Browse CVEs

HIGH 7.5 CVE-2019-1010171 Jsish 2.4.83 2.0483 is affected by: Nullpointer dereference. The impact is: denial of service. The component is: function jsi_DumpFunctions (jsiEval.… Jsish Patch available Fix from $1,9502019-07-23 HIGH 7.8 CVE-2019-2264 Null pointer dereference occurs for channel context while opening glink channel in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile, Snapd… Mdm9607 Firmware Patch available Fix from $1,9502019-07-22 HIGH 7.5 CVE-2019-14208 An issue was discovered in Foxit PhantomPDF before 8.3.10. The application could be exposed to a NULL pointer dereference and crash when getting a PD… Phantompdf 8.3.10+ Fix from $1,9502019-07-21 HIGH 7.5 CVE-2019-14212 An issue was discovered in Foxit PhantomPDF before 8.3.11. The application could crash when calling certain XFA JavaScript due to the use of, or acce… Phantompdf 8.3.11+ Fix from $1,9502019-07-21 HIGH 7.5 CVE-2019-1010239 DaveGamble/cJSON cJSON 1.7.8 is affected by: Improper Check for Unusual or Exceptional Conditions. The impact is: Null dereference, so attack can cau… Cjson 18.1.3.1.0+ Fix from $1,9502019-07-19 MEDIUM 6.5 CVE-2019-13959 In Bento4 1.5.1-627, AP4_DataBuffer::SetDataSize does not handle reallocation failures, leading to a memory copy into a NULL pointer. This is differe… Bento4 No fix yet Fix from $1,6002019-07-18 HIGH 7.5 CVE-2019-12175 In Zeek Network Security Monitor (formerly known as Bro) before 2.6.2, a NULL pointer dereference in the Kerberos (aka KRB) protocol parser leads to … Zeek 2.6.2+ Fix from $1,9502019-07-17 MEDIUM 5.5 CVE-2019-13590 An issue was discovered in libsox.a in SoX 14.4.2. In sox-fmt.h (startread function), there is an integer overflow on the result of integer addition … Sound Exchange No fix yet Fix from $1,6002019-07-14 MEDIUM 5.3 CVE-2019-13161 An issue was discovered in Asterisk Open Source through 13.27.0, 14.x and 15.x through 15.7.2, and 16.x through 16.4.0, and Certified Asterisk throug… Debian Linux 13.27.1 / 15.7.3+ Fix from $1,6002019-07-12 MEDIUM 6.5 CVE-2019-13225 A NULL Pointer Dereference in match_at() in regexec.c in Oniguruma 6.9.2 allows attackers to potentially cause denial of service by providing a craft… Fedora Patch available Fix from $1,6002019-07-10 HIGH 7.5 CVE-2019-1922 A vulnerability in Cisco SIP IP Phone Software for Cisco IP Phone 7800 Series and 8800 Series could allow an unauthenticated, remote attacker to caus… Ip Conference Phone 7832 Firmware Mitigation only Fix from $1,9502019-07-06 HIGH 7.5 CVE-2019-13238 An issue was discovered in Bento4 1.5.1.0. A memory allocation failure is unhandled in Core/Ap4SdpAtom.cpp and leads to crashes. When parsing input v… Bento4 No fix yet Fix from $1,9502019-07-04 MEDIUM 6.5 CVE-2019-13147 In Audio File Library (aka audiofile) 0.3.6, there exists one NULL pointer dereference bug in ulaw2linear_buf in G711.cpp in libmodules.a that allows… Debian Linux No fix yet Fix from $1,6002019-07-02 MEDIUM 6.5 CVE-2019-13114 http.c in Exiv2 through 0.27.1 allows a malicious http server to cause a denial of service (crash due to a NULL pointer dereference) by returning a c… Fedora after 0.27.1 Fix from $1,6002019-06-30 MEDIUM 5.5 CVE-2019-13032 An issue was discovered in FlightCrew v0.9.2 and earlier. A NULL pointer dereference occurs in GetRelativePathToNcx() or