Vulnerability index

Browse CVEs

5,206 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness NULL Pointer DereferenceCWE-476 × clear
Fedora MEDIUM 5.5
CVE-2016-8884

The bmp_getdata function in libjasper/bmp/bmp_dec.c in JasPer 1.900.5 allows remote attackers to cause a denial of service (NULL pointer dereference)…

Patch available
Fix from $1,600 2017-03-28
Radare2 MEDIUM 5.5
CVE-2017-7274

The r_pkcs7_parse_cms function in libr/util/r_pkcs7.c in radare2 1.3.0 allows remote attackers to cause a denial of service (NULL pointer dereference…

Patch available
Fix from $1,600 2017-03-27
Freeradius MEDIUM 5.9
CVE-2015-8762

The EAP-PWD module in FreeRADIUS 3.0 through 3.0.8 allows remote attackers to cause a denial of service (NULL pointer dereference and server crash) v…

Patch available
Fix from $1,600 2017-03-27
Openslp HIGH 7.5
CVE-2016-4912EPSS 5%

The _xrealloc function in xlsp_xmalloc.c in OpenSLP 2.0.0 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) v…

No fix yet
Fix from $1,950 2017-03-27
Tinydtls HIGH 7.5
CVE-2017-7243

Eclipse tinydtls 0.8.2 for Eclipse IoT allows remote attackers to cause a denial of service (DTLS peer crash) by sending a "Change cipher spec" packe…

Mitigation only
Fix from $1,950 2017-03-24
Libgit2 HIGH 7.5
CVE-2016-10129

The Git Smart Protocol support in libgit2 before 0.24.6 and 0.25.x before 0.25.1 allows remote attackers to cause a denial of service (NULL pointer d…

Fix: after 0.24.5
Fix from $1,950 2017-03-24
Fedora HIGH 7.5
CVE-2016-10132

regexp.c in Artifex Software, Inc. MuJS allows attackers to cause a denial of service (NULL pointer dereference and crash) via vectors related to reg…

Patch available
Fix from $1,950 2017-03-24
Jasper MEDIUM 5.5
CVE-2016-8885

The bmp_getdata function in libjasper/bmp/bmp_dec.c in JasPer before 1.900.9 allows remote attackers to cause a denial of service (NULL pointer deref…

Fix: after 1.900.8
Fix from $1,600 2017-03-23
Fedora MEDIUM 5.5
CVE-2016-8887

The jp2_colr_destroy function in libjasper/jp2/jp2_cod.c in JasPer before 1.900.10 allows remote attackers to cause a denial of service (NULL pointer…

Fix: after 1.900.9
Fix from $1,600 2017-03-23
Binutils HIGH 7.5
CVE-2017-7225

The find_nearest_line function in addr2line in GNU Binutils 2.28 does not handle the case where the main file name and the directory name are both em…

Patch available
Fix from $1,950 2017-03-22
Ghostscript MEDIUM 5.5
CVE-2017-7207

The mem_get_bits_rectangle function in Artifex Software, Inc. Ghostscript 9.20 allows remote attackers to cause a denial of service (NULL pointer der…

Patch available
Fix from $1,600 2017-03-21
Binutils MEDIUM 5.5
CVE-2017-7209

The dump_section_as_bytes function in readelf in GNU Binutils 2.28 accesses a NULL pointer while reading section contents in a corrupt binary, leadin…

Patch available
Fix from $1,600 2017-03-21
Usbpcap HIGH 7.8
CVE-2017-6178

The IofCallDriver function in USBPcap 1.1.0.0 allows local users to gain privileges via a crafted 0x00090028 IOCTL call, which triggers a NULL pointe…

No fix yet
Fix from $1,950 2017-03-20
Windows 10 MEDIUM 5.9
CVE-2017-0016EPSS 26%

Microsoft Windows 10 Gold, 1511, and 1607; Windows 8.1; Windows RT 8.1; Windows Server 2012 R2, and Windows Server 2016 do not properly handle certai…

Patch available
Fix from $1,600 2017-03-17
Linux Kernel MEDIUM 5.5
CVE-2017-6951

The keyring_search_aux function in security/keys/keyring.c in the Linux kernel through 3.14.79 allows local users to cause a denial of service (NULL …

