CWE-476 · NULL Pointer Dereference (page 52)
Page 52 of 57 — CVEs classified under CWE-476, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-6534 | Medium | 6.5 | 2018-02-27 | An issue was discovered in Icinga 2.x through 2.8.1. By sending specially crafted messages, an attacker can cause a NULL pointer dereference, which can cause t… |
CVE-2018-7492 | Medium | 5.5 | 2018-02-26 | A NULL pointer dereference was found in the net/rds/rdma.c __rds_rdma_map() function in the Linux kernel before 4.14.7 allowing local attackers to cause a syst… |
CVE-2018-7456 | Medium | 6.5 | 2018-02-24 | A NULL Pointer Dereference occurs in the function TIFFPrintDirectory in tif_print.c in LibTIFF 3.9.3, 3.9.4, 3.9.5, 3.9.6, 3.9.7, 4.0.0alpha4, 4.0.0alpha5, 4.0… |
CVE-2018-7454 | Medium | 5.5 | 2018-02-24 | A NULL pointer dereference in XFAForm::scanFields in XFAForm.cc in xpdf 4.00 allows attackers to launch denial of service via a specific pdf file, as demonstra… |
CVE-2018-7452 | Medium | 5.5 | 2018-02-24 | A NULL pointer dereference in JPXStream::fillReadBuf in JPXStream.cc in xpdf 4.00 allows attackers to launch denial of service via a specific pdf file, as demo… |
CVE-2017-18199 | Medium | 6.5 | 2018-02-24 | realloc_symlink in rock.c in GNU libcdio before 1.0.0 allows remote attackers to cause a denial of service (NULL Pointer Dereference) via a crafted iso file. |
CVE-2018-7336 | High | 7.5 | 2018-02-23 | In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, the FCP protocol dissector could crash. This was addressed in epan/dissectors/packet-fcp.c by checking for a N… |
CVE-2018-7285 | High | 7.5 | 2018-02-22 | A NULL pointer access issue was discovered in Asterisk 15.x through 15.2.1. The RTP support in Asterisk maintains its own registry of dynamic codecs and desire… |
CVE-2015-5316 | Medium | 5.9 | 2018-02-21 | The eap_pwd_perform_confirm_exchange function in eap_peer/eap_pwd.c in wpa_supplicant 2.x before 2.6, when EAP-pwd is enabled in a network configuration profil… |
CVE-2015-6569 | Medium | 5.9 | 2018-02-21 | Race condition in the LoadBalancer module in the Atlassian Floodlight Controller before 1.2 allows remote attackers to cause a denial of service (NULL pointer… |
CVE-2017-12545 | High | 7.5 | 2018-02-15 | A remote denial of service vulnerability in HPE System Management Homepage for Windows and Linux version prior to v7.6.1 was found. |
CVE-2018-7175 | Medium | 5.5 | 2018-02-15 | An issue was discovered in xpdf 4.00. A NULL pointer dereference in readCodestream allows an attacker to cause denial of service via a JPX image with zero comp… |
CVE-2018-7052 | High | 7.5 | 2018-02-15 | An issue was discovered in Irssi before 1.0.7 and 1.1.x before 1.1.1. When the number of windows exceeds the available space, a crash due to a NULL pointer der… |
CVE-2018-7050 | High | 7.5 | 2018-02-15 | An issue was discovered in Irssi before 1.0.7 and 1.1.x before 1.1.1. A NULL pointer dereference occurs for an "empty" nick. |
CVE-2017-17294 | Low | 3.3 | 2018-02-15 | Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R00… |
CVE-2017-18189 | High | 7.5 | 2018-02-15 | In the startread function in xa.c in Sound eXchange (SoX) through 14.4.2, a corrupt header specifying zero channels triggers an infinite loop with a resultant… |
CVE-2018-0833 | Medium | 5.3 | 2018-02-15 | The Microsoft Server Message Block 2.0 and 3.0 (SMBv2/SMBv3) client in Windows 8.1 and RT 8.1 and Windows Server 2012 R2 allows a denial of service vulnerabili… |
CVE-2018-2384 | Medium | 6.5 | 2018-02-14 | Under certain conditions a malicious user provoking a Null Pointer dereference can prevent legitimate users from accessing the SAP Internet Graphics Server, 7… |
CVE-2018-6951 | High | 7.5 | 2018-02-13 | An issue was discovered in GNU patch through 2.7.6. There is a segmentation fault, associated with a NULL pointer dereference, leading to a denial of service i… |
