libigl:igl_fuzzer: Null-dereference READ in ubsan_GetStackTrace

Detailed Report: https://oss-fuzz.com/testcase?key=4788551217184768 Project: libigl Fuzzing Engine: libFuzzer Fuzz Target: iglfuzzer Job Type: libfuzzerubsanlibigl Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: ubsanGetStackTrace Sanitizer: undefin...

matio:matio_fuzzer: Null-dereference READ in ubsan_GetStackTrace

Detailed Report: https://oss-fuzz.com/testcase?key=4807548193079296 Project: matio Fuzzing Engine: libFuzzer Fuzz Target: matiofuzzer Job Type: libfuzzerubsanmatio Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: ubsanGetStackTrace Sanitizer: undefin...

CVE-2021-39849

Acrobat Reader DC versions 2021.005.20060 and earlier, 2020.004.30006 and earlier and 2017.011.30199 and earlier are affected by a Null pointer dereference vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of th...

openexr:openexr_exrcheck_fuzzer: Null-dereference READ in ubsan_GetStackTrace

Project: https://github.com/AcademySoftwareFoundation/openexr.git Detailed Report: https://oss-fuzz.com/testcase?key=5005291003969536 Project: openexr Fuzzing Engine: libFuzzer Fuzz Target: openexrexrcheckfuzzer Job Type: libfuzzerubsanopenexr Platform Id: linux Crash Type: Null-dereference READ...

cras:rclient_message: Null-dereference READ in audio_io_thread

Detailed Report: https://oss-fuzz.com/testcase?key=5535842613985280 Project: cras Fuzzing Engine: libFuzzer Fuzz Target: rclientmessage Job Type: libfuzzerasancras Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: audioiothread pthreadcreate...

Huawei EulerOS: Security Advisory for krb5 (EulerOS-SA-2021-2466)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

cras:rclient_message: Null-dereference READ in ubsan_GetStackTrace

Detailed Report: https://oss-fuzz.com/testcase?key=5744697679675392 Project: cras Fuzzing Engine: libFuzzer Fuzz Target: rclientmessage Job Type: libfuzzerubsancras Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: ubsanGetStackTrace Sanitizer:...

krb5 security update

1.18.2-8.3 - Fix KDC null deref on TGS inner body null server CVE-2021-37750 - Resolves: 1997600 1.18.2-8.2 - Rebuild for rpminspect; no code changes - Resolves: 1983728 1.18.2-8.1 - Fix KDC null deref on bad encrypted challenge CVE-2021-36222 - Resolves: 1983728...

CentOS 8 : krb5 (CESA-2021:3576)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:3576 advisory. - krb5: Sending a request containing PA-ENCRYPTED-CHALLENGE padata element without using FAST could result in NULL dereference in KDC which leads to Do...

teleport:parse_fuzz: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6257163295653888 Project: teleport Fuzzing Engine: libFuzzer Fuzz Target: parsefuzz Job Type: libfuzzerasanteleport Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN Crash Revision:...

envoy:h1_capture_direct_response_persistent_fuzz_test: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6676496622682112 Project: envoy Fuzzing Engine: libFuzzer Fuzz Target: h1capturedirectresponsepersistentfuzztest Job Type: libfuzzerasanenvoy Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7f17b6184da0 Crash State: NULL Sanitizer:...

krb5: Sending a request containing PA-ENCRYPTED-CHALLENGE padata element without using FAST could result in NULL dereference in KDC which leads to DoS

A flaw was found in krb5. This flaw allows an unauthenticated attacker to cause a NULL dereference in the KDC by sending a request containing a PA-ENCRYPTED-CHALLENGE padata element without using FAST. The highest threat from this vulnerability is to system availability...

RLSA-2021:3576 Moderate: krb5 security update

Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending passwords over the network in unencrypted form. It allows clients and servers to authenticate to each other with the help of a trusted third party, the...

PT-2024-11366

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue arises when qeth set online calls qeth clear working pool list to roll back after an error exit from qeth hardsetup card, potentially accessing card-qdio.in q before it was...

RHEL 8 : krb5 (RHSA-2021:3576)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:3576 advisory. Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending...

PT-2021-27788

Name of the Vulnerable Software and Affected Versions Assimp affected versions not specified Description The issue is related to a null-dereference read crash. Technical details about the crash include the unzOpenCurrentFile3 and unzOpenCurrentFile functions, as well as the...

assimp:assimp_fuzzer: Null-dereference READ in unzOpenCurrentFile3

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=5431707080196096 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzerasanassimp Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000...

fio:fuzz_parseini: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6236771218751488 Project: fio Fuzzing Engine: libFuzzer Fuzz Target: fuzzparseini Job Type: libfuzzerubsanfio Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00ad9e1702a0 Crash State: NULL Sanitizer: undefined UBSAN Recommended...

matio:matio_fuzzer: Null-dereference READ with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6152210661113856 Project: matio Fuzzing Engine: libFuzzer Fuzz Target: matiofuzzer Job Type: libfuzzerubsanmatio Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: NULL Sanitizer: undefined UBSAN Crash...

golang-protobuf:textfuzz: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4980355610836992 Project: golang-protobuf Fuzzing Engine: libFuzzer Fuzz Target: textfuzz Job Type: libfuzzerasangolang-protobuf Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000061377022 Crash State: NULL Sanitizer: address ASAN...