grpc-go:fuzz_helloclient: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6754505314664448 Project: grpc-go Fuzzing Engine: libFuzzer Fuzz Target: fuzzhelloclient Job Type: libfuzzerasangrpc-go Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN Crash Revision...

OESA-2022-1574 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In gcdatasegment in fs/f2fs/gc.c in the Linux kernel before 5.16.3, special files are not considered, leading to a movedatapage NULL pointer dereference.CVE-2021-44879...

PT-2025-8214

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved. The issue was related to the exposure of the chip-tpm mutex in the tpm-space.c file, which could lead to a NULL dereference on the...

tint:tint_spirv_tools_hlsl_writer_fuzzer: Null-dereference READ in ubsan_GetStackTrace

Detailed Report: https://oss-fuzz.com/testcase?key=5639073652408320 Project: tint Fuzzing Engine: libFuzzer Fuzz Target: tintspirvtoolshlslwriterfuzzer Job Type: libfuzzerubsantint Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: ubsanGetStackTrace...

ghostscript:gstoraster_fuzzer: Null-dereference READ in gstate_clone_core

Detailed Report: https://oss-fuzz.com/testcase?key=5571707845345280 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: gstateclonecore gsgsa...

clamav:clamav_scanfile_in_fuzzer: Null-dereference READ in ubsan_GetStackTrace

Detailed Report: https://oss-fuzz.com/testcase?key=6696920154767360 Project: clamav Fuzzing Engine: libFuzzer Fuzz Target: clamavscanfileinfuzzer Job Type: libfuzzerubsanclamav Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: ubsanGetStackTrace...

OSV-2022-216 Null-dereference READ in cl_finish_hash

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45197 Crash type: Null-dereference READ Crash state: clfinishhash hashimptbl scanpeimp...

PT-2022-36859

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description The issue is related to a null-dereference read crash. The crash occurs in the following functions: cl finish hash, hash imptbl, scan pe imp...

radon:fuzz: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5149206677946368 Project: radon Fuzzing Engine: libFuzzer Fuzz Target: fuzz Job Type: libfuzzerasanradon Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00002f891359 Crash State: NULL Sanitizer: address ASAN Recommended Security...

clamav:clamav_scanfile_PE_fuzzer: Null-dereference READ in cl_finish_hash

Detailed Report: https://oss-fuzz.com/testcase?key=6250880830144512 Project: clamav Fuzzing Engine: libFuzzer Fuzz Target: clamavscanfilePEfuzzer Job Type: libfuzzerasanclamav Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: clfinishhash hashimptbl...

PT-2022-7514

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the drm/vrr component of the Linux kernel. It occurs when the driver attempts to call the drm core set prop function without being attached to a connector,...

miniz:compress_fuzzer: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5538040913723392 Project: miniz Fuzzing Engine: libFuzzer Fuzz Target: compressfuzzer Job Type: libfuzzerubsanminiz Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00010001769d Crash State: NULL Sanitizer: undefined UBSAN Recommended...

PT-2022-28729

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.25 Description A potential NULL dereference issue was identified in the KVM x86 nSVM component on nested migration. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2022-28811

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.13 through v5.16.10 Description A potential NULL dereference issue was discovered in the KVM x86 nSVM component on nested migration. The actual impact and attack plausibility have not yet been proven. Recommendations F...

cel-go:fuzz_compile: Null-dereference READ with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4868640388808704 Project: cel-go Fuzzing Engine: libFuzzer Fuzz Target: fuzzcompile Job Type: libfuzzerasancel-go Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: NULL Sanitizer: address ASAN Crash...

suricata:fuzz_sigpcap_aware: Null-dereference READ in ubsan_GetStackTrace

Project: https://github.com/OISF/suricata.git Detailed Report: https://oss-fuzz.com/testcase?key=4854539382030336 Project: suricata Fuzzing Engine: libFuzzer Fuzz Target: fuzzsigpcapaware Job Type: libfuzzerubsansuricata Platform Id: linux Crash Type: Null-dereference READ Crash Address:...

SUSE-SU-2022:0440-1 Security update for apache2

This update for apache2 fixes the following issues: - CVE-2021-44224: Fixed NULL dereference or SSRF in forward proxy configurations bsc1193943 - CVE-2021-44790: Fixed a buffer overflow when parsing multipart content in modlua bsc1193942 This update also enables TLS 1.3 support, by building again...

unicorn:fuzz_emu_sparc_32be: Null-dereference READ in ubsan_GetStackTrace

Detailed Report: https://oss-fuzz.com/testcase?key=6603248268607488 Project: unicorn Fuzzing Engine: libFuzzer Fuzz Target: fuzzemusparc32be Job Type: libfuzzerubsanunicorn Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: ubsanGetStackTrace Sanitizer...

CLSA-2022-1644869841 Fix of CVE: CVE-2021-34798, CVE-2021-39275, CVE-2021-36160, CVE-2021-44224

CVE-2021-44224: possible NULL dereference or SSRF in forward proxy configurations - CVE-2021-39275: out-of-bounds write in apescapequotes via malicious input - CVE-2021-36160: modproxyuwsgi: out-of-bounds read via a crafted request uri-path - CVE-2021-34798: NULL pointer dereference via malformed...

CLSA-2022-1644869383 Fix of CVE: CVE-2021-39275, CVE-2021-36160, CVE-2021-34798, CVE-2021-44224

CVE-2021-44224: possible NULL dereference or SSRF in forward proxy configurations - CVE-2021-39275: out-of-bounds write in apescapequotes via malicious input - CVE-2021-36160: modproxyuwsgi: out-of-bounds read via a crafted request uri-path - CVE-2021-34798: NULL pointer dereference via malformed...