CVE-2018-6942 | Medium | 6.5 | 2018-02-13 | An issue was discovered in FreeType 2 through 2.9. A NULL pointer dereference in the Ins_GETVARIATION() function within ttinterp.c could lead to DoS via a craf… |
CVE-2017-13235 | Medium | 6.5 | 2018-02-12 | A other vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. ID: A-68342866. |
CVE-2016-9570 | High | 7.5 | 2018-02-12 | cb.exe in Carbon Black 5.1.1.60603 allows attackers to cause a denial of service (out-of-bounds read, invalid pointer dereference, and application crash) by le… |
CVE-2018-1000027 | High | 7.5 | 2018-02-09 | The Squid Software Foundation Squid HTTP Caching Proxy version prior to version 4.0.23 contains a NULL Pointer Dereference vulnerability in HTTP Response X-For… |
CVE-2018-6644 | High | 7.5 | 2018-02-08 | SBLIM Small Footprint CIM Broker (SFCB) 1.4.9 has a null pointer (DoS) vulnerability via a crafted POST request to the /cimom URI. |
CVE-2017-12472 | Critical | 9.8 | 2018-02-07 | ccnl-ext-mgmt.c in CCN-lite before 2.00 allows context-dependent attackers to have unspecified impact by leveraging missing NULL pointer checks after ccnl_mall… |
CVE-2017-12464 | High | 7.5 | 2018-02-07 | ccn-lite-valid.c in CCN-lite before 2.00 allows context-dependent attackers to cause a denial of service (NULL pointer dereference) via vectors involving the k… |
CVE-2018-6319 | Medium | 5.5 | 2018-02-02 | In Sophos Tester Tool 3.2.0.7 Beta, the driver accepts a special DeviceIoControl code that doesn't check its argument. This argument is a memory address: if a… |
CVE-2017-5727 | High | 7.8 | 2018-02-02 | Pointer dereference in subsystem in Intel Graphics Driver 15.40.x.x, 15.45.x.x, 15.46.x.x allows unprivileged user to elevate privileges via local access. |
CVE-2017-16914 | Medium | 5.9 | 2018-01-31 | The "stub_send_ret_submit()" function (drivers/usb/usbip/stub_tx.c) in the Linux Kernel before version 4.14.8, 4.9.71, 4.1.49, and 4.4.107 allows attackers to… |
CVE-2017-18079 | High | 7.8 | 2018-01-29 | drivers/input/serio/i8042.c in the Linux kernel before 4.12.4 allows attackers to cause a denial of service (NULL pointer dereference and system crash) or poss… |
CVE-2017-12380 | High | 7.5 | 2018-01-26 | ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service (… |
CVE-2018-6197 | High | 7.5 | 2018-01-25 | w3m through 0.5.3 is prone to a NULL pointer dereference flaw in formUpdateBuffer in form.c. |
CVE-2016-10708 | High | 7.5 | 2018-01-21 | sshd in OpenSSH before 7.4 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an out-of-sequence NEWKEYS mess… |
CVE-2017-12130 | High | 7.5 | 2018-01-20 | An exploitable NULL pointer dereference vulnerability exists in the tinysvcmdns library version 2017-11-05. A specially crafted packet can make the library der… |
CVE-2018-5710 | Medium | 6.5 | 2018-01-16 | An issue was discovered in MIT Kerberos 5 (aka krb5) through 1.16. The pre-defined function "strlen" is getting a "NULL" string as a parameter value in plugins… |
CVE-2018-5333 | Medium | 5.5 | 2018-01-11 | In the Linux kernel through 4.14.13, the rds_cmsg_atomic function in net/rds/rdma.c mishandles cases where page pinning fails or an invalid address is supplied… |
CVE-2018-5308 | High | 7.8 | 2018-01-09 | PoDoFo 0.9.5 does not properly validate memcpy arguments in the PdfMemoryOutputStream::Write function (base/PdfOutputStream.cpp). Remote attackers could levera… |
CVE-2018-5206 | Critical | 9.8 | 2018-01-06 | When the channel topic is set without specifying a sender, Irssi before 1.0.6 may dereference a NULL pointer. |
CVE-2017-16728 | High | 7.5 | 2018-01-05 | An Untrusted Pointer Dereference issue was discovered in Advantech WebAccess versions prior to 8.3. There are multiple vulnerabilities that may allow an attack… |
