5408 matches found
Important: kernel
Issue Overview: A flaw was found in the Linux kernel in linux/net/netfilter/nftablesapi.c of the netfilter subsystem. This flaw allows a local user to cause an out-of-bounds write issue. CVE-2022-1015 A flaw was found in the Linux kernel in net/netfilter/nftablescore.c:nftdochain, which can cause...
OSV-2021-1818 Null-dereference READ
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47847 Crash type: Null-dereference READ Crash state: NULL...
OSV-2022-456 Null-dereference READ in load_glyph
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47798 Crash type: Null-dereference READ Crash state: loadglyph gsfapiftgetcharrastermetrics gsfapidochar...
USN-5448-1 ncurses vulnerabilities
It was discovered that ncurses was not properly checking array bounds when executing the fmtentry function, which could result in an out-of-bounds write. An attacker could possibly use this issue to execute arbitrary code. CVE-2017-10684 It was discovered that ncurses was not properly checking us...
GHSA-286V-PCF5-25RC Nokogiri Implements libxml2 version vulnerable to null pointer dereferencing
A vulnerability found in libxml2 in versions before 2.9.11 shows that it did not propagate errors while parsing XML mixed content, causing a NULL dereference. If an untrusted XML document was parsed in recovery mode and post-validated, the flaw could be used to crash the application. The highest...
RHEL 8 : httpd:2.4 (RHSA-2022:1915)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:1915 advisory. The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fixes: httpd: Request splittin...
httpd: possible NULL dereference or SSRF in forward proxy configurations
There's a null pointer dereference and server-side request forgery flaw in httpd's modproxy module, when it is configured to be used as a forward proxy. A crafted packet could be sent on the adjacent network to the forward proxy that could cause a crash, or potentially SSRF via misdirected Unix...
Moderate: Red Hat Security Advisory: httpd:2.4 security and bug fix update
An update for the httpd:2.4 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
kernel: ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
A vulnerability was found in the Linux kernel's ethtool implementation in the ioctl handling of coalesce settings, where the system attempts to change coalesce settings using the ethtoolsetcoalesce function without verifying the availability of both the .getcoalesce and .setcoalesce callbacks,...
NewStart CGSL MAIN 6.02 : libxml2 Multiple Vulnerabilities (NS-SA-2022-0050)
The remote NewStart CGSL host, running version MAIN 6.02, has libxml2 packages installed that are affected by multiple vulnerabilities: - GNOME project libxml2 v2.9.10 has a global buffer over-read vulnerability in xmlEncodeEntitiesInternal at libxml2/entities.c. The issue has been fixed in commi...
EulerOS Virtualization 2.9.0 : qemu (EulerOS-SA-2022-1619)
According to the versions of the qemu package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - The ahcicommitbuf function in ide/ahci.c in QEMU allows attackers to cause a denial of service NULL dereference when the command...
EulerOS Virtualization 2.9.1 : qemu (EulerOS-SA-2022-1596)
According to the versions of the qemu package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - The ahcicommitbuf function in ide/ahci.c in QEMU allows attackers to cause a denial of service NULL dereference when the command...
GSD-2022-1001889 watch_queue: Fix NULL dereference in error cleanup
watchqueue: Fix NULL dereference in error cleanup This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.33 by commit...
GSD-2022-1001273 watch_queue: Fix NULL dereference in error cleanup
watchqueue: Fix NULL dereference in error cleanup This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.2 by commit...
Updated libarchive packages fix security vulnerability
7zip reader: fix PPMD read beyond boundary. ZIP reader: fix possible out of bounds read. ISO reader: fix possible heap buffer overflow in readchildren. RARv4 redaer: fix multiple issues in RARv4 filter code introduced in libarchive 3.6.0: - fix heap use after free in archivereadformatrarreaddata;...
OSV-2022-308 Null-dereference READ in ubsan_GetStackTrace
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46341 Crash type: Null-dereference READ Crash state: ubsanGetStackTrace...
Security update for apache2 (important)
openSUSE Security Update: Security update for apache2 Announcement ID: openSUSE-SU-2022:0091-1 Rating: important References: 1193942 1193943 1197552 SLE-22733 SLE-22849 Cross-References: CVE-2021-44224 CVE-2021-44790 CVE-2022-1096 CVSS scores: CVE-2021-44224 NVD : 8.2...
GHSA-GV26-JPJ9-C8GQ Incomplete validation in `SparseSparseMinimum`
Impact Incomplete validation in SparseAdd results in allowing attackers to exploit undefined behavior dereferencing null pointers as well as write outside of bounds of heap allocated data: python import tensorflow as tf aindices = tf.ones45, 92, dtype=tf.int64 avalues = tf.ones45, dtype=tf.int64...
OESA-2022-1574 kernel security update
The Linux Kernel, the operating system core itself. Security Fixes: In gcdatasegment in fs/f2fs/gc.c in the Linux kernel before 5.16.3, special files are not considered, leading to a movedatapage NULL pointer dereference.CVE-2021-44879...