PYSEC-2021-628

TensorFlow is an open source platform for machine learning. In affected versions the code for sparse matrix multiplication is vulnerable to undefined behavior via binding a reference to nullptr. This occurs whenever the dimensions of a or b are 0 or less. In the case on one of these is 0, an empt...

binutils:fuzz_windres: Null-dereference READ in ubsan_GetStackTrace

Detailed Report: https://oss-fuzz.com/testcase?key=5071275568005120 Project: binutils Fuzzing Engine: libFuzzer Fuzz Target: fuzzwindres Job Type: libfuzzerubsanbinutils Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: ubsanGetStackTrace Sanitizer:...

binutils:fuzz_windres: Null-dereference READ with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6664251322793984 Project: binutils Fuzzing Engine: honggfuzz Fuzz Target: fuzzwindres Job Type: honggfuzzasanbinutils Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: NULL Sanitizer: address ASAN...

PT-2021-26350

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.14 through v5.14.14 Description: A potential security issue exists in the Linux Kernel, specifically in the page is secretmem function, where a NULL page-mapping dereference could occur. The actual impact and attack...

Debian DLA-2793-1 : mosquitto - LTS security update

The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-2793 advisory. One security issue has been discovered in mosquitto: MQTT message broker. A null dereference vulnerability was found which could lead to crashes for applications using the...

Debian: Security Advisory (DLA-2793-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP3 : libxml2 (EulerOS-SA-2021-2595)

According to the versions of the libxml2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - There's a flaw in libxml2's xmllint in versions before 2.9.11. An attacker who is able to submit a crafted file to be processed by xmllint coul...

UVI-2021-1001697 iwlwifi: mvm: Fix possible NULL dereference

iwlwifi: mvm: Fix possible NULL dereference This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.12 by commit...

GSD-2021-1001697 iwlwifi: mvm: Fix possible NULL dereference

iwlwifi: mvm: Fix possible NULL dereference This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.12 by commit...

UVI-2021-1001628 net_sched: fix NULL deref in fifo_set_limit()

netsched: fix NULL deref in fifosetlimit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.73 by commit...

UVI-2021-1001581 net_sched: fix NULL deref in fifo_set_limit()

netsched: fix NULL deref in fifosetlimit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.153 by commit...

PT-2021-29989

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.251 Description The issue is related to a NULL dereference in the fifo set limit function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior...

PT-2021-26140

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.70 Description A potential security issue exists due to a NULL dereference in the qeth clear working pool list function. The actual impact and attack plausibility have not yet been proven. Recommendations F...

PT-2021-25975

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.287 Description The issue is related to a NULL dereference in the fifo set limit function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior ...

PT-2021-29970

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.287 Description The issue is related to a NULL dereference in the fifo set limit function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior ...

PT-2021-30046

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.153 Description The issue is related to a NULL dereference in the fifo set limit function. It was introduced in version v2.6.27 and fixed in version v5.4.153. The actual impact and attack plausibility have n...

PT-2021-30093

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.27 through 5.10.72 Description The issue is related to a NULL dereference in the fifo set limit function. It was introduced in version v2.6.27 and fixed in version v5.10.73. The actual impact and attack plausibility...

PT-2021-30162

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.12 Description A potential issue exists where a NULL dereference could occur. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.14.12,...

PT-2021-26163

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.12 Description The issue is related to a NULL dereference in the fifo set limit function. It was introduced in version v2.6.27 and fixed in version v5.14.12. The actual impact and attack plausibility have n...

PT-2021-26167

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.14 through v5.14.11 Description: A possible NULL dereference issue was identified. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions v5.14 through v5.14.11,...