CVE-2017-1000471 | Critical | 9.8 | 2018-01-03 | EmbedThis GoAhead Webserver version 4.0.0 is vulnerable to a NULL pointer dereference in the CGI handler resulting in memory corruption or denial of service. |
CVE-2017-1000460 | Medium | 6.5 | 2018-01-03 | In line libavcodec/h264dec.c:500 in libav(v13_dev0), ffmpeg(n3.4), chromium(56 prior Feb 13, 2017), the return value of init_get_bits is ignored and get_ue_gol… |
CVE-2017-1000445 | Medium | 6.5 | 2018-01-02 | ImageMagick 7.0.7-1 and older version are vulnerable to null pointer dereference in the MagickCore component and might lead to denial of service |
CVE-2017-18013 | Medium | 6.5 | 2018-01-01 | In LibTIFF 4.0.9, there is a Null-Pointer Dereference in the tif_print.c TIFFPrintDirectory function, as demonstrated by a tiffinfo crash. |
CVE-2017-18005 | Medium | 5.5 | 2017-12-31 | Exiv2 0.26 has a Null Pointer Dereference in the Exiv2::DataValue::toLong function in value.cpp, related to crafted metadata in a TIFF file. |
CVE-2017-17997 | High | 7.5 | 2017-12-30 | In Wireshark before 2.2.12, the MRDISC dissector misuses a NULL pointer and crashes. This was addressed in epan/dissectors/packet-mrdisc.c by validating an IPv… |
CVE-2017-9608 | Medium | 6.5 | 2017-12-27 | The dnxhd decoder in FFmpeg before 3.2.6, and 3.3.x before 3.3.3 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted… |
CVE-2017-17819 | Medium | 5.5 | 2017-12-21 | In Netwide Assembler (NASM) 2.14rc0, there is an illegal address access in the function find_cc() in asm/preproc.c that will cause a remote denial of service a… |
CVE-2017-17701 | Critical | 9.8 | 2017-12-15 | K7Sentry.sys 15.1.0.59 in K7 Antivirus 15.1.0309 has a NULL pointer dereference via a 0x950025c8 DeviceIoControl request. |
CVE-2017-17700 | Critical | 9.8 | 2017-12-15 | K7Sentry.sys 15.1.0.59 in K7 Antivirus 15.1.0309 has a NULL pointer dereference via a 0x950025a4 DeviceIoControl request. |
CVE-2017-17699 | Critical | 9.8 | 2017-12-15 | K7Sentry.sys 15.1.0.59 in K7 Antivirus 15.1.0309 has a NULL pointer dereference via a 0x950025ac DeviceIoControl request. |
CVE-2017-17555 | Medium | 6.5 | 2017-12-12 | The swri_audio_convert function in audioconvert.c in FFmpeg libswresample through 3.0.101, as used in FFmpeg 3.4.1, aubio 0.4.6, and other products, allows rem… |
CVE-2017-17554 | Medium | 5.5 | 2017-12-12 | A NULL pointer dereference (DoS) Vulnerability was found in the function aubio_source_avcodec_readframe in io/source_avcodec.c of aubio 0.4.6, which may lead t… |
CVE-2017-17505 | Medium | 6.5 | 2017-12-11 | In HDF5 1.10.1, there is a NULL pointer dereference in the function H5O_pline_decode in the H5Opline.c file in libhdf5.a. For example, h5dump would crash when… |
CVE-2017-17465 | Critical | 9.8 | 2017-12-08 | K7Sentry.sys 15.1.0.59 in K7 Antivirus 15.1.0309 has a NULL pointer dereference via a 0x95002574 DeviceIoControl request. |
CVE-2017-17464 | Critical | 9.8 | 2017-12-08 | K7Sentry.sys 15.1.0.59 in K7 Antivirus 15.1.0309 has a NULL pointer dereference via a 0x95002570 DeviceIoControl request. |
CVE-2017-17440 | Medium | 6.5 | 2017-12-06 | GNU Libextractor 1.6 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted GIF, IT (Impulse Track… |
CVE-2017-17439 | High | 7.5 | 2017-12-06 | In Heimdal through 7.4, remote unauthenticated attackers are able to crash the KDC by sending a crafted UDP packet containing empty data fields for client name… |
CVE-2017-17129 | High | 8.8 | 2017-12-04 | The ff_vc1_mc_4mv_chroma4 function in libavcodec/vc1_mc.c in Libav 12.2 allows remote attackers to cause a denial of service (segmentation fault and applicatio… |
CVE-2017-17127 | Medium | 6.5 | 2017-12-04 | The vc1_decode_frame function in libavcodec/vc1dec.c in Libav 12.2 allows remote attackers to cause a denial of service (NULL pointer dereference and applicati… |
