CVE-2024-49868 btrfs: fix a NULL pointer dereference when failed to start a new trasacntion

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix a NULL pointer dereference when failed to start a new trasacntion BUG Syzbot reported a NULL pointer dereference with the following crash: FAULTINJECTION: forcing a failure. starttransaction+0x830/0x1670...

PT-2024-33713

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.6.58 Description: A NULL pointer dereference vulnerability has been resolved in the Linux kernel. The issue occurs when a new transaction fails to start, leading to a NULL pointer dereference in the btrfs upda...

binutils:fuzz_nm: Heap-buffer-overflow in bfd_getl16

Detailed Report: https://oss-fuzz.com/testcase?key=5201606398771200 Project: binutils Fuzzing Engine: centipede Fuzz Target: fuzznm Job Type: centipedeasanbinutils Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x606000019c15 Crash State: bfdgetl16...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that originates from an uninitialized size value in the drm/amdgpu module when using amdgpuvcecsreloc...

binutils:fuzz_nm: Heap-buffer-overflow in bfd_getl16

Detailed Report: https://oss-fuzz.com/testcase?key=5047985349984256 Project: binutils Fuzzing Engine: afl Fuzz Target: fuzznm Job Type: aflasanbinutils Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x603000000295 Crash State: bfdgetl16 bfdmipselfrelocunshuffle...

binutils:fuzz_readelf: Crash in target_specific_reloc_handling

Detailed Report: https://oss-fuzz.com/testcase?key=5308001125531648 Project: binutils Fuzzing Engine: libFuzzer Fuzz Target: fuzzreadelf Job Type: libfuzzermsanbinutils Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0000190d8d80 Crash State: targetspecificrelochandling...

SUSE CVE-2017-7302

The Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.28, has a swapstdrelocout function in bfd/aoutx.h that is vulnerable to an invalid read of size 4 because of missing checks for relocs that could not be recognised. This vulnerability causes Binutils utilities lik...

SUSE CVE-2017-11714

psi/ztoken.c in Artifex Ghostscript 9.21 mishandles references to the scanner state structure, which allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted PostScript document, related to an out-of-bounds read in the...

SUSE CVE-2018-14609

An issue was discovered in the Linux kernel through 4.17.10. There is an invalid pointer dereference in delrelocroot in fs/btrfs/relocation.c when mounting a crafted btrfs image, related to removing reloc rbtrees when reloc control has not been initialized...

SUSE CVE-2018-18309

An issue was discovered in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.31. An invalid memory address dereference was discovered in readreloc in reloc.c. The vulnerability causes a segmentation fault and application crash, which leads to denial of service, a...

GSD-2022-1005408 btrfs: fix lockdep splat with reloc root extent buffers

btrfs: fix lockdep splat with reloc root extent buffers This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.65 by commit...

PT-2022-33249

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.19.7 Description The issue is related to a lockdep splat with reloc root extent buffers in btrfs. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

binutils: Heap-based buffer overflow in _bfd_elf_slurp_secondary_reloc_section in elf.c

A flaw was found in GNU Binutils 2.35.1, where there is a heap-based buffer overflow in bfdelfslurpsecondaryrelocsection in elf.c due to the number of symbols not calculated correctly. The highest threat from this vulnerability is to system availability...

PT-2021-30966

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40809 Crash type: Segv on unknown address Crash state: bfd getl16 bfd mips elf reloc unshuffle bfd mips elf32 gprel16 reloc...

PT-2021-27683

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-use-after-free READ 8 crash has been reported. The crash state includes functions such as ngx pattern accum finalize cw, ngx device finalize, and ...

ghostscript: use-after-free vulnerability in igc_reloc_struct_ptr() could result in DoS

A use-after-free flaw was found in igcrelocstructptr of psi/igc.c of Ghostscript-9.25. This flaw allows a local attacker to supply a specially crafted PDF file, causing a denial of service. The highest threat from this vulnerability is to system availability...

GNU Binutils Buffer Error Vulnerability

GNU Binutils is a set of programming tools for creating and managing binary programs, object files, libraries, profile data and assembly source code. A heap buffer overflow vulnerability exists in bfdelfslurpsecondaryrelocsection in elf.c in GNU Binutils version 2.35.1. The vulnerability stems fr...

CVE-2021-20284

A flaw was found in GNU Binutils 2.35.1, where there is a heap-based buffer overflow in bfdelfslurpsecondaryrelocsection in elf.c due to the number of symbols not calculated correctly. The highest threat from this vulnerability is to system availability...

Heap overflow

An issue was discovered in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.35.1. A heap-based buffer over-read can occur in bfdgetlsigned32 in libbfd.c because shentsize is not validated in bfdelfslurpsecondaryrelocsection in elf.c...

PT-2020-13984

Name of the Vulnerable Software and Affected Versions ghostscript version 9.25 Description A use after free issue was discovered in the igc reloc struct ptr function of psi/igc.c. This could allow a local attacker to cause a denial of service by supplying a specially crafted PDF file...