full-disclosure - Re: [FD] NULL pointer dereference in freedesktop Mesa via check_xshm()

Open Source and information security mailing list archives

Message-ID: <CAEoi9W7f22mGVuQy-n_WZUWJ0rW-Cu8p5bh0DmPxi7=XdwTw8w@mail.gmail.com>
Date: Fri, 26 Jan 2024 13:56:25 -0500
From: Dan Cross <crossd@...il.com>
To: Meng Ruijie <ruijie_meng@...us.edu>
Cc: "fulldisclosure@...lists.org" <fulldisclosure@...lists.org>
Subject: Re: [FD] NULL pointer dereference in freedesktop Mesa via
	check_xshm()

On Fri, Jan 26, 2024 at 1:55 PM Meng Ruijie <ruijie_meng@...us.edu> wrote:
> [Vulnerability description]
> freedesktop Mesa v23.0.4 was discovered to contain a NULL pointer dereference via the function check_xshm().
>
> [Vulnerability Type]
> NULL pointer dereference
>
> [Vendor of Product]
> freedesktop
>
> [Affected Product Code Base]
> Mesa - 23.0.4
>
> [Reference]
> https://gitlab.freedesktop.org/mesa/mesa/-/issues/9859
>
> [CVE Reference]
> The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2023-45931 to this vulnerability.

I find it very difficult to believe that every NULL pointer error in
existence is a security vulnerability.

        - Dan C.
_______________________________________________
Sent through the Full Disclosure mailing list
https://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: https://seclists.org/fulldisclosure/

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives