selinux:secilc-fuzzer: Heap-use-after-free in cil_list_destroy

Project: https://github.com/SELinuxProject/selinux.git Detailed Report: https://oss-fuzz.com/testcase?key=4833924441047040 Project: selinux Fuzzing Engine: honggfuzz Fuzz Target: secilc-fuzzer Job Type: honggfuzzasanselinux Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address:...

libsepol: use-after-free in __cil_verify_classperms()

The CIL compiler in SELinux 3.2 has a use-after-free in cilverifyclassperms called from cilverifyclasspermission and cilpreverifyhelper...

libsepol: use-after-free in cil_reset_classpermission()

The CIL compiler in SELinux 3.2 has a use-after-free in cilresetclasspermission called from cilresetclasspermsset and cilresetclasspermslist...

SELinux Heap Buffer Overflow DoS

The vulnerability of the cilverifyclassperms function in the SELinux access control system is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to trigger a service failure...

DEBIAN-CVE-2021-36085

The CIL compiler in SELinux 3.2 has a use-after-free in cilverifyclassperms called from verifymappermclassperms and hashtabmap...

SELinux Resource Management Error Vulnerability

SELinux is a Linux subsystem of the National Security Agency that utilizes a secure architecture that allows administrators to better control who has access to the system. A security vulnerability exists in SELinux version 3.2, which stems from the CIL compiler of SELinux having an after-free in...

selinux:secilc-fuzzer: Use-of-uninitialized-value in __add_classes_from_classperms_list

Project: https://github.com/SELinuxProject/selinux.git Detailed Report: https://oss-fuzz.com/testcase?key=4632009126313984 Project: selinux Fuzzing Engine: libFuzzer Fuzz Target: secilc-fuzzer Job Type: libfuzzermsanselinux Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

PT-2021-28102

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-use-after-free READ 8 crash type. The crash state involves several functions, including cil verify classperms, verify map pe...

PT-2021-28099

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-use-after-free READ 8 crash type. The crash state involves several functions, including cil verify classperms, cil verify...

PT-2021-3581

Name of the Vulnerable Software and Affected Versions SELinux version 3.2 Description The issue is related to a use-after-free in the cil verify classperms function of the SELinux access control system. This can potentially allow an attacker to cause a denial of service. The cil verify classperms...

PT-2021-3597

Name of the Vulnerable Software and Affected Versions SELinux version 3.2 Description The issue is related to a use-after-free error in the cil verify classperms function of the SELinux access control system. This error can be exploited to cause a denial of service. The cil verify classperms...