PT-2021-7858

Name of the Vulnerable Software and Affected Versions Protocol Buffers versions prior to 3.15.0 MySQL Server versions 8.0.28 and earlier Description A nullptr dereference occurs when a null char is present in a proto symbol, leading to an unchecked call into the proto file's name during generatio...

go-attestation:parse_event_log_fuzzer: Null-dereference READ in pthread_create

Detailed Report: https://oss-fuzz.com/testcase?key=4728213731409920 Project: go-attestation Fuzzing Engine: libFuzzer Fuzz Target: parseeventlogfuzzer Job Type: libfuzzerasango-attestation Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: pthreadcreat...

fasthttp:fuzz_url: Null-dereference READ in pthread_create

Detailed Report: https://oss-fuzz.com/testcase?key=6212482689531904 Project: fasthttp Fuzzing Engine: libFuzzer Fuzz Target: fuzzurl Job Type: libfuzzerasanfasthttp Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: pthreadcreate xcgosysthreadcreate...

quic-go:qpack_fuzzer: Null-dereference READ in pthread_create

Detailed Report: https://oss-fuzz.com/testcase?key=4599343942336512 Project: quic-go Fuzzing Engine: libFuzzer Fuzz Target: qpackfuzzer Job Type: libfuzzerasanquic-go Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: pthreadcreate xcgosysthreadcreate...

gcloud-go:fuzz_parse_query: Null-dereference READ in pthread_create

Detailed Report: https://oss-fuzz.com/testcase?key=5172013004095488 Project: gcloud-go Fuzzing Engine: libFuzzer Fuzz Target: fuzzparsequery Job Type: libfuzzerasangcloud-go Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: pthreadcreate...

tidb:fuzzNewHexLiteral: Null-dereference READ in pthread_create

Detailed Report: https://oss-fuzz.com/testcase?key=4884867227713536 Project: tidb Fuzzing Engine: libFuzzer Fuzz Target: fuzzNewHexLiteral Job Type: libfuzzerasantidb Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: pthreadcreate cgotrypthreadcreate...

go-coredns:fuzz_plugin_cache: Null-dereference READ in pthread_create

Detailed Report: https://oss-fuzz.com/testcase?key=5677061060558848 Project: go-coredns Fuzzing Engine: libFuzzer Fuzz Target: fuzzplugincache Job Type: libfuzzerasango-coredns Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: pthreadcreate...

ALPINE-CVE-2021-23841

The OpenSSL public API function X509issuerandserialhash attempts to create a unique hash value based on the issuer and serial number data contained within an X509 certificate. However it fails to correctly handle any errors that may occur while parsing the issuer field which might occur if the...

AZL-40768 CVE-2021-23841 affecting package shim-unsigned-x64 for versions less than 15.8-5

The OpenSSL public API function X509issuerandserialhash attempts to create a unique hash value based on the issuer and serial number data contained within an X509 certificate. However it fails to correctly handle any errors that may occur while parsing the issuer field which might occur if the...

DEBIAN-CVE-2021-23841

The OpenSSL public API function X509issuerandserialhash attempts to create a unique hash value based on the issuer and serial number data contained within an X509 certificate. However it fails to correctly handle any errors that may occur while parsing the issuer field which might occur if the...

CVE-2021-23841

The OpenSSL public API function X509issuerandserialhash attempts to create a unique hash value based on the issuer and serial number data contained within an X509 certificate. However it fails to correctly handle any errors that may occur while parsing the issuer field which might occur if the...

CVE-2021-21702 Null Dereference in SoapClient

In PHP versions 7.3.x below 7.3.27, 7.4.x below 7.4.15 and 8.0.x below 8.0.2, when using SOAP extension to connect to a SOAP server, a malicious SOAP server could return malformed XML data as a response that would cause PHP to access a null pointer and thus cause a crash...

uwebsockets:EpollHelloWorld: Null-dereference READ with empty stacktrace

Project: https://github.com/uNetworking/uWebSockets.git Detailed Report: https://oss-fuzz.com/testcase?key=5375680151945216 Project: uwebsockets Fuzzing Engine: libFuzzer Fuzz Target: EpollHelloWorld Job Type: libfuzzerubsanuwebsockets Platform Id: linux Crash Type: Null-dereference READ Crash...

dragonfly:uploader_fuzz: Null-dereference READ in pthread_create

Detailed Report: https://oss-fuzz.com/testcase?key=5741186432237568 Project: dragonfly Fuzzing Engine: libFuzzer Fuzz Target: uploaderfuzz Job Type: libfuzzerasandragonfly Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: pthreadcreate...

PHP 7.3.x < 7.3.27 Null Dereference Vulnerability

According to its self-reported version number, the version of PHP installed on the remote host is 7.3.x prior to 7.3.27, 7.4.x prior to 7.4.15, or 8.x prior to 8.0.2. It is, therefore, affected by a null dereference when XML is provided to the SoapClient query function without an existing field...

PHP 8.x < 8.0.2 Null Dereference Vulnerability

According to its self-reported version number, the version of PHP installed on the remote host is 7.3.x prior to 7.3.27, 7.4.x prior to 7.4.15, or 8.x prior to 8.0.2. It is, therefore, affected by a null dereference when XML is provided to the SoapClient query function without an existing field...

CVE-2021-21057

Acrobat Reader DC versions versions 2020.013.20074 and earlier, 2020.001.30018 and earlier and 2017.011.30188 and earlier are affected by a null pointer dereference vulnerability when parsing a specially crafted PDF file. An unauthenticated attacker could leverage this vulnerability to achieve...

Updated php packages fix a security vulnerability

The php packages are updated to version 7.3.27 to fix a Null Dereference in SoapClient SOAP. CVE-2021-21702. Note also php packages version 7.4.15-1.mga7 are available in backports/updates...

MGASA-2021-0076 Updated php packages fix a security vulnerability

The php packages are updated to version 7.3.27 to fix a Null Dereference in SoapClient SOAP. CVE-2021-21702. Note also php packages version 7.4.15-1.mga7 are available in backports/updates...

c-blosc2:decompress_frame_fuzzer: Null-dereference READ with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4816997072371712 Project: c-blosc2 Fuzzing Engine: libFuzzer Fuzz Target: decompressframefuzzer Job Type: libfuzzerubsanc-blosc2 Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: NULL Sanitizer:...