CVE-2021-27794

A vulnerability in the authentication mechanism of Brocade Fabric OS versions before Brocade Fabric OS v.9.0.1a, v8.2.3a and v7.4.2h could allow a user to Login with empty password, and invalid password through telnet, ssh and REST...

CVE-2021-37658: Access of Uninitialized Pointer

TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can cause undefined behavior via binding a reference to null pointer in all operations of type tf.rawops.MatrixSetDiagV. The implementation has incomplete validation that the value of k is a...

PT-2021-21762 · Google · Tensorflow

Name of the Vulnerable Software and Affected Versions: TensorFlow versions prior to 2.6.0 TensorFlow version 2.5.1 TensorFlow version 2.4.3 TensorFlow version 2.3.4 Description: The issue arises when a user does not supply arguments that determine a valid sparse tensor, causing the tf.raw...

PT-2021-21783 · Google · Tensorflow

Name of the Vulnerable Software and Affected Versions: TensorFlow versions prior to 2.6.0 TensorFlow versions 2.5.1 and earlier TensorFlow versions 2.4.3 and earlier TensorFlow versions 2.3.4 and earlier Description: An attacker can cause undefined behavior via binding a reference to null pointer...

PT-2021-21789 · Google · Tensorflow

Name of the Vulnerable Software and Affected Versions: TensorFlow versions prior to 2.6.0 TensorFlow versions 2.5.1 and earlier TensorFlow versions 2.4.3 and earlier TensorFlow versions 2.3.4 and earlier Description: An attacker can cause undefined behavior via binding a reference to null pointer...

PT-2021-21791 · Google · Tensorflow

Name of the Vulnerable Software and Affected Versions: TensorFlow versions prior to 2.6.0 TensorFlow versions 2.5.1 and earlier TensorFlow versions 2.4.3 and earlier TensorFlow versions 2.3.4 and earlier Description: An attacker can trigger a denial of service via a CHECK-fail in tf.raw...

CVE-2021-37657: Access of Uninitialized Pointer

TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can cause undefined behavior via binding a reference to null pointer in all operations of type tf.rawops.MatrixDiagV. The implementation has incomplete validation that the value of k is a valid...

CVE-2021-27794: Improper Authentication

A vulnerability in the authentication mechanism of Brocade Fabric OS versions before Brocade Fabric OS v.9.0.1a, v8.2.3a and v7.4.2h could allow a user to Login with empty password, and invalid password through telnet, ssh and REST...

PT-2021-21756 · Google · Tensorflow

Name of the Vulnerable Software and Affected Versions: TensorFlow versions prior to 2.6.0 TensorFlow versions 2.5.1 and earlier TensorFlow versions 2.4.3 and earlier TensorFlow versions 2.3.4 and earlier Description: In affected versions, if the arguments to tf.raw ops.RaggedGather don't determin...

istio:fuzz_parse_inputs: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5083636956266496 Project: istio Fuzzing Engine: libFuzzer Fuzz Target: fuzzparseinputs Job Type: libfuzzerasanistio Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0000076d0c0c Crash State: NULL Sanitizer: address ASAN Recommended...

PT-2021-18162 · D Link · D-Link Dsp-W215

Name of the Vulnerable Software and Affected Versions: D-Link DSP-W215 version 1.10 Description: A Null Pointer Dereference issue exists, which could allow a remote malicious user to cause a denial of service via usr/bin/lighttpd. This can be triggered by sending an HTTP request without a URL in...

cilium:fuzz: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4556447370313728 Project: cilium Fuzzing Engine: libFuzzer Fuzz Target: fuzz Job Type: libfuzzerasancilium Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xffffffffffffffff Crash State: NULL Sanitizer: address ASAN Recommended Securit...

qemu:qemu-fuzz-i386-target-generic-fuzz-virtio-9p-synth: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5958490723057664 Project: qemu Fuzzing Engine: libFuzzer Fuzz Target: qemu-fuzz-i386-target-generic-fuzz-virtio-9p-synth Job Type: libfuzzerubsanqemu Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x296c6c756e28 Crash State: NULL...

fastjson:fuzz: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6697371873443840 Project: fastjson Fuzzing Engine: libFuzzer Fuzz Target: fuzz Job Type: libfuzzerasanfastjson Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x00002484643e Crash State: NULL Sanitizer: address ASAN Recommended Securi...

libredwg:llvmfuzz: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6119870939922432 Project: libredwg Fuzzing Engine: libFuzzer Fuzz Target: llvmfuzz Job Type: libfuzzerubsanlibredwg Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000000020061 Crash State: NULL Sanitizer: undefined UBSAN Recommended...

Brocade Fabric OS Authorization Issues Vulnerability

Brocade Fabric OS FOS is a set of embedded operating systems used in devices such as switches and routers from Brocade USA. Brocade Fabric OS has a security vulnerability. An attacker could exploit the vulnerability to bypass restrictions via empty passwords in order to escalate their privileges...

pcl:ply_reader_fuzzer: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4639761112367104 Project: pcl Fuzzing Engine: libFuzzer Fuzz Target: plyreaderfuzzer Job Type: libfuzzerubsanpcl Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x006162677220 Crash State: NULL Sanitizer: undefined UBSAN Recommended...

protoreflect:fuzz_protoparse: Null-dereference READ with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6235399889485824 Project: protoreflect Fuzzing Engine: libFuzzer Fuzz Target: fuzzprotoparse Job Type: libfuzzerasanprotoreflect Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: NULL Sanitizer: addre...

git:fuzz-commit-graph: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5139385522847744 Project: git Fuzzing Engine: libFuzzer Fuzz Target: fuzz-commit-graph Job Type: libfuzzerasangit Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x61b00025b000 Crash State: NULL Sanitizer: address ASAN Recommended...

gpac:fuzz_parse: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6339950181220352 Project: gpac Fuzzing Engine: libFuzzer Fuzz Target: fuzzparse Job Type: libfuzzerubsangpac Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7efeb73f3440 Crash State: NULL Sanitizer: undefined UBSAN Recommended Securi...