SUSE-SU-2020:3883-1 Security update for ovmf

This update for ovmf fixes the following issues: - CVE-2019-14584: Fixed a null dereference in AuthenticodeVerify bsc1177789...

DEBIAN-CVE-2020-29571

An issue was discovered in Xen through 4.14.x. A bounds check common to most operation time functions specific to FIFO event channels depends on the CPU observing consistent state. While the producer side uses appropriately ordered writes, the consumer side isn't protected against re-ordered read...

389-ds:1.4 bug fix update

389 Directory Server is an LDAP version 3 LDAPv3 compliant server. The base packages include the Lightweight Directory Access Protocol LDAP server and command-line utilities for server administration. Bug Fixes: Entries conflict not resolved by replication BZ1904347 Duplicate entryUSN numbers for...

Xen Code Issues Vulnerabilities

Xen is an open source virtual machine monitor product from the University of Cambridge, UK. The product enables different and incompatible operating systems to run on the same computer and supports runtime migration to ensure uptime and avoid downtime. A security vulnerability exists in Xen versi...

Debian DLA-2492-1 : openssl security update

David Benjamin discovered a flaw in the GENERALNAMEcmp function which could cause a NULL dereference, resulting in denial of service. For Debian 9 stretch, this problem has been fixed in version 1.1.0l-1deb9u2. We recommend that you upgrade your openssl packages. For the detailed security status ...

Debian DLA-2493-1 : openssl1.0 security update

David Benjamin discovered a flaw in the GENERALNAMEcmp function which could cause a NULL dereference, resulting in denial of service. For Debian 9 stretch, this problem has been fixed in version 1.0.2u-1deb9u3. We recommend that you upgrade your openssl1.0 packages. For the detailed security stat...

Debian: Security Advisory (DLA-2493-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES12 Security Update : graphviz (SUSE-SU-2020:3090-1)

This update for graphviz fixes the following issues : CVE-2018-10196: Fixed a null dereference in rebuildvlis bsc1093447. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and...

Debian DSA-4807-1 : openssl - security update

David Benjamin discovered a flaw in the GENERALNAMEcmp function which could cause a NULL dereference, resulting in denial of service. Additional details can be found in the upstream advisory: https://www.openssl.org/news/secadv/20201208.txt C Tenable Network Security, Inc. The descriptive text an...

UBUNTU-CVE-2020-27830

A vulnerability was found in Linux Kernel where in the spkttyioreceivebuf2 function, it would dereference spkttyiosynth without checking whether it is NULL or not, and may lead to a NULL-ptr deref crash...

suricata:fuzz_sigpcap: Null-dereference READ with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5117033767370752 Project: suricata Fuzzing Engine: libFuzzer Fuzz Target: fuzzsigpcap Job Type: libfuzzerubsansuricata Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: NULL Sanitizer: undefined UBSAN...

kubernetes:yaml_FuzzSigYaml: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4920805418598400 Project: kubernetes Fuzzing Engine: libFuzzer Fuzz Target: yamlFuzzSigYaml Job Type: libfuzzerasankubernetes Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN Crash...

wasmtime:api_calls: Null-dereference READ in wasmtime_runtime::traphandlers::trap_handler::h7db4407f2ea80b07

Project: https://github.com/bytecodealliance/wasmtime.git Detailed Report: https://oss-fuzz.com/testcase?key=5720162111848448 Project: wasmtime Fuzzing Engine: libFuzzer Fuzz Target: apicalls Job Type: libfuzzerasanwasmtime Platform Id: linux Crash Type: Null-dereference READ Crash Address:...

suricata:fuzz_sigpcap: Null-dereference READ with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5206038187606016 Project: suricata Fuzzing Engine: libFuzzer Fuzz Target: fuzzsigpcap Job Type: libfuzzerasansuricata Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: NULL Sanitizer: address ASAN Cra...

SUSE-SU-2020:14524-1 Security update for graphviz

This update for graphviz fixes the following issues: - CVE-2018-10196: Fixed a null dereference in rebuildvlis bsc1093447...

SUSE-SU-2020:3090-1 Security update for graphviz

This update for graphviz fixes the following issues: - CVE-2018-10196: Fixed a null dereference in rebuildvlis bsc1093447...

DEBIAN-CVE-2018-18508

In Network Security Services NSS before 3.36.7 and before 3.41.1, a malformed signature can cause a crash due to a null dereference, resulting in a Denial of Service...

CVE-2018-18508

In Network Security Services NSS before 3.36.7 and before 3.41.1, a malformed signature can cause a crash due to a null dereference, resulting in a Denial of Service...

CVE-2018-18508

In Network Security Services NSS before 3.36.7 and before 3.41.1, a malformed signature can cause a crash due to a null dereference, resulting in a Denial of Service...

CVE-2018-18508

In Network Security Services NSS before 3.36.7 and before 3.41.1, a malformed signature can cause a crash due to a null dereference, resulting in a Denial of Service...