Base de CVEs

CVE-2019-15217 Média · 4.6 CWE-476 19/08/2019

NULL Pointer Dereference em Linux Linux Kernel

An issue was discovered in the Linux kernel before 5.2.3. There is a NULL pointer dereference caused by a malicious USB device in the drivers/media/usb/zr364xx/zr364xx.c driver.

CVE-2019-9937 Alta · 7.5 CWE-476 22/03/2019

In SQLite 3.27.2, interleaving reads and writes in a single transaction with an fts5 virtual...

In SQLite 3.27.2, interleaving reads and writes in a single transaction with an fts5 virtual table will lead to a NULL Pointer Dereference in fts5ChunkIterate in sqlite3.c. This is related to ext/fts5/fts5_hash.c and ext/fts5/fts5_index.c.

CVE-2019-9923 Alta · 7.5 CWE-476 22/03/2019

pax_decode_header in sparse.c in GNU Tar before 1.32 had a NULL pointer dereference when parsing...

pax_decode_header in sparse.c in GNU Tar before 1.32 had a NULL pointer dereference when parsing certain archives that have malformed extended headers.

CVE-2018-20786 Alta · 7.5 CWE-476 24/02/2019

libvterm through 0+bzr726, as used in Vim and other products, mishandles certain out-of-memory...

libvterm through 0+bzr726, as used in Vim and other products, mishandles certain out-of-memory conditions, leading to a denial of service (application crash), related to screen.c, state.c, and vterm.c.

CVE-2018-1000879 Média · 6.5 CWE-476 20/12/2018

NULL Pointer Dereference em Libarchive

libarchive version commit 379867ecb330b3a952fb7bfa7bffb7bbd5547205 onwards (release v3.3.0 onwards) contains a CWE-476: NULL Pointer Dereference vulnerability in ACL parser - libarchive/archive_acl.c, archive_acl_from_text_l() that can result in Crash/DoS. This attack appear to be exploitable via the victim must open a specially crafted archive file.

CVE-2018-19542 Média · 6.5 CWE-476 26/11/2018

An issue was discovered in JasPer 2.0.14. There is a NULL pointer dereference in the function...

An issue was discovered in JasPer 2.0.14. There is a NULL pointer dereference in the function jp2_decode in libjasper/jp2/jp2_dec.c, leading to a denial of service.

CVE-2018-14404 Média · 6.5 CWE-476 19/07/2018

Nokogiri NULL Pointer Dereference

A NULL pointer dereference vulnerability exists in the xpath.c:xmlXPathCompOpEval() function of libxml2 through 2.9.8 when parsing an invalid XPath expression in the XPATH_OP_AND or XPATH_OP_OR case. Applications processing untrusted XSL format inputs with the use of the libxml2 library may be vulnerable to a denial of service attack due to a crash of the application.

CVE-2017-14318 Média · 6.5 CWE-476 12/09/2017

An issue was discovered in Xen 4.5.x through 4.9.x. The function `__gnttab_cache_flush` handles...

An issue was discovered in Xen 4.5.x through 4.9.x. The function `__gnttab_cache_flush` handles GNTTABOP_cache_flush grant table operations. It checks to see if the calling domain is the owner of the page that is to be operated on. If it is not, the owner's grant table is checked to see if a grant mapping to the calling domain exists for the page in question. However, the function does not check to see if the owning domain actually has a grant table or not. Some special domains, such as `DOMID_XEN`, `DOMID_IO` and `DOMID_COW` are created without grant tables. Hence, if __gnttab_cache_flush operates on a page owned by these special domains, it will attempt to dereference a NULL pointer in the domain struct.

CVE-2014-9323 Média · 5.0 CWE-476 16/12/2014

The xdr_status_vector function in Firebird before 2.1.7 and 2.5.x before 2.5.3 SU1 allows remote...

The xdr_status_vector function in Firebird before 2.1.7 and 2.5.x before 2.5.3 SU1 allows remote attackers to cause a denial of service (NULL pointer dereference, segmentation fault, and crash) via an op_response action with a non-empty status.