cilium:fuzz: Null-dereference READ in pthread_create

Detailed Report: https://oss-fuzz.com/testcase?key=5668457197731840 Project: cilium Fuzzing Engine: libFuzzer Fuzz Target: fuzz Job Type: libfuzzerasancilium Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: pthreadcreate cgotrypthreadcreate...

EulerOS Virtualization for ARM 64 3.0.2.0 : libxml2 (EulerOS-SA-2021-2103)

According to the versions of the libxml2 packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - A vulnerability found in libxml2 in versions before 2.9.11 shows that it did not propagate errors while parsing XML...

Medium: libxml2

Issue Overview: There's a flaw in libxml2's xmllint. An attacker who is able to submit a crafted file to be processed by xmllint could trigger a use-after-free. The greatest impact of this flaw is to confidentiality, integrity, and availability. CVE-2021-3516 There's a flaw in libxml2. An attacke...

Amazon Linux 2 : libxml2 (ALAS-2021-1677)

The version of libxml2 installed on the remote host is prior to 2.9.1-6. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2021-1677 advisory. There's a flaw in libxml2's xmllint. An attacker who is able to submit a crafted file to be processed by xmllint could...

loki:fuzz_parse_expr: Null-dereference READ in pthread_create

Detailed Report: https://oss-fuzz.com/testcase?key=5852748087164928 Project: loki Fuzzing Engine: libFuzzer Fuzz Target: fuzzparseexpr Job Type: libfuzzerasanloki Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: pthreadcreate cgotrypthreadcreate...

UVI-2021-1001046 net: ieee802154: fix null deref in parse dev addr

net: ieee802154: fix null deref in parse dev addr This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.12 by commit...

UVI-2021-1001043 NFS: Fix a potential NULL dereference in nfs_get_client()

NFS: Fix a potential NULL dereference in nfsgetclient This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.11 by commit...

GSD-2021-1001043 NFS: Fix a potential NULL dereference in nfs_get_client()

NFS: Fix a potential NULL dereference in nfsgetclient This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.11 by commit...

UVI-2021-1000968 net: ieee802154: fix null deref in parse dev addr

net: ieee802154: fix null deref in parse dev addr This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.45 by commit...

GSD-2021-1000968 net: ieee802154: fix null deref in parse dev addr

net: ieee802154: fix null deref in parse dev addr This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.45 by commit...

GSD-2021-1000965 NFS: Fix a potential NULL dereference in nfs_get_client()

NFS: Fix a potential NULL dereference in nfsgetclient This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.44 by commit...

GSD-2021-1000908 net: ieee802154: fix null deref in parse dev addr

net: ieee802154: fix null deref in parse dev addr This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.127 by commit...

GSD-2021-1000882 NFS: Fix a potential NULL dereference in nfs_get_client()

NFS: Fix a potential NULL dereference in nfsgetclient This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.195 by commit...

UVI-2021-1000882 NFS: Fix a potential NULL dereference in nfs_get_client()

NFS: Fix a potential NULL dereference in nfsgetclient This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.195 by commit...

PT-2021-29329

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.17 through 4.14.236 Description A potential NULL dereference issue exists in the nfs get client function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions 3.1...

PT-2021-29313

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.273 Description A potential NULL dereference issue exists in the nfs get client function. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version v3.17 and is...

PT-2021-25436

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.44 Description: A potential NULL dereference issue exists in the nfs get client function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prio...

PT-2021-25517

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.12.12 Description: The issue is related to a null dereference in the parse device address function in the ieee802154 module. The actual impact and attack plausibility have not yet been proven. Recommendations...

PT-2021-29511

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.12.12 Description A null dereference issue was discovered in the parse dev addr function of the ieee802154 module. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2021-25379

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.127 Description: The issue is related to a null dereference in the parse device address function in the ieee802154 module. The actual impact and attack plausibility have not yet been proven. Recommendations...