PT-2021-25785

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.135 Description The issue is related to a potential NULL dereference in the cifs compose mount options function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2021-25648

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.13 through v5.13.3 Description: A NULL dereference issue was discovered in the nfs3svc encode getaclres function. The actual impact and attack plausibility have not yet been proven. This issue was introduced in versio...

PT-2021-25639

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.13 through v5.13.5 Description: A NULL dereference issue was discovered in the SCSI target code, specifically on XCOPY completion. The actual impact and attack plausibility of this issue have not yet been proven...

PT-2021-25620

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to 5.13.5 Description: The issue is related to a potential NULL dereference in the cifs compose mount options function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2021-25627

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.13.6 Description: The issue is related to a null dereference in the bond ipsec add sa function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

go-ethereum:fuzz_g2_add: Null-dereference READ in pthread_create

Detailed Report: https://oss-fuzz.com/testcase?key=5105189177655296 Project: go-ethereum Fuzzing Engine: libFuzzer Fuzz Target: fuzzg2add Job Type: libfuzzerasango-ethereum Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: pthreadcreate...

protoreflect:fuzz_protoparse: Null-dereference READ with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6235399889485824 Project: protoreflect Fuzzing Engine: libFuzzer Fuzz Target: fuzzprotoparse Job Type: libfuzzerasanprotoreflect Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: NULL Sanitizer: addre...

OESA-2021-1283 krb5 security update

Security Fixes: In MIT krb5 releases 1.16 and later, an unauthenticated attacker can cause a null dereference in the KDC by sending a request containing a PA-ENCRYPTED-CHALLENGE padata element without using FAST.CVE-2021-36222...

prometheus:fuzzParseOpenMetric: Null-dereference READ in pthread_create

Detailed Report: https://oss-fuzz.com/testcase?key=5146223697854464 Project: prometheus Fuzzing Engine: libFuzzer Fuzz Target: fuzzParseOpenMetric Job Type: libfuzzerasanprometheus Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: pthreadcreate...

gonids:fuzz_parserule: Null-dereference READ in pthread_create

Detailed Report: https://oss-fuzz.com/testcase?key=4520035149283328 Project: gonids Fuzzing Engine: libFuzzer Fuzz Target: fuzzparserule Job Type: libfuzzerasangonids Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: pthreadcreate cgotrypthreadcreate...

jsonparser:fuzzobjecteach: Null-dereference READ in pthread_create

Detailed Report: https://oss-fuzz.com/testcase?key=5003637796503552 Project: jsonparser Fuzzing Engine: libFuzzer Fuzz Target: fuzzobjecteach Job Type: libfuzzerasanjsonparser Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: pthreadcreate...

cel-go:fuzz_lpm: Null-dereference READ in pthread_create

Detailed Report: https://oss-fuzz.com/testcase?key=5743414120415232 Project: cel-go Fuzzing Engine: libFuzzer Fuzz Target: fuzzlpm Job Type: libfuzzerasancel-go Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: pthreadcreate cgotrypthreadcreate...

go-dns:fuzz_msg_unpack: Null-dereference READ in pthread_create

Detailed Report: https://oss-fuzz.com/testcase?key=6247609726533632 Project: go-dns Fuzzing Engine: libFuzzer Fuzz Target: fuzzmsgunpack Job Type: libfuzzerasango-dns Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: pthreadcreate cgotrypthreadcreate...

vitess:read_query_results_fuzzer: Null-dereference READ with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5596233711353856 Project: vitess Fuzzing Engine: libFuzzer Fuzz Target: readqueryresultsfuzzer Job Type: libfuzzerasanvitess Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: NULL Sanitizer: address...

cosign:fuzz_getPassword: Null-dereference READ in pthread_create

Detailed Report: https://oss-fuzz.com/testcase?key=6396103086964736 Project: cosign Fuzzing Engine: libFuzzer Fuzz Target: fuzzgetPassword Job Type: libfuzzerasancosign Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: pthreadcreate cgotrypthreadcreat...

cascadia:fuzz: Null-dereference READ in pthread_create

Detailed Report: https://oss-fuzz.com/testcase?key=4738199892131840 Project: cascadia Fuzzing Engine: libFuzzer Fuzz Target: fuzz Job Type: libfuzzerasancascadia Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: pthreadcreate cgotrypthreadcreate...

CVE-2021-36222

A flaw was found in krb5. This flaw allows an unauthenticated attacker to cause a NULL dereference in the KDC by sending a request containing a PA-ENCRYPTED-CHALLENGE padata element without using FAST. The highest threat from this vulnerability is to system availability...

nss:tls-client-no_fuzzer_mode: Null-dereference READ with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6294981873631232 Project: nss Fuzzing Engine: libFuzzer Fuzz Target: tls-client-nofuzzermode Job Type: libfuzzerasannss Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: NULL Sanitizer: address ASAN...

dgraph:parser_fuzzer: Null-dereference READ in pthread_create

Detailed Report: https://oss-fuzz.com/testcase?key=6426145611448320 Project: dgraph Fuzzing Engine: libFuzzer Fuzz Target: parserfuzzer Job Type: libfuzzerasandgraph Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: pthreadcreate cgotrypthreadcreate...

runc:user_fuzzer: Null-dereference READ in pthread_create

Detailed Report: https://oss-fuzz.com/testcase?key=5982838682943488 Project: runc Fuzzing Engine: libFuzzer Fuzz Target: userfuzzer Job Type: libfuzzerasanrunc Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: pthreadcreate cgotrypthreadcreate...