httpd: possible NULL dereference or SSRF in forward proxy configurations

There's a null pointer dereference and server-side request forgery flaw in httpd's modproxy module, when it is configured to be used as a forward proxy. A crafted packet could be sent on the adjacent network to the forward proxy that could cause a crash, or potentially SSRF via misdirected Unix...

GSD-2022-1006554 bonding: fix NULL deref in bond_rr_gen_slave_id

bonding: fix NULL deref in bondrrgenslaveid This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.71 by commit...

PT-2022-34770 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.14 through v5.19.11 Description: A potential security issue exists due to a NULL dereference in the bond rr gen slave id function. The actual impact and attack plausibility have not yet been proven. Recommendations: F...

EulerOS Virtualization 3.0.6.6 : qemu (EulerOS-SA-2022-2533)

According to the versions of the qemu packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - The ahcicommitbuf function in ide/ahci.c in QEMU allows attackers to cause a denial of service NULL dereference when the command...

PT-2022-34726 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 5.14 through 5.19 Description: A NULL dereference issue was discovered in the bonding functionality. The issue was introduced in version v5.14 and is fixed in Linux Kernel version v6.0. Recommendations: For Linux Kernel...

PT-2022-36664 · Git +1 · Suricata

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a null-dereference read crash. The crash involves several components, including AlertJson, JsonAlertLogger, and OutputPacketLog. ...

httpd: possible NULL dereference or SSRF in forward proxy configurations

There's a null pointer dereference and server-side request forgery flaw in httpd's modproxy module, when it is configured to be used as a forward proxy. A crafted packet could be sent on the adjacent network to the forward proxy that could cause a crash, or potentially SSRF via misdirected Unix...

AZL-11048 CVE-2022-3303 affecting package kernel for versions less than 5.15.70.1-1

A race condition flaw was found in the Linux kernel sound subsystem due to improper locking. It could lead to a NULL pointer dereference while handling the SNDCTLDSPSYNC ioctl. A privileged local user root or member of the audio group could use this flaw to crash the system, resulting in a denial...

PT-2024-8460 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.0.0-rc4-00133-g64ae13ed4784 Description: The vulnerability is related to a NULL dereference in the bond rr gen slave id function of the bonding driver. This occurs when a bond is initially created with an...

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service DoS attacks. A malicious user is able to cause a null dereference by providing empty function attributes to the mlir::tfg::ConvertGenericFunctionToFunctionDef function, causing the application to crash...

GSD-2022-1005885 virtio-gpu: fix a missing check to avoid NULL dereference

virtio-gpu: fix a missing check to avoid NULL dereference This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.137 by commit...

GSD-2022-1005638 virtio-gpu: fix a missing check to avoid NULL dereference

virtio-gpu: fix a missing check to avoid NULL dereference This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.61 by commit...

PT-2022-33770 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.15 through v5.15.62 Description: A NULL dereference issue exists in the ntfs update mftmirr function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions v5.1...

PT-2022-34167 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.137 Description: The issue is related to a null dereference in the nf tables component of the netfilter subsystem. This problem was introduced in version v3.16 and is fixed in version v5.10.137. The actual...

PT-2022-34439 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.256 Description: The issue is related to a null dereference due to a zeroed list head in the nf tables component of netfilter. The actual impact and attack plausibility have not yet been proven...

PT-2022-34577 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.9.326 Description: The issue is related to a null dereference in the nf tables component of the netfilter framework. This problem was introduced in version v3.16 and is fixed in version v4.9.326. The actual...

GSD-2022-1005346 netfilter: nf_tables: fix null deref due to zeroed list head

netfilter: nftables: fix null deref due to zeroed list head This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005298 virtio-gpu: fix a missing check to avoid NULL dereference

virtio-gpu: fix a missing check to avoid NULL dereference This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005255 kernfs: fix potential NULL dereference in __kernfs_remove

kernfs: fix potential NULL dereference in kernfsremove This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005236 usb: xhci_plat_remove: avoid NULL dereference

usb: xhciplatremove: avoid NULL dereference This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...