Browse CVEs

HIGH 7.5 CVE-2022-37797 In lighttpd 1.4.65, mod_wstunnel does not initialize a handler function pointer if an invalid HTTP request (websocket handshake) is received. It lead… Debian Linux No fix yet Fix from $1,9502022-09-12 MEDIUM 5.5 CVE-2022-38096 A NULL pointer dereference vulnerability was found in vmwgfx driver in drivers/gpu/vmxgfx/vmxgfx_execbuf.c in GPU component of Linux kernel with devi… Linux Kernel Mitigation only Fix from $1,6002022-09-09 MEDIUM 5.5 CVE-2022-3153 NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0404. Vim 9.0.0404+ Fix from $1,6002022-09-08 MEDIUM 6.5 CVE-2022-36659 xhyve commit dfbe09b was discovered to contain a NULL pointer dereference via the component vi_pci_write(). This vulnerability allows attackers to ca… Xhyve No fix yet Fix from $1,6002022-09-07 MEDIUM 6.5 CVE-2022-36661 xhyve commit dfbe09b was discovered to contain a NULL pointer dereference via the component vi_pci_read(). This vulnerability allows attackers to cau… Xhyve No fix yet Fix from $1,6002022-09-07 MEDIUM 5.5 CVE-2022-25310 A segmentation fault (SEGV) flaw was found in the Fribidi package and affects the fribidi_remove_bidi_marks() function of the lib/fribidi.c file. Thi… Enterprise Linux 1.0.12+ Fix from $1,6002022-09-06 HIGH 7.5 CVE-2022-39829 There is a NULL pointer dereference in aes256_encrypt in Samsung mTower through 0.3.0 due to a missing check on the return value of EVP_CIPHER_CTX_ne… Mtower after 0.3.0 Fix from $1,9502022-09-05 MEDIUM 5.5 CVE-2021-35135 A null pointer dereference may potentially occur during RSA key import in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Co… Apq8017 Firmware Mitigation only Fix from $1,6002022-09-02 MEDIUM 5.5 CVE-2022-3078 An issue was discovered in the Linux kernel through 5.16-rc6. There is a lack of check after calling vzalloc() and lack of free after allocation in d… Linux Kernel 5.18+ Fix from $1,6002022-09-01 HIGH 7.5 CVE-2022-36621 Samsung Electronics mTower v0.3.0 and earlier was discovered to contain a NULL pointer dereference via the function TEE_AllocateTransientObject. Mtower after 0.3.0 Fix from $1,9502022-09-01 HIGH 7.5 CVE-2022-36622 Samsung Electronics mTower v0.3.0 and earlier was discovered to contain a NULL pointer dereference via the function TEE_GetObjectInfo1. Mtower after 0.3.0 Fix from $1,9502022-09-01 HIGH 7.5 CVE-2020-35525 In SQlite 3.31.1, a potential null pointer derreference was found in the INTERSEC query processing. SQLite Patch available Fix from $1,9502022-09-01 MEDIUM 5.5 CVE-2022-2153 A flaw was found in the Linux kernel’s KVM when attempting to set a SynIC IRQ. This issue makes it possible for a misbehaving VMM to write to SYNIC/S… Linux Kernel 5.18+ Fix from $1,6002022-08-31 MEDIUM 5.5 CVE-2020-35538 A crafted input file could cause a null pointer dereference in jcopy_sample_rows() when processed by libjpeg-turbo. Libjpeg Turbo Patch available Fix from $1,6002022-08-31 MEDIUM 5.5 CVE-2022-1263 A NULL pointer dereference issue was found in KVM when releasing a vCPU with dirty ring support enabled. This flaw allows an unprivileged local attac… Linux Kernel 5.18+ Fix from $1,6002022-08-31 MEDIUM 6.5 CVE-2021-46837 res_pjsip_t38 in Sangoma Asterisk 16.x before 16.16.2, 17.x before 17.9.3, and 18.x before 18.2.2, and Certified Asterisk before 16.8-cert7, allows a… Debian Linux 16.16.2 / 17.9.3+ Fix from $1,6002022-08-30 HIGH 7.5 CVE-2022-39028 telnetd in GNU Inetutils through 2.3, MIT krb5-appl through 1.0.3, and derivative works has a NULL pointer dereference via 0xff 0xf7 or 0xff 0xf8. In… Debian Linux after 2.3 Fix from $1,9502022-08-30 HIGH 7.5 CVE-2022-1199 A flaw was found in the Linux kernel. This flaw allows an attacker to crash the Linux kernel by simulating amateur radio from the user space, resulti… Linux Kernel after 5.17.14 Fix from $1,9502022-08-29 MEDIUM 5.5 CVE-2022-2980 NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0259. Fedora 9.0.0259+ Fix from $1,6002022-08-25 HIGH 7.5 CVE-2021-42521 There is a NULL pointer dereference vulnerability in VTK before 9.2.5, and it lies in IO/Infovis/vtkXMLTreeReader.cxx. The vendor didn't check the re… Vtk after 9.0.0 Fix from $1,9502022-08-25 MEDIUM 6.0 CVE-2021-4158 A NULL pointer dereference issue was found in the ACPI code of QEMU. A malicious, privileged user within the guest could use this flaw to crash the Q… Enterprise Linux 7.0.0+ Fix from $1,6002022-08-24 MEDIUM 6.5 CVE-2021-4209 A NULL pointer dereference flaw was found in GnuTLS. As Nettle's hash update functions internally call memcpy, providing zero-length input may cause … Enterprise Linux 3.7.3+ Fix from $1,6002022-08-24 MEDIUM 5.5 CVE-2022-2923 NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0240. Fedora 9.0.0240+ Fix from $1,6002022-08-22 MEDIUM 5.5 CVE-2021-3659 A NULL pointer dereference flaw was found in the Linux kernel’s IEEE 802.15.4 wireless networking subsystem in the way the user closes the LR-WPAN co… Linux Kernel 5.12+ Fix from $1,6002022-08-22 MEDIUM 5.5 CVE-2022-2874 NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0224. Vim 9.0.0224+ Fix from $1,6002022-08-18 HIGH 7.5 CVE-2022-2337 A crafted HTTP packet with a missing HTTP URI can create a denial-of-service condition in Softing Secure Integration Server V1.22. Edgeaggregator Mitigation only Fix from $1,9502022-08-17 HIGH 7.5 CVE-2022-2547 A crafted HTTP packet without a content-type header can create a denial-of-service condition in Softing Secure Integration Server V1.22. Edgeaggregator Mitigation only Fix from $1,9502022-08-17 HIGH 7.5 CVE-2022-1748 Softing OPC UA C++ Server SDK, Secure Integration Server, edgeConnector, edgeAggregator, OPC Suite, and uaGate are affected by a NULL pointer derefer… Edgeaggregator No fix yet Fix from $1,9502022-08-17 HIGH 7.5 CVE-2022-36186 A Null Pointer dereference vulnerability exists in GPAC 2.1-DEV-revUNKNOWN-master via the function gf_filter_pid_set_property_full () at filter_core/… Gpac Patch available Fix from $1,9502022-08-17 MEDIUM 5.5 CVE-2022-36151 tifig v0.2.2 was discovered to contain a segmentation violation via getType() at /common/bbox.cpp. Tifig No fix yet Fix from $1,6002022-08-16