krb5 security update

1.18.2-8.3 - Fix KDC null deref on TGS inner body null server CVE-2021-37750 - Resolves: 1997600 1.18.2-8.2 - Rebuild for rpminspect; no code changes - Resolves: 1983728 1.18.2-8.1 - Fix KDC null deref on bad encrypted challenge CVE-2021-36222 - Resolves: 1983728...

CentOS 8 : krb5 (CESA-2021:3576)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:3576 advisory. - krb5: Sending a request containing PA-ENCRYPTED-CHALLENGE padata element without using FAST could result in NULL dereference in KDC which leads to Do...

teleport:parse_fuzz: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6257163295653888 Project: teleport Fuzzing Engine: libFuzzer Fuzz Target: parsefuzz Job Type: libfuzzerasanteleport Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN Crash Revision:...

envoy:h1_capture_direct_response_persistent_fuzz_test: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6676496622682112 Project: envoy Fuzzing Engine: libFuzzer Fuzz Target: h1capturedirectresponsepersistentfuzztest Job Type: libfuzzerasanenvoy Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7f17b6184da0 Crash State: NULL Sanitizer:...

krb5: Sending a request containing PA-ENCRYPTED-CHALLENGE padata element without using FAST could result in NULL dereference in KDC which leads to DoS

A flaw was found in krb5. This flaw allows an unauthenticated attacker to cause a NULL dereference in the KDC by sending a request containing a PA-ENCRYPTED-CHALLENGE padata element without using FAST. The highest threat from this vulnerability is to system availability...

RLSA-2021:3576 Moderate: krb5 security update

Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending passwords over the network in unencrypted form. It allows clients and servers to authenticate to each other with the help of a trusted third party, the...

RHEL 8 : krb5 (RHSA-2021:3576)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:3576 advisory. Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending...

PT-2024-11366

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue arises when qeth set online calls qeth clear working pool list to roll back after an error exit from qeth hardsetup card, potentially accessing card-qdio.in q before it was...

PT-2021-27788

Name of the Vulnerable Software and Affected Versions Assimp affected versions not specified Description The issue is related to a null-dereference read crash. Technical details about the crash include the unzOpenCurrentFile3 and unzOpenCurrentFile functions, as well as the...

assimp:assimp_fuzzer: Null-dereference READ in unzOpenCurrentFile3

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=5431707080196096 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzerasanassimp Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000...

fio:fuzz_parseini: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6236771218751488 Project: fio Fuzzing Engine: libFuzzer Fuzz Target: fuzzparseini Job Type: libfuzzerubsanfio Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00ad9e1702a0 Crash State: NULL Sanitizer: undefined UBSAN Recommended...

matio:matio_fuzzer: Null-dereference READ with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6152210661113856 Project: matio Fuzzing Engine: libFuzzer Fuzz Target: matiofuzzer Job Type: libfuzzerubsanmatio Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: NULL Sanitizer: undefined UBSAN Crash...

golang-protobuf:textfuzz: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4980355610836992 Project: golang-protobuf Fuzzing Engine: libFuzzer Fuzz Target: textfuzz Job Type: libfuzzerasangolang-protobuf Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000061377022 Crash State: NULL Sanitizer: address ASAN...

vitess:write_packet_fuzzer: Null-dereference READ in pthread_create

Detailed Report: https://oss-fuzz.com/testcase?key=4614558212292608 Project: vitess Fuzzing Engine: libFuzzer Fuzz Target: writepacketfuzzer Job Type: libfuzzerasanvitess Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: pthreadcreate...

go-coredns:fuzz_plugin_cache: Null-dereference READ in pthread_create

Detailed Report: https://oss-fuzz.com/testcase?key=5466245361696768 Project: go-coredns Fuzzing Engine: libFuzzer Fuzz Target: fuzzplugincache Job Type: libfuzzerasango-coredns Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: pthreadcreate...

WS-2021-0594

In assimp 5.1.0 through 5.1.5 there is Null-dereference READ in unzOpenCurrentFile3...

dav1d:dav1d_fuzzer: Null-dereference READ in linux-gate.so.1

Detailed Report: https://oss-fuzz.com/testcase?key=5179575236165632 Project: dav1d Fuzzing Engine: libFuzzer Fuzz Target: dav1dfuzzer Job Type: libfuzzerasani386dav1d Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x00000000 Crash State: linux-gate.so.1 Sanitizer: address ASA...

PT-2024-11411

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A possible NULL dereference issue has been resolved in the Linux kernel. The issue is related to the iwlwifi module, specifically in the iwl mvm remove time event function, where a check...

ipfs:ipfs_ds_flatfs: Null-dereference READ with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6240620362465280 Project: ipfs Fuzzing Engine: libFuzzer Fuzz Target: ipfsdsflatfs Job Type: libfuzzerasanipfs Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: NULL Sanitizer: address ASAN Crash...

go-sftp:fuzz_sftp: Null-dereference READ in pthread_create

Detailed Report: https://oss-fuzz.com/testcase?key=5196841726115840 Project: go-sftp Fuzzing Engine: libFuzzer Fuzz Target: fuzzsftp Job Type: libfuzzerasango-sftp Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: pthreadcreate xcgosysthreadcreate...