Browse CVEs

MEDIUM 6.5 CVE-2018-13250 libming 0.4.8 has a NULL pointer dereference in the getString function of the decompile.c file, related to decompileSTRINGCONCAT. Remote attackers co… Libming No fix yet Fix from $1,6002018-07-05 MEDIUM 5.5 CVE-2018-13093 An issue was discovered in fs/xfs/xfs_icache.c in the Linux kernel through 4.17.3. There is a NULL pointer dereference and panic in lookup_slow() on … Linux Kernel after 4.17.3 Fix from $1,6002018-07-03 MEDIUM 5.5 CVE-2018-13094 An issue was discovered in fs/xfs/libxfs/xfs_attr_leaf.c in the Linux kernel through 4.17.3. An OOPS may occur for a corrupted xfs image after xfs_da… Linux Kernel after 4.17.3 Fix from $1,6002018-07-03 MEDIUM 5.5 CVE-2018-12928 In the Linux kernel 4.15.0, a NULL pointer dereference was discovered in hfs_ext_read_extent in hfs.ko. This can occur during a mount of a crafted hf… Linux Kernel Mitigation only Fix from $1,6002018-06-28 HIGH 7.5 CVE-2018-3840 A denial-of-service vulnerability exists in the Pixar Renderman IT Display Service 21.6 (0x67). The vulnerability is present in the parsing of a netw… Renderman No fix yet Fix from $1,9502018-06-26 HIGH 7.5 CVE-2018-3841 A denial-of-service vulnerability exists in the Pixar Renderman IT Display Service 21.6 (0x69). The vulnerability is present in the parsing of a netw… Renderman No fix yet Fix from $1,9502018-06-26 HIGH 7.5 CVE-2018-12697EPSS 5% A NULL pointer dereference (aka SEGV on unknown address 0x000000000000) was discovered in work_stuff_copy_to_from in cplus-dem.c in GNU libiberty, as… Ubuntu Linux No fix yet Fix from $1,9502018-06-23 MEDIUM 6.5 CVE-2017-2668 389-ds-base before versions 1.3.5.17 and 1.3.6.10 is vulnerable to an invalid pointer dereference in the way LDAP bind requests are handled. A remote… Enterprise Linux Desktop 1.3.5.17 / 1.3.6.10+ Fix from $1,6002018-06-22 HIGH 7.5 CVE-2018-12648 The WEBP::GetLE32 function in XMPFiles/source/FormatSupport/WEBP_Support.hpp in Exempi 2.4.5 has a NULL pointer dereference. Exempi No fix yet Fix from $1,9502018-06-22 HIGH 8.6 CVE-2018-0305 A vulnerability in the Cisco Fabric Services component of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remote attacke… Nexus 7000 Firmware Mitigation only Fix from $1,9502018-06-21 HIGH 7.5 CVE-2018-10945 The mg_handle_cgi function in mongoose.c in Mongoose 6.11 allows remote attackers to cause a denial of service (heap-based buffer over-read and appli… Mongoose No fix yet Fix from $1,9502018-06-19 MEDIUM 6.5 CVE-2018-12460 libavcodec in FFmpeg 4.0 may trigger a NULL pointer dereference if the studio profile is incorrectly detected while converting a crafted AVI file to … Ffmpeg Patch available Fix from $1,6002018-06-15 HIGH 7.5 CVE-2018-12247 An issue was discovered in mruby 1.4.1. There is a NULL pointer dereference in mrb_class, related to certain .clone usage, because mrb_obj_clone in k… Mruby Patch available Fix from $1,9502018-06-12 HIGH 7.5 CVE-2018-12249 An issue was discovered in mruby 1.4.1. There is a NULL pointer dereference in mrb_class_real because "class BasicObject" is not properly supported i… Debian Linux Patch available Fix from $1,9502018-06-12 HIGH 7.5 CVE-2017-5416 In certain circumstances a networking event listener can be prematurely released. This appears to result in a null dereference in practice. This