CVE-2017-17123 | Medium | 5.5 | 2017-12-04 | The coff_slurp_reloc_table function in coffcode.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, allows remot… |
CVE-2017-17113 | Medium | 5.5 | 2017-12-04 | ntguard_x64.sys 0.18780.0.0 in IKARUS anti.virus 2.16.15 has a NULL pointer dereference via a 0x830000c4 DeviceIoControl request. |
CVE-2017-8820 | High | 7.5 | 2017-12-03 | In Tor before 0.2.5.16, 0.2.6 through 0.2.8 before 0.2.8.17, 0.2.9 before 0.2.9.14, 0.3.0 before 0.3.0.13, and 0.3.1 before 0.3.1.9, remote attackers can cause… |
CVE-2017-15116 | Medium | 5.5 | 2017-11-30 | The rngapi_reset function in crypto/rng.c in the Linux kernel before 4.2 allows attackers to cause a denial of service (NULL pointer dereference). |
CVE-2017-17050 | High | 7.8 | 2017-11-29 | TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via a… |
CVE-2017-17049 | High | 7.8 | 2017-11-29 | TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via a… |
CVE-2017-16948 | High | 7.8 | 2017-11-26 | TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via a… |
CVE-2017-12193 | Medium | 5.5 | 2017-11-22 | The assoc_array_insert_into_terminal_node function in lib/assoc_array.c in the Linux kernel before 4.13.11 mishandles node splitting, which allows local users… |
CVE-2017-16883 | Medium | 6.5 | 2017-11-18 | The outputSWF_TEXT_RECORD function in util/outputscript.c in libming <= 0.4.8 is vulnerable to a NULL pointer dereference, which may allow attackers to cause a… |
CVE-2017-4938 | Medium | 6.5 | 2017-11-17 | VMware Workstation (12.x before 12.5.8) and Fusion (8.x before 8.5.9) contain a guest RPC NULL pointer dereference vulnerability. Successful exploitation of th… |
CVE-2017-16868 | Medium | 5.5 | 2017-11-17 | In SWFTools 0.9.2, the wav_convert2mono function in lib/wav.c does not properly restrict a multiplication within a malloc call, which allows remote attackers t… |
CVE-2017-1000200 | High | 7.5 | 2017-11-17 | tcmu-runner version 1.0.5 to 1.2.0 is vulnerable to a dbus triggered NULL pointer dereference in the tcmu-runner daemon's on_unregister_handler() function resu… |
CVE-2017-13135 | High | 7.8 | 2017-11-16 | A NULL Pointer Dereference exists in VideoLAN x265, as used in libbpg 0.9.7 and other products, because the CUData::initialize function in common/cudata.cpp mi… |
CVE-2017-15102 | Medium | 6.3 | 2017-11-15 | The tower_probe function in drivers/usb/misc/legousbtower.c in the Linux kernel before 4.8.1 allows local users (who are physically proximate for inserting a c… |
CVE-2017-15526 | Medium | 6.8 | 2017-11-13 | Prior to SEE v11.1.3MP1, Symantec Endpoint Encryption can be susceptible to a null pointer de-reference issue, which can result in a NullPointerException that… |
CVE-2017-12803 | Medium | 6.5 | 2017-11-10 | The Node_ValidatePtr function in corec/corec/node/node.c in mkclean 0.8.9 allows remote attackers to cause a denial of service (assert fault) via a crafted mkv… |
CVE-2017-12800 | Medium | 6.5 | 2017-11-10 | The EBML_FindNextElement function in ebmlmain.c in libebml2 through 2012-08-26 allows remote attackers to cause a denial of service (Null pointer dereference a… |
CVE-2017-12781 | Medium | 6.5 | 2017-11-10 | The EBML_BufferToID function in ebmlelement.c in libebml2 through 2012-08-26 allows remote attackers to cause a denial of service (Null pointer dereference and… |
CVE-2017-12779 | Medium | 6.5 | 2017-11-10 | The Node_GetData function in corec/corec/node/node.c in mkvalidator 0.5.1 allows remote attackers to cause a denial of service (Null pointer dereference and ap… |
CVE-2017-16711 | Medium | 5.5 | 2017-11-09 | The swf_DefineLosslessBitsTagToImage function in lib/modules/swfbits.c in SWFTools 0.9.2 mishandles an uncompress failure, which allows remote attackers to cau… |
CVE-2017-16647 | Medium | 6.6 | 2017-11-07 | drivers/net/usb/asix_devices.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (NULL pointer dereference and system crash)… |
