Browse CVEs

HIGH 7.5 CVE-2018-14737 An issue was discovered in libpbc.a in cloudwu PBC through 2017-03-02. A NULL pointer dereference can occur in pbc_wmessage_string in wmessage.c. Pbc after 2017-03-02 Fix from $1,9502018-07-30 HIGH 7.5 CVE-2017-2634EPSS 5% It was found that the Linux kernel's Datagram Congestion Control Protocol (DCCP) implementation before 2.6.22.17 used the IPv4-only inet_sk_rebuild_h… Linux Kernel 2.6.22.17+ Fix from $1,9502018-07-27 MEDIUM 5.5 CVE-2017-2586 A null pointer dereference vulnerability was found in netpbm before 10.61. A maliciously crafted SVG file could cause the application to crash. Netpbm 10.61.00+ Fix from $1,6002018-07-27 HIGH 7.5 CVE-2017-15120EPSS 52% An issue has been found in the parsing of authoritative answers in PowerDNS Recursor before 4.0.8, leading to a NULL pointer dereference when parsing… Debian Linux 4.0.8+ Fix from $1,9502018-07-27 MEDIUM 5.5 CVE-2018-14609 An issue was discovered in the Linux kernel through 4.17.10. There is an invalid pointer dereference in __del_reloc_root() in fs/btrfs/relocation.c w… Linux Kernel after 4.17.10 Fix from $1,6002018-07-27 MEDIUM 5.5 CVE-2018-14612 An issue was discovered in the Linux kernel through 4.17.10. There is an invalid pointer dereference in btrfs_root_node() when mounting a crafted btr… Linux Kernel after 4.17.10 Fix from $1,6002018-07-27 MEDIUM 5.5 CVE-2018-14613 An issue was discovered in the Linux kernel through 4.17.10. There is an invalid pointer dereference in io_ctl_map_page() when mounting and operating… Linux Kernel after 4.17.10 Fix from $1,6002018-07-27 MEDIUM 5.5 CVE-2018-14614 An issue was discovered in the Linux kernel through 4.17.10. There is an out-of-bounds access in __remove_dirty_segment() in fs/f2fs/segment.c when m… Linux Kernel after 4.17.10 Fix from $1,6002018-07-27 MEDIUM 5.5 CVE-2018-14616 An issue was discovered in the Linux kernel through 4.17.10. There is a NULL pointer dereference in fscrypt_do_page_crypto() in fs/crypto/crypto.c wh… Linux Kernel after 4.17.10 Fix from $1,6002018-07-27 MEDIUM 5.5 CVE-2018-14617 An issue was discovered in the Linux kernel through 4.17.10. There is a NULL pointer dereference and panic in hfsplus_lookup() in fs/hfsplus/dir.c wh… Linux Kernel after 4.17.10 Fix from $1,6002018-07-27 MEDIUM 5.5 CVE-2015-9261 huft_build in archival/libarchive/decompress_gunzip.c in BusyBox before 1.27.2 misuses a pointer, causing segfaults and an application crash during a… Debian Linux 1.27.2+ Fix from $1,6002018-07-26 MEDIUM 6.5 CVE-2018-6972 VMware ESXi (6.7 before ESXi670-201806401-BG, 6.5 before ESXi650-201806401-BG, 6.0 before ESXi600-201806401-BG and 5.5 before ESXi550-201806401-BG), … Workstation 10.1.2 / 14.1.2+ Fix from $1,6002018-07-25 HIGH 7.5 CVE-2018-14588 An issue has been discovered in Bento4 1.5.1-624. A NULL pointer dereference can occur in AP4_DataBuffer::SetData in Core/Ap4DataBuffer.cpp. Bento4 Mitigation only Fix from $1,9502018-07-24 CRITICAL 9.8 CVE-2018-14562 An issue was discovered in libthulac.so in THULAC through 2018-02-25. A NULL pointer dereference can occur in the BasicModel class in include/cb_mode… Thulac after 2018-02-25 Fix from $2,3002018-07-23 MEDIUM 5.5 CVE-2018-14543 There exists one NULL pointer dereference vulnerability in AP4_JsonInspector::AddField in Ap4Atom.cpp