GetRelativePathsToXhtmlDocum… Flightcrew after 0.9.2 Fix from $1,6002019-06-28 HIGH 7.5 CVE-2019-12995 Istio before 1.2.2 mishandles certain access tokens, leading to "Epoch 0 terminated with an error" in Envoy. This is related to a jwt_authenticator.c… Istio 1.2.2+ Fix from $1,9502019-06-28 MEDIUM 5.5 CVE-2019-12974 A NULL pointer dereference in the function ReadPANGOImage in coders/pango.c and the function ReadVIDImage in coders/vid.c in ImageMagick 7.0.8-34 all… Imagemagick Patch available Fix from $1,6002019-06-26 MEDIUM 5.5 CVE-2019-12984 A NULL pointer dereference vulnerability in the function nfc_genl_deactivate_target() in net/nfc/netlink.c in the Linux kernel before 5.1.13 can be t… Linux Kernel 5.1.13+ Fix from $1,6002019-06-26 MEDIUM 5.5 CVE-2018-15733 An issue was discovered in STOPzilla AntiMalware 6.5.2.59. The driver file szkg64.sys contains a NULL Pointer Dereference vulnerability due to not va… Antimalware No fix yet Fix from $1,6002019-06-21 MEDIUM 6.5 CVE-2019-12435 Samba 4.9.x before 4.9.9 and 4.10.x before 4.10.5 has a NULL pointer dereference, leading to Denial of Service. This is related to the AD DC DNS mana… Samba 4.9.9 / 4.10.5+ Fix from $1,6002019-06-19 MEDIUM 6.5 CVE-2019-12436 Samba 4.10.x before 4.10.5 has a NULL pointer dereference, leading to an AD DC LDAP server Denial of Service. This is related to an attacker using th… Ubuntu Linux 4.10.5+ Fix from $1,6002019-06-19 HIGH 7.8 CVE-2019-12881 i915_gem_userptr_get_pages in drivers/gpu/drm/i915/i915_gem_userptr.c in the Linux kernel 4.15.0 on Ubuntu 18.04.2 allows local users to cause a deni… Linux Kernel No fix yet Fix from $1,9502019-06-18 HIGH 7.5 CVE-2019-12818EPSS 5% An issue was discovered in the Linux kernel before 4.20.15. The nfc_llcp_build_tlv function in net/nfc/llcp_commands.c may return NULL. If the caller… Linux Kernel 4.20.15+ Fix from $1,9502019-06-14 HIGH 7.5 CVE-2018-19801 aubio v0.4.0 to v0.4.8 has a NULL pointer dereference in new_aubio_filterbank via invalid n_filters. Aubio after 0.4.8 Fix from $1,9502019-06-07 HIGH 7.5 CVE-2018-19802 aubio v0.4.0 to v0.4.8 has a new_aubio_onset NULL pointer dereference. Aubio after 0.4.8 Fix from $1,9502019-06-07 HIGH 7.5 CVE-2018-20014 In UrBackup 2.2.6, an attacker can send a malformed request to the client over the network, and trigger a fileservplugin/CClientThread.cpp CClientThr… Urbackup Mitigation only Fix from $1,9502019-06-07 HIGH 7.5 CVE-2019-12615 An issue was discovered in get_vdev_port_node_info in arch/sparc/kernel/mdesc.c in the Linux kernel through 5.1.6. There is an unchecked kstrdup_cons… Linux Kernel 4.14.130 / 4.19.56+ Fix from $1,9502019-06-03 MEDIUM 5.5 CVE-2019-12481 An issue was discovered in GPAC 0.7.1. There is a NULL pointer dereference in the function GetESD at isomedia/track.c in libgpac.a, as demonstrated b… Debian Linux after 0.7.1 Fix from $1,6002019-05-30 HIGH 7.5 CVE-2019-12482 An issue was discovered in GPAC 0.7.1. There is a NULL pointer dereference in the function gf_isom_get_original_format_type at isomedia/drm_sample.c … Debian Linux after 0.7.1 Fix from $1,9502019-05-30 MEDIUM 5.5 CVE-2019-12455 An issue was discovered in sunxi_divs_clk_setup in drivers/clk/sunxi/clk-sunxi.c in the Linux kernel through 5.1.5. There is an unchecked kstrndup of… Linux Kernel after 5.1.5 Fix from $1,6002019-05-30