CVE-2017-16646 | Medium | 6.6 | 2017-11-07 | drivers/media/usb/dvb-usb/dib0700_devices.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (BUG and system crash) or possi… |
CVE-2017-2893 | High | 7.5 | 2017-11-07 | An exploitable NULL pointer dereference vulnerability exists in the MQTT packet parsing functionality of Cesanta Mongoose 6.8. An MQTT SUBSCRIBE packet can cau… |
CVE-2017-12719 | High | 7.5 | 2017-11-06 | An Untrusted Pointer Dereference issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. A remote attacker is able to execute code to dere… |
CVE-2017-15306 | Medium | 5.5 | 2017-11-06 | The kvm_vm_ioctl_check_extension function in arch/powerpc/kvm/powerpc.c in the Linux kernel before 4.13.11 allows local users to cause a denial of service (NUL… |
CVE-2017-16545 | High | 8.8 | 2017-11-05 | The ReadWPGImage function in coders/wpg.c in GraphicsMagick 1.3.26 does not properly validate colormapped images, which allows remote attackers to cause a deni… |
CVE-2017-16537 | Medium | 6.6 | 2017-11-04 | The imon_probe function in drivers/media/rc/imon.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (NULL pointer dereferenc… |
CVE-2017-16536 | Medium | 6.6 | 2017-11-04 | The cx231xx_usb_probe function in drivers/media/usb/cx231xx/cx231xx-cards.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service… |
CVE-2017-16532 | Medium | 6.6 | 2017-11-04 | The get_endpoints function in drivers/usb/misc/usbtest.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (NULL pointer dere… |
CVE-2017-16359 | Medium | 5.5 | 2017-11-01 | In radare 2.0.1, a pointer wraparound vulnerability exists in store_versioninfo_gnu_verdef() in libr/bin/format/elf/elf.c. |
CVE-2017-15921 | High | 7.5 | 2017-10-30 | In Watchdog Anti-Malware 2.74.186.150 and Online Security Pro 2.74.186.150, the zam32.sys driver contains a NULL pointer dereference vulnerability that gets tr… |
CVE-2017-15920 | High | 7.5 | 2017-10-30 | In Watchdog Anti-Malware 2.74.186.150 and Online Security Pro 2.74.186.150, the zam32.sys driver contains a NULL pointer dereference vulnerability that gets tr… |
CVE-2015-7549 | Medium | 6.0 | 2017-10-30 | The MSI-X MMIO support in hw/pci/msix.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (NULL pointer derefere… |
CVE-2017-15955 | Medium | 5.5 | 2017-10-28 | bchunk (related to BinChunker) 1.2.0 and 1.2.1 is vulnerable to an "Access violation near NULL on destination operand" and crash when processing a malformed CU… |
CVE-2017-15939 | Medium | 5.5 | 2017-10-27 | dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, mishandles NULL files in a .debug_line file table, whic… |
CVE-2017-15930 | High | 8.8 | 2017-10-27 | In ReadOneJNGImage in coders/png.c in GraphicsMagick 1.3.26, a Null Pointer Dereference occurs while transferring JPEG scanlines, related to a PixelPacket poin… |
CVE-2017-15096 | Low | 3.3 | 2017-10-26 | A flaw was found in GlusterFS in versions prior to 3.10. A null pointer dereference in send_brick_req function in glusterfsd/src/gf_attach.c may be used to cau… |
CVE-2017-15723 | High | 7.5 | 2017-10-22 | In Irssi before 1.0.5, overlong nicks or targets may result in a NULL pointer dereference while splitting the message. |
CVE-2017-15721 | High | 7.5 | 2017-10-22 | In Irssi before 1.0.5, certain incorrectly formatted DCC CTCP messages could cause a NULL pointer dereference. This is a separate, but similar, issue relative… |
CVE-2017-15600 | High | 7.5 | 2017-10-18 | In GNU Libextractor 1.4, there is a NULL Pointer Dereference in the EXTRACTOR_nsf_extract_method function of plugins/nsf_extractor.c. |
CVE-2014-3164 | High | 7.5 | 2017-10-18 | cmds/servicemanager/service_manager.c in Android before commit 7d42a3c31ba78a418f9bdde0e0ab951469f321b5 allows attackers to cause a denial of service (NULL poi… |