SUSE-SU-2022:0091-2 Security update for apache2

This update for apache2 fixes the following issues: Apache2 was updated to the current stable version 2.4.51 jscSLE-22733 jscSLE-22849 It fixes all CVEs and selected bugs represented by patches found between 2.4.23 and 2.4.51. See https://downloads.apache.org/httpd/CHANGES2.4 for a complete chang...

SUSE-SU-2022:0119-1 Security update for apache2

This update for apache2 fixes the following issues: - CVE-2021-44224: Fixed NULL dereference or SSRF in forward proxy configurations. bsc1193943 - CVE-2021-44790: Fixed buffer overflow when parsing multipart content in modlua. bsc1193942...

OPENSUSE-SU-2022:0091-1 Security update for apache2

This update for apache2 fixes the following issues: Apache2 was updated to the current stable version 2.4.51 jscSLE-22733 jscSLE-22849 It fixes all CVEs and selected bugs represented by patches found between 2.4.23 and 2.4.51. See https://downloads.apache.org/httpd/CHANGES2.4 for a complete chang...

SUSE-SU-2022:0091-1 Security update for apache2

This update for apache2 fixes the following issues: Apache2 was updated to the current stable version 2.4.51 jscSLE-22733 jscSLE-22849 It fixes all CVEs and selected bugs represented by patches found between 2.4.23 and 2.4.51. See https://downloads.apache.org/httpd/CHANGES2.4 for a complete chang...

libigl:igl_fuzzer: Null-dereference READ in ubsan_GetStackTrace

Detailed Report: https://oss-fuzz.com/testcase?key=4837117841244160 Project: libigl Fuzzing Engine: libFuzzer Fuzz Target: iglfuzzer Job Type: libfuzzerubsanlibigl Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: ubsanGetStackTrace Sanitizer: undefin...

SUSE-SU-2022:0065-1 Security update for apache2

This update for apache2 fixes the following issues: - CVE-2021-44224: Fixed NULL dereference or SSRF in forward proxy configurations. bsc1193943 - CVE-2021-44790: Fixed buffer overflow when parsing multipart content in modlua. bsc1193942...

binutils:fuzz_dwarf: Null-dereference READ in load_separate_debug_files

Detailed Report: https://oss-fuzz.com/testcase?key=6328029872259072 Project: binutils Fuzzing Engine: libFuzzer Fuzz Target: fuzzdwarf Job Type: libfuzzerasanbinutils Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: loadseparatedebugfiles fuzzdwarf.c...

vitess:fuzz_replication_engine: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6115136262242304 Project: vitess Fuzzing Engine: libFuzzer Fuzz Target: fuzzreplicationengine Job Type: libfuzzerasanvitess Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN Crash...

suricata:fuzz_sigpcap_aware: Null-dereference READ in ubsan_GetStackTrace

Detailed Report: https://oss-fuzz.com/testcase?key=5843037534683136 Project: suricata Fuzzing Engine: libFuzzer Fuzz Target: fuzzsigpcapaware Job Type: libfuzzerubsansuricata Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: ubsanGetStackTrace...

tidb:fuzzMarshalJSON: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4966517563850752 Project: tidb Fuzzing Engine: libFuzzer Fuzz Target: fuzzMarshalJSON Job Type: libfuzzerasantidb Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0000093dd944 Crash State: NULL Sanitizer: address ASAN Recommended...

wget:wget_options_fuzzer: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5685231879847936 Project: wget Fuzzing Engine: libFuzzer Fuzz Target: wgetoptionsfuzzer Job Type: libfuzzerubsanwget Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00ffffffffff Crash State: NULL Sanitizer: undefined UBSAN Recommende...

OSV-2022-24 Null-dereference READ in session_startup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43419 Crash type: Null-dereference READ Crash state: sessionstartup libssh2sessionhandshake ssh2clientfuzzer.cc...

PT-2022-36872

Name of the Vulnerable Software and Affected Versions libssh2 affected versions not specified Description The issue is related to a null-dereference read crash. It occurs during the session startup in the libssh2 session handshake function. Recommendations At the moment, there is no information...

libssh2:ssh2_client_fuzzer: Null-dereference READ in ubsan_GetStackTrace

Project: https://github.com/cmeister2/libssh2.git https://github.com/libssh2/libssh2.git Detailed Report: https://oss-fuzz.com/testcase?key=5104008459583488 Project: libssh2 Fuzzing Engine: libFuzzer Fuzz Target: ssh2clientfuzzer Job Type: libfuzzerubsanlibssh2 Platform Id: linux Crash Type:...

libssh2:ssh2_client_fuzzer: Null-dereference READ in session_startup

Project: https://github.com/cmeister2/libssh2.git https://github.com/libssh2/libssh2.git Detailed Report: https://oss-fuzz.com/testcase?key=6102905738887168 Project: libssh2 Fuzzing Engine: libFuzzer Fuzz Target: ssh2clientfuzzer Job Type: libfuzzerasanlibssh2 Platform Id: linux Crash Type:...

PT-2025-8549

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved, specifically in the ASoC: rt7-sdw module. The issue arises from the lack of a check on the card pointer in the rt700, rt711, and...

PT-2025-8053

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A potential NULL dereference issue has been resolved in the Linux kernel, specifically in the drm/sprd component. The issue occurred because drm could be null in sprd drm shutdown,...

rdkit:smiles_string_to_mol_fuzzer: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5520160625131520 Project: rdkit Fuzzing Engine: libFuzzer Fuzz Target: smilesstringtomolfuzzer Job Type: libfuzzerubsanrdkit Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x007e0000007d Crash State: NULL Sanitizer: undefined UBSAN...

Possible NULL dereference or SSRF in forward proxy configurations in Apache HTTP Server 2.4.51 and earlier

...

CVE-2021-44224 Possible NULL dereference or SSRF in forward proxy configurations in Apache HTTP Server 2.4.51 and earlier

A crafted URI sent to httpd configured as a forward proxy ProxyRequests on can cause a crash NULL pointer dereference or, for configurations mixing forward and reverse proxy declarations, can allow for requests to be directed to a declared Unix Domain Socket endpoint Server Side Request Forgery...