cel-go:fuzz_lpm: Null-dereference READ in pthread_create

Detailed Report: https://oss-fuzz.com/testcase?key=4551058713083904 Project: cel-go Fuzzing Engine: libFuzzer Fuzz Target: fuzzlpm Job Type: libfuzzerasancel-go Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: pthreadcreate cgotrypthreadcreate...

PYSEC-2021-800

TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can craft a TFLite model that would trigger a null pointer dereference, which would result in a crash and denial of service. This is caused by the MLIR optimization of L2NormalizeReduceAxis...

CVE-2021-37638

TensorFlow is an end-to-end open source platform for machine learning. Sending invalid argument for rowpartitiontypes of tf.rawops.RaggedTensorToTensor API results in a null pointer dereference and undefined behavior. The implementation accesses the first element of a user supplied list of values...

PYSEC-2021-265

TensorFlow is an end-to-end open source platform for machine learning. If a user does not provide a valid padding value to tf.rawops.MatrixDiagPartOp, then the code triggers a null pointer dereference if input is empty or produces invalid behavior, ignoring all values after the first. The...

PYSEC-2021-749

TensorFlow is an end-to-end open source platform for machine learning. Sending invalid argument for rowpartitiontypes of tf.rawops.RaggedTensorToTensor API results in a null pointer dereference and undefined behavior. The implementation accesses the first element of a user supplied list of values...

CVE-2021-29294

Null Pointer Dereference vulnerability exists in D-Link DSL-2740R UK1.01, which could let a remove malicious user cause a denial of service via the sendhnapunauthorized function. It could be triggered by sending crafted POST request to /HNAP1/. NOTE: The DSL-2740R and all hardware revisions are...

EulerOS 2.0 SP8 : libxml2 (EulerOS-SA-2021-2306)

According to the versions of the libxml2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - This library allows to manipulate XML files. It includes supportto read, modify and write XML and HTML files. There is DTDs supportthis include...

loki:fuzz_parse_expr: Null-dereference READ in pthread_create

Detailed Report: https://oss-fuzz.com/testcase?key=5908315111555072 Project: loki Fuzzing Engine: libFuzzer Fuzz Target: fuzzparseexpr Job Type: libfuzzerasanloki Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: pthreadcreate cgotrypthreadcreate...

Huawei EulerOS: Security Advisory for libxml2 (EulerOS-SA-2021-2249)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for libxml2 (EulerOS-SA-2021-2275)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for libxml2 (EulerOS-SA-2021-2306)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

fasthttp:fuzz_response: Null-dereference READ in pthread_create

Detailed Report: https://oss-fuzz.com/testcase?key=5479557846138880 Project: fasthttp Fuzzing Engine: libFuzzer Fuzz Target: fuzzresponse Job Type: libfuzzerasanfasthttp Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: pthreadcreate cgotrypthreadcrea...

cascadia:fuzz: Null-dereference READ in pthread_create

Detailed Report: https://oss-fuzz.com/testcase?key=5845664348110848 Project: cascadia Fuzzing Engine: libFuzzer Fuzz Target: fuzz Job Type: libfuzzerasancascadia Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: pthreadcreate cgotrypthreadcreate...

gcloud-go:fuzz_parse_query: Null-dereference READ in pthread_create

Detailed Report: https://oss-fuzz.com/testcase?key=6450457919750144 Project: gcloud-go Fuzzing Engine: libFuzzer Fuzz Target: fuzzparsequery Job Type: libfuzzerasangcloud-go Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: pthreadcreate...

GSD-2021-1001252 cifs: prevent NULL deref in cifs_compose_mount_options()

cifs: prevent NULL deref in cifscomposemountoptions This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.53 by commit...

GSD-2021-1001248 bonding: fix null dereference in bond_ipsec_add_sa()

bonding: fix null dereference in bondipsecaddsa This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.54 by commit...

UVI-2021-1001178 nfsd: fix NULL dereference in nfs3svc_encode_getaclres

nfsd: fix NULL dereference in nfs3svcencodegetaclres This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.13.4 by commit...

GSD-2021-1001169 scsi: target: Fix NULL dereference on XCOPY completion

scsi: target: Fix NULL dereference on XCOPY completion This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.13.6 by commit...

UVI-2021-1001157 bonding: fix null dereference in bond_ipsec_add_sa()

bonding: fix null dereference in bondipsecaddsa This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.13.6 by commit...

PT-2021-29615

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 5.13.5 Description The issue is related to a potential NULL dereference in the cifs compose mount options function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...