SUSE CVE-2024-26968

In the Linux kernel, the following vulnerability has been resolved: clk: qcom: gcc-ipq9574: fix terminating of frequency table arrays The frequency table arrays are supposed to be terminated with an empty element. Add such entry to the end of the arrays where it is missing in order to avoid...

SUSE CVE-2024-26970

In the Linux kernel, the following vulnerability has been resolved: clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays The frequency table arrays are supposed to be terminated with an empty element. Add such entry to the end of the arrays where it is missing in order to avoid...

gluon:fuzz_parse_dec: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4997670448988160 Project: gluon Fuzzing Engine: libFuzzer Fuzz Target: fuzzparsedec Job Type: libfuzzerasangluon Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xfffffffffffffff0 Crash State: NULL Sanitizer: address ASAN Recommended...

astro-compiler:fuzz_scope_html: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5926038602317824 Project: astro-compiler Fuzzing Engine: libFuzzer Fuzz Target: fuzzscopehtml Job Type: libfuzzerasanastro-compiler Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xfffffffffffffff0 Crash State: NULL Sanitizer: address...

lotus:fuzz_block_msg: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5524585794568192 Project: lotus Fuzzing Engine: libFuzzer Fuzz Target: fuzzblockmsg Job Type: libfuzzerasanlotus Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xfffffffffffffff0 Crash State: NULL Sanitizer: address ASAN Recommended...

go-git:fuzz_parser: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4650681523830784 Project: go-git Fuzzing Engine: libFuzzer Fuzz Target: fuzzparser Job Type: libfuzzerasango-git Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xfffffffffffffff0 Crash State: NULL Sanitizer: address ASAN Recommended...

CVE-2024-27047

A vulnerability was found in the Linux kernel's net driver phydevice.c in the phygetinternaldelay function, where a lack of proper checks can cause a potential NULL pointer dereference to occur when the function attempts to access an empty array. The error occurs if the driver calls...

DEBIAN-CVE-2024-27047

In the Linux kernel, the following vulnerability has been resolved: net: phy: fix phygetinternaldelay accessing an empty array The phygetinternaldelay function could try to access to an empty array in the case that the driver is calling phygetinternaldelay without defining delayvalues and...

UBUNTU-CVE-2024-27047

In the Linux kernel, the following vulnerability has been resolved: net: phy: fix phygetinternaldelay accessing an empty array The phygetinternaldelay function could try to access to an empty array in the case that the driver is calling phygetinternaldelay without defining delayvalues and...

CVE-2024-26969

In the Linux kernel, the following vulnerability has been resolved: clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays The frequency table arrays are supposed to be terminated with an empty element. Add such entry to the end of the arrays where it is missing in order to avoid...

DEBIAN-CVE-2024-26967

In the Linux kernel, the following vulnerability has been resolved: clk: qcom: camcc-sc8280xp: fix terminating of frequency table arrays The frequency table arrays are supposed to be terminated with an empty element. Add such entry to the end of the arrays where it is missing in order to avoid...

DEBIAN-CVE-2024-26966

In the Linux kernel, the following vulnerability has been resolved: clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays The frequency table arrays are supposed to be terminated with an empty element. Add such entry to the end of the arrays where it is missing in order to avoid...

liblouis:fuzz_backtranslate: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5972424624504832 Project: liblouis Fuzzing Engine: libFuzzer Fuzz Target: fuzzbacktranslate Job Type: libfuzzerubsanliblouis Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x5d4ff65fe000 Crash State: NULL Sanitizer: undefined UBSAN...

protoc-gen-validate:FuzzTest: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5192249485885440 Project: protoc-gen-validate Fuzzing Engine: libFuzzer Fuzz Target: FuzzTest Job Type: libfuzzerasanprotoc-gen-validate Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xfffffffffffffff0 Crash State: NULL Sanitizer:...

zstd: mysql: buffer overrun in util.c

A vulnerability was found in zstd. This flaw allows an attacker to supply an empty string as an argument to the command line tool to cause a buffer overrun...

openssl: AES-SIV cipher implementation contains a bug that causes it to ignore empty associated data entries

A vulnerability was found in OpenSSL. The AES-SIV cipher implementation contains a bug that causes it to ignore empty associated data entries, which are unauthenticated as a consequence. Applications that use the AES-SIV algorithm and want to authenticate empty data entries as associated data can...

SUSE CVE-2024-3860

An out-of-memory condition during object initialization could result in an empty shape list. If the JIT subsequently traced the object it would crash. This vulnerability affects Firefox 125...

DHCP Server security vulnerabilities

Open DHCP Server is an open source software from an individual developer that provides DHCP services. A security vulnerability exists in DHCP Server ec976d2 and prior versions, which stems from the presence of a NULL pointer dereference that allows remote attackers to cause a denial of service by...

PT-2024-24194

Name of the Vulnerable Software and Affected Versions Libdwarf version 0.9.1 Description A heap use-after-free issue was discovered in Libdwarf via the dw empty errlist item function at /libdwarf/dwarf alloc.c. Recommendations For Libdwarf version 0.9.1, at the moment, there is no information abo...

AES-SIV implementation ignores empty associated data entries (CVE-2023-2975)

Issue summary: The AES-SIV cipher implementation contains a bug that causes it to ignore empty associated data entries which are unauthenticated as a consequence. Impact summary: Applications that use the AES-SIV algorithm and want to authenticate empty data entries as associated data can be...