httpd: possible NULL dereference or SSRF in forward proxy configurations

There's a null pointer dereference and server-side request forgery flaw in httpd's modproxy module, when it is configured to be used as a forward proxy. A crafted packet could be sent on the adjacent network to the forward proxy that could cause a crash, or potentially SSRF via misdirected Unix...

Moderate: Red Hat Security Advisory: httpd:2.4 security and bug fix update

An update for the httpd:2.4 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

kernel: ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()

A vulnerability was found in the Linux kernel's ethtool implementation in the ioctl handling of coalesce settings, where the system attempts to change coalesce settings using the ethtoolsetcoalesce function without verifying the availability of both the .getcoalesce and .setcoalesce callbacks,...

NewStart CGSL MAIN 6.02 : libxml2 Multiple Vulnerabilities (NS-SA-2022-0050)

The remote NewStart CGSL host, running version MAIN 6.02, has libxml2 packages installed that are affected by multiple vulnerabilities: - GNOME project libxml2 v2.9.10 has a global buffer over-read vulnerability in xmlEncodeEntitiesInternal at libxml2/entities.c. The issue has been fixed in commi...

PT-2025-8423

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been identified, where the mdp5 pipe release function does not check for errors returned by mdp5 get global state, potentially leading to a NULL...

PT-2025-8421

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A issue in the Linux kernel has been identified where the mdp5 mixer release function does not check for an error return when acquiring the modeset lock, potentially leading to a NULL...

EulerOS Virtualization 2.9.1 : qemu (EulerOS-SA-2022-1596)

According to the versions of the qemu package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - The ahcicommitbuf function in ide/ahci.c in QEMU allows attackers to cause a denial of service NULL dereference when the command...

EulerOS Virtualization 2.9.0 : qemu (EulerOS-SA-2022-1619)

According to the versions of the qemu package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - The ahcicommitbuf function in ide/ahci.c in QEMU allows attackers to cause a denial of service NULL dereference when the command...

GSD-2022-1001889 watch_queue: Fix NULL dereference in error cleanup

watchqueue: Fix NULL dereference in error cleanup This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.33 by commit...

GSD-2022-1001273 watch_queue: Fix NULL dereference in error cleanup

watchqueue: Fix NULL dereference in error cleanup This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.2 by commit...

PT-2022-30459

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 5.4.189 Description A potential security issue exists due to a NULL dereference in the diFree function of the jfs filesystem. The actual impact and attack plausibility have not yet been proven. Recommendations Fo...

PT-2022-30162

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.8 through v5.15.32 Description A NULL dereference issue in error cleanup was discovered. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version v5.8 and fixed in versio...

PT-2022-29853

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.8 through v5.16.18 Description A NULL dereference issue exists in the error cleanup of the watch queue functionality. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-29968

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 5.15.34 Description A potential security issue exists due to a NULL dereference in the diFree function of the jfs filesystem. The actual impact and attack plausibility have not yet been proven. Recommendations Fo...

PT-2022-29546

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.8 through v5.17.1 Description A NULL dereference issue exists in the error cleanup of the watch queue functionality. The actual impact and attack plausibility have not yet been proven. This issue was introduced in...

PT-2022-29640

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.20 Description The issue is related to a potential NULL dereference in the diFree function of the jfs filesystem. The actual impact and attack plausibility have not yet been proven. Recommendations For Linu...

PT-2022-29297

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.3 Description The issue is related to a potential NULL dereference in the diFree function of the jfs filesystem. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2022-29337

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.3 Description A potential NULL dereference issue has been identified. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.17.3, update t...

PT-2022-30262

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.111 Description The issue is related to a potential NULL dereference in the diFree function of the jfs filesystem. The actual impact and attack plausibility have not yet been proven. Recommendations For Lin...

PT-2022-30384

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.8 through v5.10.109 Description A NULL dereference issue exists in the error cleanup of the watch queue. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions v5....