ALPINE-CVE-2023-46838

Transmit requests in Xen's virtual network protocol can consist of multiple parts. While not really useful, except for the initial part any of them may be of zero length, i.e. carry no data at all. Besides a certain initial portion of the to be transferred data, these parts are directly translate...

Code injection

Transmit requests in Xen's virtual network protocol can consist of multiple parts. While not really useful, except for the initial part any of them may be of zero length, i.e. carry no data at all. Besides a certain initial portion of the to be transferred data, these parts are directly translate...

UBUNTU-CVE-2023-46838

Transmit requests in Xen's virtual network protocol can consist of multiple parts. While not really useful, except for the initial part any of them may be of zero length, i.e. carry no data at all. Besides a certain initial portion of the to be transferred data, these parts are directly translate...

CVE-2023-46838 Linux: netback processing of zero-length transmit fragment

Transmit requests in Xen's virtual network protocol can consist of multiple parts. While not really useful, except for the initial part any of them may be of zero length, i.e. carry no data at all. Besides a certain initial portion of the to be transferred data, these parts are directly translate...

CVE-2023-46838

CVE-2023-46838 affects Xen’s virtualization networking path where multi‑part transmitted requests can include zero‑length parts. If all parts of an SKB are zero length, the Linux networking code may dereference NULL, potentially enabling local or guest‑to‑host disruption. Public advisories ( Xen/...

PT-2024-7625

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a NULL dereference bug in the fs/ntfs3 component of the Linux kernel. This bug occurs when the ntfs load attr list function is called, and the "size" comes from...

CVE-2024-0727

A flaw was found in OpenSSL. The optional ContentInfo fields can be set to null, even if the "type" is a valid value, which can lead to a null dereference error that may cause a denial of service. Mitigation Mitigation for this issue is either not available or the currently available options don'...

Moderate: Red Hat Security Advisory: libxml2 security update

An update for libxml2 is now available for Red Hat Enterprise Linux 8.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

PT-2024-8295

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a NULL-dereference in the brcmstb-avs-cpufreq component of the Linux kernel. The cpufreq cpu get function may return NULL, and to avoid this, a check has been add...

publicsuffix-list:FuzzTest: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6659913262628864 Project: publicsuffix-list Fuzzing Engine: libFuzzer Fuzz Target: FuzzTest Job Type: libfuzzerasanpublicsuffix-list Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x78bff7729b41 Crash State: NULL Sanitizer: address AS...

wget:wget_options_fuzzer: Null-dereference READ with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6245018549420032 Project: wget Fuzzing Engine: libFuzzer Fuzz Target: wgetoptionsfuzzer Job Type: libfuzzerasanwget Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: NULL Sanitizer: address ASAN Crash...

woff2:convert_woff2ttf_fuzzer_new_entry: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4684628745060352 Project: woff2 Fuzzing Engine: libFuzzer Fuzz Target: convertwoff2ttffuzzernewentry Job Type: libfuzzerasanwoff2 Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN Cras...

icu:plurrule_fuzzer: Null-dereference READ with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5105079052992512 Project: icu Fuzzing Engine: libFuzzer Fuzz Target: plurrulefuzzer Job Type: libfuzzerasanicu Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: NULL Sanitizer: address ASAN Crash...

python-cryptography security update

36.0.1-4.0.1 - Fix CVE-2023-49083: NULL-dereference when loading PKCS7 certificates Orabug: 36119159 36.0.1-4 - Fix FTBFS caused by rsapkcs1implicitrejection OpenSSL feature, resolves rhbz2203840 36.0.1-3 - Fix CVE-2023-23931: Don't allow updateinto to mutate immutable objects, resolves rhbz21723...

stb:stbi_read_fuzzer: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6550661395185664 Project: stb Fuzzing Engine: libFuzzer Fuzz Target: stbireadfuzzer Job Type: libfuzzerasanstb Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7f4a03cab3b9 Crash State: NULL Sanitizer: address ASAN Recommended Securit...

cfengine:string_fuzzer: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6464674136653824 Project: cfengine Fuzzing Engine: afl Fuzz Target: stringfuzzer Job Type: aflasancfengine Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN Crash Revision:...

orbit:PeCoffUnwindInfosFuzzer: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5233968706289664 Project: orbit Fuzzing Engine: libFuzzer Fuzz Target: PeCoffUnwindInfosFuzzer Job Type: libfuzzerasanorbit Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN Crash...

OESA-2024-1042 libssh security update

The ssh library was designed to be used by programmers needing a working SSH implementation by the mean of a library. The complete control of the client is made by the programmer. With libssh, you can remotely execute programs, transfer files, use a secure and transparent tunnel for your remote...

OESA-2024-1044 libssh security update

The ssh library was designed to be used by programmers needing a working SSH implementation by the mean of a library. The complete control of the client is made by the programmer. With libssh, you can remotely execute programs, transfer files, use a secure and transparent tunnel for your remote...

PT-2024-3462

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the function amdgpu mca smu get mca entry in the Linux kernel, where the variable mca funcs is dereferenced before a NULL check. This can lead to a denial of...