Fix: after 3.14.79
Fix from $1,600 2017-03-16
Imagemagick MEDIUM 5.5
CVE-2015-8898

The WriteImages function in magick/constitute.c in ImageMagick before 6.9.2-4 allows remote attackers to cause a denial of service (NULL pointer dere…

Fix: after 6.9.2-3
Fix from $1,600 2017-03-15
Virglrenderer MEDIUM 6.5
CVE-2017-5937

The util_format_is_pure_uint function in vrend_renderer.c in Virgil 3d project (aka virglrenderer) 0.6.0 and earlier allows local guest OS users to c…

Fix: after 0.5.0
Fix from $1,600 2017-03-15
Podofo MEDIUM 5.5
CVE-2017-6841

The GraphicsStack::TGraphicsStackElement::~TGraphicsStackElement function in graphicsstack.h in PoDoFo 0.9.5 allows remote attackers to cause a denia…

Mitigation only
Fix from $1,600 2017-03-15
Podofo MEDIUM 5.5
CVE-2017-6842

The ColorChanger::GetColorFromStack function in colorchanger.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer d…

Mitigation only
Fix from $1,600 2017-03-15
Podofo MEDIUM 5.5
CVE-2017-6845

The PoDoFo::PdfColor::operator function in PdfColor.cpp in PoDoFo 0.9.4 allows remote attackers to cause a denial of service (NULL pointer dereferenc…

Mitigation only
Fix from $1,600 2017-03-15
Podofo MEDIUM 5.5
CVE-2017-6846

The GraphicsStack::TGraphicsStackElement::SetNonStrokingColorSpace function in graphicsstack.h in PoDoFo 0.9.4 allows remote attackers to cause a den…

Mitigation only
Fix from $1,600 2017-03-15
Podofo MEDIUM 5.5
CVE-2017-6847

The PoDoFo::PdfVariant::DelayedLoad function in PdfVariant.h in PoDoFo 0.9.4 allows remote attackers to cause a denial of service (NULL pointer deref…

Mitigation only
Fix from $1,600 2017-03-15
Podofo MEDIUM 5.5
CVE-2017-6848

The PoDoFo::PdfXObject::PdfXObject function in PdfXObject.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer dere…

Mitigation only
Fix from $1,600 2017-03-15
Podofo MEDIUM 5.5
CVE-2017-6849

The PoDoFo::PdfColorGray::~PdfColorGray function in PdfColor.cpp in PoDoFo 0.9.4 allows remote attackers to cause a denial of service (NULL pointer d…

Mitigation only
Fix from $1,600 2017-03-15
Jasper MEDIUM 5.5
CVE-2017-6850

The jp2_cdef_destroy function in jp2_cod.c in JasPer before 2.0.13 allows remote attackers to cause a denial of service (NULL pointer dereference) vi…

Fix: after 2.0.12
Fix from $1,600 2017-03-15
Jasper HIGH 7.5
CVE-2016-10248

The jpc_tsfb_synthesize function in jpc_tsfb.c in JasPer before 1.900.9 allows remote attackers to cause a denial of service (NULL pointer dereferenc…

Fix: after 1.900.8
Fix from $1,950 2017-03-15
Jasper HIGH 7.5
CVE-2016-10250

The jp2_colr_destroy function in jp2_cod.c in JasPer before 1.900.13 allows remote attackers to cause a denial of service (NULL pointer dereference) …

Fix: after 1.900.12
Fix from $1,950 2017-03-15
Virglrenderer MEDIUM 6.5
CVE-2017-6210

The vrend_decode_reset function in vrend_decode.c in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service (NULL pointe…

Fix: after 0.5.0
Fix from $1,600 2017-03-15
Bitlbee HIGH 7.5
CVE-2016-10189

BitlBee before 3.5 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) and possibly execute arbitrary code via …

Fix: after 3.5
Fix from $1,950 2017-03-14
Bitlbee CRITICAL 9.8
CVE-2017-5668

bitlbee-libpurple before 3.5.1 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) and possibly execute arbitra…

Fix: after 3.5
Fix from $2,300 2017-03-14