Browse CVEs

MEDIUM 5.5 CVE-2017-17554 A NULL pointer dereference (DoS) Vulnerability was found in the function aubio_source_avcodec_readframe in io/source_avcodec.c of aubio 0.4.6, which … Aubio Mitigation only Fix from $1,6002017-12-12 MEDIUM 6.5 CVE-2017-17555 The swri_audio_convert function in audioconvert.c in FFmpeg libswresample through 3.0.101, as used in FFmpeg 3.4.1, aubio 0.4.6, and other products, … Aubio after 3.0.101 Fix from $1,6002017-12-12 MEDIUM 6.5 CVE-2017-17505 In HDF5 1.10.1, there is a NULL pointer dereference in the function H5O_pline_decode in the H5Opline.c file in libhdf5.a. For example, h5dump would c… Hdf5 Mitigation only Fix from $1,6002017-12-11 CRITICAL 9.8 CVE-2017-17464 K7Sentry.sys 15.1.0.59 in K7 Antivirus 15.1.0309 has a NULL pointer dereference via a 0x95002570 DeviceIoControl request. Antivirus No fix yet Fix from $2,3002017-12-08 CRITICAL 9.8 CVE-2017-17465 K7Sentry.sys 15.1.0.59 in K7 Antivirus 15.1.0309 has a NULL pointer dereference via a 0x95002574 DeviceIoControl request. Antivirus No fix yet Fix from $2,3002017-12-08 MEDIUM 6.5 CVE-2017-17440 GNU Libextractor 1.6 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted GIF, IT (Imp… Libextractor Patch available Fix from $1,6002017-12-06 HIGH 7.5 CVE-2017-17439 In Heimdal through 7.4, remote unauthenticated attackers are able to crash the KDC by sending a crafted UDP packet containing empty data fields for c… Debian Linux after 7.4.0 Fix from $1,9502017-12-06 MEDIUM 5.5 CVE-2017-17113 ntguard_x64.sys 0.18780.0.0 in IKARUS anti.virus 2.16.15 has a NULL pointer dereference via a 0x830000c4 DeviceIoControl request. Anti.virus No fix yet Fix from $1,6002017-12-04 MEDIUM 5.5 CVE-2017-17123 The coff_slurp_reloc_table function in coffcode.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, al… Binutils No fix yet Fix from $1,6002017-12-04 MEDIUM 6.5 CVE-2017-17127 The vc1_decode_frame function in libavcodec/vc1dec.c in Libav 12.2 allows remote attackers to cause a denial of service (NULL pointer dereference and… Libav No fix yet Fix from $1,6002017-12-04 HIGH 8.8 CVE-2017-17129 The ff_vc1_mc_4mv_chroma4 function in libavcodec/vc1_mc.c in Libav 12.2 allows remote attackers to cause a denial of service (segmentation fault and … Libav No fix yet Fix from $1,9502017-12-04 HIGH 7.5 CVE-2017-8820 In Tor before 0.2.5.16, 0.2.6 through 0.2.8 before 0.2.8.17, 0.2.9 before 0.2.9.14, 0.3.0 before 0.3.0.13, and 0.3.1 before 0.3.1.9, remote attackers… Debian Linux 0.2.5.16 / 0.2.8.17+ Fix from $1,9502017-12-03 MEDIUM 5.5 CVE-2017-15116 The rngapi_reset function in crypto/rng.c in the Linux kernel before 4.2 allows attackers to cause a denial of service (NULL pointer dereference). Linux Kernel 4.2+ Fix from $1,6002017-11-30 HIGH 7.8 CVE-2017-17049 TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (NULL pointer dereference) or possibly have unspecified other imp… Vir.it Explorer Mitigation only Fix from $1,9502017-11-29 HIGH 7.8 CVE-2017-17050 TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (NULL pointer dereference) or possibly have unspecified other imp… Vir.it Explorer Mitigation only Fix from $1,9502017-11-29 HIGH 7.8 CVE-2017-16948 TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (NULL pointer