decode: Null-dereference READ in pthread_create

Detailed Report: https://oss-fuzz.com/testcase?key=5953575388839936 Project: go-snappy Fuzzing Engine: libFuzzer Fuzz Target: fuzzdecode Job Type: libfuzzerasango-snappy Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: pthreadcreate cgotrypthreadcrea...

istio:fuzz_parse_inputs: Null-dereference READ in pthread_create

Detailed Report: https://oss-fuzz.com/testcase?key=5224284875259904 Project: istio Fuzzing Engine: libFuzzer Fuzz Target: fuzzparseinputs Job Type: libfuzzerasanistio Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: pthreadcreate cgotrypthreadcreate...

containerd:fuzz_platforms_parse: Null-dereference READ in pthread_create

Detailed Report: https://oss-fuzz.com/testcase?key=6503922593300480 Project: containerd Fuzzing Engine: libFuzzer Fuzz Target: fuzzplatformsparse Job Type: libfuzzerasancontainerd Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: pthreadcreate...

idm:DL1 security update

slapi-nis 0.56.6-2 - CVE 2021-3480: idm:DL1/slapi-nis: NULL dereference DoS with specially crafted Binding DN - Resolves: rhbz1944713...

cilium:fuzz: Null-dereference READ in pthread_create

Detailed Report: https://oss-fuzz.com/testcase?key=4722078067589120 Project: cilium Fuzzing Engine: libFuzzer Fuzz Target: fuzz Job Type: libfuzzerasancilium Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: pthreadcreate cgotrypthreadcreate...

prometheus:fuzzParseOpenMetric: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5592882351308800 Project: prometheus Fuzzing Engine: libFuzzer Fuzz Target: fuzzParseOpenMetric Job Type: libfuzzerasanprometheus Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN Cras...

gonids:fuzz_parserule: Null-dereference READ in pthread_create

Detailed Report: https://oss-fuzz.com/testcase?key=4529029018419200 Project: gonids Fuzzing Engine: libFuzzer Fuzz Target: fuzzparserule Job Type: libfuzzerasangonids Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: pthreadcreate cgotrypthreadcreate...

quic-go:token_fuzzer: Null-dereference READ in pthread_create

Detailed Report: https://oss-fuzz.com/testcase?key=6558985382658048 Project: quic-go Fuzzing Engine: libFuzzer Fuzz Target: tokenfuzzer Job Type: libfuzzerasanquic-go Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: pthreadcreate cgotrypthreadcreate...

Null dereference in Grappler's `TrySimplify`

Impact The implementation of TrySimplify has undefined behavior due to dereferencing a null pointer in corner cases that result in optimizing a node with no inputs. Patches We have patched the issue in GitHub commit e6340f0665d53716ef3197ada88936c2a5f7a2d3. The fix will be included in TensorFlow...

DEBIAN-CVE-2021-28906

In function readyinleaf in libyang extr is NULL. In some cases, it can be NULL, which leads to the operation of retval-extr-flags that results in a crash...

DEBIAN-CVE-2021-28902

In function readyincontainer in libyang extr is NULL. In some cases, it can be NULL, which leads to the operation of retval-extr-flags that results in a crash...

UBUNTU-CVE-2021-28906

In function readyinleaf in libyang extr is NULL. In some cases, it can be NULL, which leads to the operation of retval-extr-flags that results in a crash...

A vulnerability found in libxml2 in versions before 2.9.11 shows that it did not propagate errors while parsing XML mixed content causing a NULL dereference. If an untrusted XML document was parsed in recovery mode and post-validated the flaw could be used to crash the application. The highest threat from this vulnerability is to system availability.

...

libyang 安全漏洞

libyang is a YANG data modeling language parser and toolkit written in C. It can be used as a toolkit for data modeling. A security vulnerability exists in libyang v1.0.225 and earlier versions, which stems from the readyincontainer function not checking if the value of retval-extr is NULL. no...

Oracle Linux 7 : slapi-nis (ELSA-2021-2032)

The remote Oracle Linux 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2021-2032 advisory. 0.56.5-4 - CVE 2021-3480: slapi-nis: NULL dereference DoS with specially crafted Binding DN - Resolves: rhbz1942937 Tenable has extracted the preceding...

Important: Red Hat Security Advisory: slapi-nis security and bug fix update

An update for slapi-nis is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

RHEL 8 : ipa (RHSA-2021:2026)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:2026 advisory. Red Hat Identity Management IdM is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based...

RHEL 8 : idm:DL1 (RHSA-2021:1983)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:1983 advisory. Red Hat Identity Management IdM is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based...