Browse CVEs

MEDIUM 5.5 CVE-2018-14646 The Linux kernel before 4.15-rc8 was found to be vulnerable to a NULL pointer dereference bug in the __netlink_ns_capable() function in the net/netli… Linux Kernel after 4.14 Fix from $1,6002018-11-26 MEDIUM 6.5 CVE-2018-19542 An issue was discovered in JasPer 2.0.14. There is a NULL pointer dereference in the function jp2_decode in libjasper/jp2/jp2_dec.c, leading to a den… Ubuntu Linux No fix yet Fix from $1,6002018-11-26 HIGH 8.8 CVE-2018-19532 A NULL pointer dereference vulnerability exists in the function PdfTranslator::setTarget() in pdftranslator.cpp of PoDoFo 0.9.6, while creating the P… Podofo Patch available Fix from $1,9502018-11-26 HIGH 7.8 CVE-2018-19504 An issue was discovered in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.1. There is a NULL pointer dereference in ifilter_bank() in libfaad/filtbank… Freeware Advanced Audio Decoder 2 No fix yet Fix from $1,9502018-11-23 MEDIUM 6.5 CVE-2018-19432 An issue was discovered in libsndfile 1.0.28. There is a NULL pointer dereference in the function sf_write_int in sndfile.c, which will lead to a den… Debian Linux Patch available Fix from $1,6002018-11-22 MEDIUM 5.5 CVE-2018-19406 kvm_pv_send_ipi in arch/x86/kvm/lapic.c in the Linux kernel through 4.19.2 allows local users to cause a denial of service (NULL pointer dereference … Linux Kernel after 4.19.2 Fix from $1,6002018-11-21 MEDIUM 5.5 CVE-2018-19407 The vcpu_scan_ioapic function in arch/x86/kvm/x86.c in the Linux kernel through 4.19.2 allows local users to cause a denial of service (NULL pointer … Linux Kernel after 4.19.2 Fix from $1,6002018-11-21 HIGH 7.5 CVE-2018-19395 ext/standard/var.c in PHP 5.x through 7.1.24 on Windows allows attackers to cause a denial of service (NULL pointer dereference and application crash… PHP after 7.1.24 Fix from $1,9502018-11-20 MEDIUM 6.5 CVE-2018-7361 All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by null pointer dereference vulnerability, which may allows an attacker to caus… Zxhn F670 Firmware after 1.1.10p3t18 Fix from $1,6002018-11-16 MEDIUM 6.5 CVE-2018-19208 In libwpd 0.10.2, there is a NULL pointer dereference in the function WP6ContentListener::defineTable in WP6ContentListener.cpp that will lead to a d… Enterprise Linux No fix yet Fix from $1,6002018-11-12 MEDIUM 5.5 CVE-2018-19209 Netwide Assembler (NASM) 2.14rc15 has a NULL pointer dereference in the function find_label in asm/labels.c that will lead to a DoS attack. Netwide Assembler Patch available Fix from $1,6002018-11-12 MEDIUM 6.5 CVE-2018-19210 In LibTIFF 4.0.9, there is a NULL pointer dereference in the TIFFWriteDirectorySec function in tif_dirwrite.c that will lead to a denial of service a… Debian Linux No fix yet Fix from $1,6002018-11-12 MEDIUM 5.5 CVE-2018-19211 In ncurses 6.1, there is a NULL pointer dereference at function _nc_parse_entry in parse_entry.c that will lead to a denial of service attack. The pr… Ncurses No fix yet Fix from $1,6002018-11-12 MEDIUM 6.5 CVE-2018-19217 In ncurses, possibly a 6.x version, there is a NULL pointer dereference at the function _nc_name_match that will lead to a denial of service attack. … Ncurses No fix yet Fix from $1,6002018-11-12 HIGH 7.5 CVE-2018-19200 An issue was discovered in uriparser before 0.9.0. UriCommon.c allows attempted operations on NULL input via a