in Bento4 1.5.1-624, which can allow attackers … Bento4 Mitigation only Fix from $1,6002018-07-23 HIGH 8.8 CVE-2018-5030EPSS 9% Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have an Untrusted pointer de… Acrobat Dc after 18.011.20040 Fix from $1,9502018-07-20 HIGH 8.8 CVE-2018-5012EPSS 9% Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have an Untrusted pointer de… Acrobat Dc after 18.011.20040 Fix from $1,9502018-07-20 MEDIUM 6.5 CVE-2018-14471 dwg_obj_block_control_get_block_headers in dwg_api.c in GNU LibreDWG 0.5.1048 allows remote attackers to cause a denial of service (NULL pointer dere… Libredwg 0.6+ Fix from $1,6002018-07-20 MEDIUM 6.5 CVE-2018-14448 Codec::parse in track.cpp in Untrunc through 2018-06-07 has a NULL pointer dereference via a crafted MP4 file because of improper interaction with li… Untrunc Patch available Fix from $1,6002018-07-20 MEDIUM 5.5 CVE-2018-14332 An issue was discovered in Clementine Music Player 1.3.1. Clementine.exe is vulnerable to a user mode write access violation due to a NULL pointer de… Clementine No fix yet Fix from $1,6002018-07-19 MEDIUM 6.5 CVE-2018-14404 A NULL pointer dereference vulnerability exists in the xpath.c:xmlXPathCompOpEval() function of libxml2 through 2.9.8 when parsing an invalid XPath e… Ubuntu Linux after 2.9.8 Fix from $1,6002018-07-19 HIGH 7.5 CVE-2018-8011EPSS 56% By specially crafting HTTP requests, the mod_md challenge handler would dereference a NULL pointer and cause the child process to segfault. This coul… HTTP Server Mitigation only Fix from $1,9502018-07-18 MEDIUM 5.5 CVE-2018-13441 qh_help in Nagios Core version 4.4.1 and earlier is prone to a NULL pointer dereference vulnerability, which allows attacker to cause a local denial-… Nagios after 4.4.1 Fix from $1,6002018-07-12 MEDIUM 5.5 CVE-2018-13457 qh_echo in Nagios Core 4.4.1 and earlier is prone to a NULL pointer dereference vulnerability, which allows attackers to cause a local denial-of-serv… Nagios Core after 4.4.1 Fix from $1,6002018-07-12 MEDIUM 5.5 CVE-2018-13458 qh_core in Nagios Core 4.4.1 and earlier is prone to a NULL pointer dereference vulnerability, which allows attackers to cause a local denial-of-serv… Nagios Core after 4.4.1 Fix from $1,6002018-07-12 CRITICAL 9.8 CVE-2018-4987EPSS 13% Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have an Untrusted pointer de… Acrobat Dc after 18.011.20038 Fix from $2,3002018-07-09 MEDIUM 6.5 CVE-2018-13440 The audiofile Audio File Library 0.3.6 has a NULL pointer dereference bug in ModuleState::setup in modules/ModuleState.cpp, which allows an attacker … Ubuntu Linux No fix yet Fix from $1,6002018-07-08 HIGH 7.8 CVE-2018-3570 In the cpuidle driver in all Android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the Linux kernel, the list_for_each ma… Android Patch available Fix from $1,9502018-07-06 MEDIUM 6.5 CVE-2018-13301 In FFmpeg 4.0.1, due to a missing check of a profile value before setting it, the ff_mpeg4_decode_picture_header function in libavcodec/mpeg4videodec… Ffmpeg Patch available Fix from $1,6002018-07-05 MEDIUM 6.5 CVE-2018-13303 In FFmpeg 4.0.1, a missing check for failure of a call to init_get_bits8() in the avpriv_ac3_parse_header function in libavcodec/ac3_parser.c may tri… Ffmpeg Patch available Fix from $1,6002018-07-05