6713 matches found
RHEL 8 : krb5 (RHSA-2021:3576)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:3576 advisory. Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending...
PT-2021-27788
Name of the Vulnerable Software and Affected Versions Assimp affected versions not specified Description The issue is related to a null-dereference read crash. Technical details about the crash include the unzOpenCurrentFile3 and unzOpenCurrentFile functions, as well as the...
assimp:assimp_fuzzer: Null-dereference READ in unzOpenCurrentFile3
Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=5431707080196096 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzerasanassimp Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000...
fio:fuzz_parseini: Crash with empty stacktrace
Detailed Report: https://oss-fuzz.com/testcase?key=6236771218751488 Project: fio Fuzzing Engine: libFuzzer Fuzz Target: fuzzparseini Job Type: libfuzzerubsanfio Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00ad9e1702a0 Crash State: NULL Sanitizer: undefined UBSAN Recommended...
matio:matio_fuzzer: Null-dereference READ with empty stacktrace
Detailed Report: https://oss-fuzz.com/testcase?key=6152210661113856 Project: matio Fuzzing Engine: libFuzzer Fuzz Target: matiofuzzer Job Type: libfuzzerubsanmatio Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: NULL Sanitizer: undefined UBSAN Crash...
golang-protobuf:textfuzz: Crash with empty stacktrace
Detailed Report: https://oss-fuzz.com/testcase?key=4980355610836992 Project: golang-protobuf Fuzzing Engine: libFuzzer Fuzz Target: textfuzz Job Type: libfuzzerasangolang-protobuf Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000061377022 Crash State: NULL Sanitizer: address ASAN...
vitess:write_packet_fuzzer: Null-dereference READ in pthread_create
Detailed Report: https://oss-fuzz.com/testcase?key=4614558212292608 Project: vitess Fuzzing Engine: libFuzzer Fuzz Target: writepacketfuzzer Job Type: libfuzzerasanvitess Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: pthreadcreate...
go-coredns:fuzz_plugin_cache: Null-dereference READ in pthread_create
Detailed Report: https://oss-fuzz.com/testcase?key=5466245361696768 Project: go-coredns Fuzzing Engine: libFuzzer Fuzz Target: fuzzplugincache Job Type: libfuzzerasango-coredns Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: pthreadcreate...
WS-2021-0594
In assimp 5.1.0 through 5.1.5 there is Null-dereference READ in unzOpenCurrentFile3...
dav1d:dav1d_fuzzer: Null-dereference READ in linux-gate.so.1
Detailed Report: https://oss-fuzz.com/testcase?key=5179575236165632 Project: dav1d Fuzzing Engine: libFuzzer Fuzz Target: dav1dfuzzer Job Type: libfuzzerasani386dav1d Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x00000000 Crash State: linux-gate.so.1 Sanitizer: address ASA...
PT-2024-11411
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A possible NULL dereference issue has been resolved in the Linux kernel. The issue is related to the iwlwifi module, specifically in the iwl mvm remove time event function, where a check...
ipfs:ipfs_ds_flatfs: Null-dereference READ with empty stacktrace
Detailed Report: https://oss-fuzz.com/testcase?key=6240620362465280 Project: ipfs Fuzzing Engine: libFuzzer Fuzz Target: ipfsdsflatfs Job Type: libfuzzerasanipfs Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: NULL Sanitizer: address ASAN Crash...
go-sftp:fuzz_sftp: Null-dereference READ in pthread_create
Detailed Report: https://oss-fuzz.com/testcase?key=5196841726115840 Project: go-sftp Fuzzing Engine: libFuzzer Fuzz Target: fuzzsftp Job Type: libfuzzerasango-sftp Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: pthreadcreate xcgosysthreadcreate...
libvips:jpegsave_file_fuzzer: Null-dereference READ with empty stacktrace
Project: https://github.com/libvips/libvips.git Detailed Report: https://oss-fuzz.com/testcase?key=6292199667531776 Project: libvips Fuzzing Engine: libFuzzer Fuzz Target: jpegsavefilefuzzer Job Type: libfuzzerasanlibvips Platform Id: linux Crash Type: Null-dereference READ Crash Address:...
wolfmqtt:wolfmqtt-fuzzer: Null-dereference READ with empty stacktrace
Detailed Report: https://oss-fuzz.com/testcase?key=4552949171355648 Project: wolfmqtt Fuzzing Engine: libFuzzer Fuzz Target: wolfmqtt-fuzzer Job Type: libfuzzerubsanwolfmqtt Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: NULL Sanitizer: undefined...
openSUSE: Security Advisory for openexr (openSUSE-SU-2021:1198-1)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
vitess:is_dml_fuzzer: Null-dereference READ in pthread_create
Detailed Report: https://oss-fuzz.com/testcase?key=5270298399211520 Project: vitess Fuzzing Engine: libFuzzer Fuzz Target: isdmlfuzzer Job Type: libfuzzerasanvitess Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: pthreadcreate cgotrypthreadcreate...
OPENSUSE-SU-2021:1198-1 Security update for openexr
This update for openexr fixes the following issues: - CVE-2021-20298 bsc1188460: Fixed Out-of-memory in B44Compressor - CVE-2021-20299 bsc1188459: Fixed Null-dereference READ in Imf25:Header:operator - CVE-2021-20300 bsc1188458: Fixed Integer-overflow in Imf25:hufUncompress - CVE-2021-20302...
USN-5044-1 linux, linux-aws, linux-aws-hwe, linux-azure, linux-azure-4.15, linux-gcp, linux-gcp-4.15, linux-hwe, linux-kvm, linux-oracle, linux-raspi2, linux-snapdragon vulnerabilities
It was discovered that the bluetooth subsystem in the Linux kernel did not properly handle HCI device initialization failure, leading to a double-free vulnerability. An attacker could use this to cause a denial of service or possibly execute arbitrary code. CVE-2021-3564 It was discovered that th...