uriResetUri* function. Debian Linux 0.9.0 / 8.0+ Fix from $1,9502018-11-12 HIGH 7.5 CVE-2018-19184 cmd/evm/runner.go in Go Ethereum (aka geth) 1.8.17 allows attackers to cause a denial of service (SEGV) via crafted bytecode. Go Ethereum No fix yet Fix from $1,9502018-11-12 MEDIUM 6.5 CVE-2018-19149 Poppler before 0.70.0 has a NULL pointer dereference in _poppler_attachment_new when called from poppler_annot_file_attachment_get_attachment. Ubuntu Linux 0.70.0+ Fix from $1,6002018-11-10 MEDIUM 6.5 CVE-2018-19129 In Libav 12.3, a NULL pointer dereference (RIP points to zero) issue in ff_mpa_synth_filter_float in libavcodec/mpegaudiodsp_template.c can cause a s… Libav Mitigation only Fix from $1,6002018-11-09 MEDIUM 6.5 CVE-2018-19060 An issue was discovered in Poppler 0.71.0. There is a NULL pointer dereference in goo/GooString.h, will lead to denial of service, as demonstrated by… Ubuntu Linux No fix yet Fix from $1,6002018-11-07 HIGH 7.5 CVE-2018-18937 An issue has been found in libIEC61850 v1.3. It is a NULL pointer dereference in ClientDataSet_getValues in client/ied_connection.c. Libiec61850 No fix yet Fix from $1,9502018-11-05 HIGH 8.8 CVE-2018-18883 An issue was discovered in Xen 4.9.x through 4.11.x, on Intel x86 platforms, allowing x86 HVM and PVH guests to cause a host OS denial of service (NU… Xen after 4.11.0 Fix from $1,9502018-11-01 MEDIUM 5.5 CVE-2018-18873 An issue was discovered in JasPer 2.0.14. There is a NULL pointer dereference in the function ras_putdatastd in ras/ras_enc.c. Ubuntu Linux No fix yet Fix from $1,6002018-10-31 MEDIUM 6.5 CVE-2018-18829 There exists a NULL pointer dereference in ff_vc1_parse_frame_header_adv in vc1.c in Libav 12.3, which allows attackers to cause a denial-of-service … Libav No fix yet Fix from $1,6002018-10-30 MEDIUM 6.5 CVE-2018-18661 An issue was discovered in LibTIFF 4.0.9. There is a NULL pointer dereference in the function LZWDecode in the file tif_lzw.c. Ubuntu Linux Patch available Fix from $1,6002018-10-26 MEDIUM 5.5 CVE-2018-18606 An issue was discovered in the merge_strings function in merge.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binu… Debian Linux No fix yet Fix from $1,6002018-10-23 MEDIUM 5.5 CVE-2018-18607 An issue was discovered in elf_link_input_bfd in elflink.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2… Debian Linux No fix yet Fix from $1,6002018-10-23 HIGH 7.8 CVE-2018-18328 A KERedirect Untrusted Pointer Dereference Privilege Escalation vulnerability in Trend Micro Antivirus for Mac (Consumer) 7.0 (2017) and above could … Antivirus For Mac 2017 after 9.0.1356 Fix from $1,9502018-10-23 HIGH 7.8 CVE-2018-18329 A KERedirect Untrusted Pointer Dereference Privilege Escalation vulnerability in Trend Micro Antivirus for Mac (Consumer) 7.0 (2017) and above could … Antivirus For Mac 2017 after 9.0.1356 Fix from $1,9502018-10-23 HIGH 7.8 CVE-2018-18327 A KERedirect Untrusted Pointer Dereference Privilege Escalation vulnerability in Trend Micro Antivirus for Mac (Consumer) 7.0 (2017) and above could … Antivirus For Mac 2017 after 9.0.1356 Fix from $1,9502018-10-23 HIGH 7.8 CVE-2018-15367 A ctl_set KERedirect Untrusted Pointer Dereference Privilege Escalation vulnerability in Trend Micro Antivirus for Mac (Consumer) 7.0 (2017) and abov… Antivirus For Mac 2017 after 9.0.1356 Fix from $1,9502018-10-23