vuln… Firefox 52.0+ Fix from $1,9502018-06-11 MEDIUM 5.5 CVE-2018-12102 md4c 0.2.6 has a NULL pointer dereference in the function md_process_line in md4c.c, related to ctx->current_block. Md4c Mitigation only Fix from $1,6002018-06-11 MEDIUM 5.5 CVE-2018-1000200 The Linux Kernel versions 4.14, 4.15, and 4.16 has a null pointer dereference which can result in an out of memory (OOM) killing of large mlocked pro… Linux Kernel Patch available Fix from $1,6002018-06-05 HIGH 8.8 CVE-2018-11694 An issue was discovered in LibSass through 3.5.4. A NULL pointer dereference was found in the function Sass::Functions::selector_append which could b… Libsass after 3.5.4 Fix from $1,9502018-06-04 HIGH 8.8 CVE-2018-11695 An issue was discovered in LibSass <3.5.3. A NULL pointer dereference was found in the function Sass::Expand::operator which could be leveraged by an… Libsass after 3.5.2 Fix from $1,9502018-06-04 HIGH 8.8 CVE-2018-11696 An issue was discovered in LibSass through 3.5.4. A NULL pointer dereference was found in the function Sass::Inspect::operator which could be leverag… Libsass after 3.5.4 Fix from $1,9502018-06-04 MEDIUM 5.5 CVE-2018-11591 Espruino before 1.98 allows attackers to cause a denial of service (application crash) with a user crafted input file via a NULL pointer dereference … Espruino 1.98+ Fix from $1,6002018-05-31 MEDIUM 5.5 CVE-2018-10196 NULL pointer dereference vulnerability in the rebuild_vlists function in lib/dotgen/conc.c in the dotgen library in Graphviz 2.40.1 allows remote att… Fedora Patch available Fix from $1,6002018-05-30 HIGH 7.5 CVE-2018-11356 In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the DNS dissector could crash. This was addressed in epan/dissectors/packet-dns.c by avoidin… Wireshark after 2.4.6 Fix from $1,9502018-05-22 HIGH 7.5 CVE-2018-11359 In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the RRC dissector and other dissectors could crash. This was addressed in epan/proto.c by av… Wireshark after 2.4.6 Fix from $1,9502018-05-22 MEDIUM 5.5 CVE-2018-6963 VMware Workstation (14.x before 14.1.2) and Fusion (10.x before 10.1.2) contain multiple denial-of-service vulnerabilities that occur due to NULL poi… Fusion 10.1.2 / 14.1.2+ Fix from $1,6002018-05-22 MEDIUM 5.5 CVE-2018-11255 An issue was discovered in PoDoFo 0.9.5. The function PdfPage::GetPageNumber() in PdfPage.cpp in PoDoFo 0.9.5 allows remote attackers to cause a deni… Podofo No fix yet Fix from $1,6002018-05-18 MEDIUM 6.5 CVE-2018-11256 An issue was discovered in PoDoFo 0.9.5. The function PdfDocument::Append() in PdfDocument.cpp in PoDoFo 0.9.5 allows remote attackers to cause a den… Podofo No fix yet Fix from $1,6002018-05-18 MEDIUM 5.9 CVE-2018-1172EPSS 9% This vulnerability allows remote attackers to deny service on vulnerable installations of The Squid Software Foundation Squid 3.5.27-20180318. Authen… Squid Mitigation only Fix from $1,6002018-05-16 MEDIUM 6.5 CVE-2018-11202 A NULL pointer dereference was discovered in H5S_hyper_make_spans in H5Shyper.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of ser… Hdf5 No fix yet Fix from $1,6002018-05-16 MEDIUM 6.5 CVE-2018-11204 A NULL pointer dereference was discovered in H5O__chunk_deserialize in H5Ocache.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of s… Hdf5 No fix yet Fix from $1,6002018-05-16