dereference) or possibly have unspecified other imp… Vir.it Explorer Mitigation only Fix from $1,9502017-11-26 MEDIUM 5.5 CVE-2017-12193 The assoc_array_insert_into_terminal_node function in lib/assoc_array.c in the Linux kernel before 4.13.11 mishandles node splitting, which allows lo… Linux Kernel 4.13.11+ Fix from $1,6002017-11-22 MEDIUM 6.5 CVE-2017-16883 The outputSWF_TEXT_RECORD function in util/outputscript.c in libming <= 0.4.8 is vulnerable to a NULL pointer dereference, which may allow attackers … Libming after 0.4.8 Fix from $1,6002017-11-18 MEDIUM 6.5 CVE-2017-4938 VMware Workstation (12.x before 12.5.8) and Fusion (8.x before 8.5.9) contain a guest RPC NULL pointer dereference vulnerability. Successful exploita… Workstation Patch available Fix from $1,6002017-11-17 MEDIUM 5.5 CVE-2017-16868 In SWFTools 0.9.2, the wav_convert2mono function in lib/wav.c does not properly restrict a multiplication within a malloc call, which allows remote a… Swftools Mitigation only Fix from $1,6002017-11-17 HIGH 7.5 CVE-2017-1000200 tcmu-runner version 1.0.5 to 1.2.0 is vulnerable to a dbus triggered NULL pointer dereference in the tcmu-runner daemon's on_unregister_handler() fun… Tcmu Runner Patch available Fix from $1,9502017-11-17 HIGH 7.8 CVE-2017-13135 A NULL Pointer Dereference exists in VideoLAN x265, as used in libbpg 0.9.7 and other products, because the CUData::initialize function in common/cud… Libbpg No fix yet Fix from $1,9502017-11-16 MEDIUM 6.3 CVE-2017-15102 The tower_probe function in drivers/usb/misc/legousbtower.c in the Linux kernel before 4.8.1 allows local users (who are physically proximate for ins… Linux Kernel 4.8.1+ Fix from $1,6002017-11-15 MEDIUM 6.8 CVE-2017-15526 Prior to SEE v11.1.3MP1, Symantec Endpoint Encryption can be susceptible to a null pointer de-reference issue, which can result in a NullPointerExcep… Endpoint Encryption after 11.1.3 Fix from $1,6002017-11-13 MEDIUM 6.5 CVE-2017-12779 The Node_GetData function in corec/corec/node/node.c in mkvalidator 0.5.1 allows remote attackers to cause a denial of service (Null pointer derefere… Mkvalidator No fix yet Fix from $1,6002017-11-10 MEDIUM 6.5 CVE-2017-12781 The EBML_BufferToID function in ebmlelement.c in libebml2 through 2012-08-26 allows remote attackers to cause a denial of service (Null pointer deref… Libebml2 after 2012-08-26 Fix from $1,6002017-11-10 MEDIUM 6.5 CVE-2017-12800 The EBML_FindNextElement function in ebmlmain.c in libebml2 through 2012-08-26 allows remote attackers to cause a denial of service (Null pointer der… Libebml2 after 2012-08-26 Fix from $1,6002017-11-10 MEDIUM 6.5 CVE-2017-12803 The Node_ValidatePtr function in corec/corec/node/node.c in mkclean 0.8.9 allows remote attackers to cause a denial of service (assert fault) via a c… Mkclean No fix yet Fix from $1,6002017-11-10 MEDIUM 5.5 CVE-2017-16711 The swf_DefineLosslessBitsTagToImage function in lib/modules/swfbits.c in SWFTools 0.9.2 mishandles an uncompress failure, which allows remote attack… Swftools Mitigation only Fix from $1,6002017-11-09 MEDIUM 6.6 CVE-2017-16646 drivers/media/usb/dvb-usb/dib0700_devices.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (BUG and system crash… Linux Kernel after 4.13.11 Fix from $1,6002017-11-07