CVE-2022-21667: Improper Handling of Exceptional Conditions

soketi is an open-source WebSockets server. There is an unhandled case when reading POST requests which results in the server crashing if it could not read the body of a request. In the event that a POST request is sent to any endpoint of the server with an empty body, even unauthenticated with t...

UBUNTU-CVE-2021-38576

A BIOS bug in firmware for a particular PC model leaves the Platform authorization value empty. This can be used to permanently brick the TPM in multiple ways, as well as to non-permanently DoS the system...

PT-2025-8377

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to the version that includes the fix for the data-race around ep-rdllist Description A data-race issue exists in the Linux kernel, specifically around ep-rdllist. The ep poll function calls ep events available witho...

PT-2021-27101

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.259 Description A potential issue exists where an empty skb could be created due to insufficient checks on the length. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2021-27137

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.167 Description A potential issue exists where an empty skb could be created, but the actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2021-27162

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.87 Description A potential issue exists where an empty skb could be created due to insufficient checks on the length. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2021-27199

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.10 Description A potential issue exists where an empty skb could be created due to insufficient checks on the length. The actual impact and likelihood of an attack have not been confirmed. Recommendations F...

PT-2021-27089

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.294 Description A potential issue exists where an empty skb could be created due to insufficient checks on the length. The actual impact and likelihood of an attack have not been confirmed. Recommendations F...

envoy:h1_capture_persistent_fuzz_test: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5418741012234240 Project: envoy Fuzzing Engine: libFuzzer Fuzz Target: h1capturepersistentfuzztest Job Type: libfuzzerasanenvoy Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7fad60e3cda0 Crash State: NULL Sanitizer: address ASAN...

wget:wget_options_fuzzer: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6571928524029952 Project: wget Fuzzing Engine: libFuzzer Fuzz Target: wgetoptionsfuzzer Job Type: libfuzzerubsanwget Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0000032a2000 Crash State: NULL Sanitizer: undefined UBSAN Recommende...

CLSA-2021-1639681859 Fix CVE(s): CVE-2021-3927, CVE-2021-3928

SECURITY UPDATE: Fix heap-based buffer overflow when reading character past end of line - debian/patches/CVE-2021-3927.patch: Correct the cursor column in src/exdocmd.c. - CVE-2021-3927 SECURITY UPDATE: Fix stack-based buffer overflow when reading uninitialized memory when giving spell suggestion...

golang: archive/zip: Reader.Open panics on empty string

A vulnerability was found in archive/zip of the Go standard library. Applications written in Go where Reader.Open the API implementing io/fs.FS introduced in Go 1.16 can panic when parsing a crafted ZIP archive containing completely invalid names or an empty filename argument...

libyang:lyd_parse_mem_xml: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5614477905625088 Project: libyang Fuzzing Engine: libFuzzer Fuzz Target: lydparsememxml Job Type: libfuzzermsanlibyang Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: memory MSAN Crash Revision:...

PT-2021-8231

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.16.0-rc1+ Description The vulnerability is related to a division error in the netem enqueue function, which occurs when the skb-len and skb-data len are both zero. This error is caused by a lack of check on the...

istio:fuzz_render_manifests: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6019386528366592 Project: istio Fuzzing Engine: libFuzzer Fuzz Target: fuzzrendermanifests Job Type: libfuzzerasanistio Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0000150dc34f Crash State: NULL Sanitizer: address ASAN Recommende...

cel-go:fuzz_compile: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4994799111897088 Project: cel-go Fuzzing Engine: libFuzzer Fuzz Target: fuzzcompile Job Type: libfuzzerasancel-go Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xffffffffffffffff Crash State: NULL Sanitizer: address ASAN Recommended...

gvisor:state_load_fuzz: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5560232110063616 Project: gvisor Fuzzing Engine: libFuzzer Fuzz Target: stateloadfuzz Job Type: libfuzzerasangvisor Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000000201328 Crash State: NULL Sanitizer: address ASAN Recommended...

Symlink Attack

glib2 is vulnerable to symlink attack. The vulnerability exists due to a dangling symlink which incorrectly creates the target of the symlink as an empty file, which have security relevance if the symlink is attacker-controlled...

matio:matio_fuzzer: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5520852813217792 Project: matio Fuzzing Engine: libFuzzer Fuzz Target: matiofuzzer Job Type: libfuzzerubsanmatio Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7f00500cfba0 Crash State: NULL Sanitizer: undefined UBSAN Recommended...

libbpf:bpf-object-fuzzer: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6033144516575232 Project: libbpf Fuzzing Engine: libFuzzer Fuzz Target: bpf-object-fuzzer Job Type: libfuzzerubsanlibbpf Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7f640000002b Crash State: NULL Sanitizer: undefined UBSAN...