Browse CVEs

MEDIUM 5.5 CVE-2017-0686 A denial of service vulnerability in the Android media framework. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-34231231. Android Mitigation only Fix from $1,6002017-07-06 CRITICAL 9.1 CVE-2017-10917 Xen through 4.8.x does not validate the port numbers of polled event channel ports, which allows guest OS users to cause a denial of service (NULL po… Xen after 4.8.1 Fix from $2,3002017-07-05 HIGH 7.5 CVE-2017-10790 The _asn1_check_identifier function in GNU Libtasn1 through 4.12 causes a NULL pointer dereference and crash when reading crafted input that triggers… Libtasn1 after 4.12 Fix from $1,9502017-07-02 MEDIUM 6.5 CVE-2017-10792 There is a NULL Pointer Dereference in the function ll_insert() of the libpspp library in GNU PSPP before 0.11.0. For example, a crash was observed w… Pspp No fix yet Fix from $1,6002017-07-02 MEDIUM 6.5 CVE-2017-9988 The readEncUInt30 function in util/read.c in libming 0.4.8 mishandles memory allocation. A crafted input will lead to a remote denial of service (NUL… Debian Linux No fix yet Fix from $1,6002017-06-28 MEDIUM 6.5 CVE-2017-9989 util/outputtxt.c in libming 0.4.8 mishandles memory allocation. A crafted input will lead to a remote denial of service (NULL pointer dereference) at… Debian Linux No fix yet Fix from $1,6002017-06-28 HIGH 7.5 CVE-2015-5180EPSS 6% res_query in libresolv in glibc before 2.25 allows remote attackers to cause a denial of service (NULL pointer dereference and process crash). Ubuntu Linux after 2.24 Fix from $1,9502017-06-27 MEDIUM 6.5 CVE-2017-7522EPSS 6% OpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to denial-of-service by authenticated remote attacker via sending a certificate with a… Openvpn after 2.3.16 Fix from $1,6002017-06-27 HIGH 7.5 CVE-2017-7458 The NetworkInterface::getHost function in NetworkInterface.cpp in ntopng before 3.0 allows remote attackers to cause a denial of service (NULL pointe… Ntopng after 2.4 Fix from $1,9502017-06-26 MEDIUM 5.5 CVE-2015-9100 The fill_buffer_resample function in util.c in libmp3lame.a in LAME 3.99.5 allows remote attackers to cause a denial of service (NULL pointer derefer… Lame Mitigation only Fix from $1,6002017-06-25 CRITICAL 9.8 CVE-2017-3169EPSS 20% In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_ssl may dereference a NULL pointer when third-party modules call ap_hook_process_con… HTTP Server Mitigation only Fix from $2,3002017-06-20 MEDIUM 5.5 CVE-2017-9503 QEMU (aka Quick Emulator), when built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation support, allows local guest OS privileged users to cause a… Debian Linux after 2.9.1 Fix from $1,6002017-06-16 HIGH 7.5 CVE-2017-7507 GnuTLS version 3.5.12 and earlier is vulnerable to a NULL pointer dereference while decoding a status response TLS extension with valid contents. Thi… Gnutls after 3.5.12 Fix from $1,9502017-06-16 MEDIUM 6.2 CVE-2017-6899 The msm_bus_dbg_update_request_write function in drivers/platform/msm/msm_bus/msm_bus_dbg.c in android_kernel_huawei_msm8916 through 2017-06-16 in Li… Lineageos after 2017-06-16 Fix from $1,6002017-06-16 HIGH 7.8 CVE-2014-9967 In all Android releases from CAF using the Linux kernel, an untrusted pointer dereference vulnerability exists in WideVine DRM. Android No fix yet Fix from $1,9502017-06-13 HIGH 7.8 CVE-2015-9020 In all Android releases from CAF using the Linux kernel, an untrusted pointer dereference vulnerability exists in the unlocking of memory. Android Mitigation only Fix from $1,9502017-06-13 HIGH 7.8 CVE-2015-9026 In all Android releases from CAF using the Linux kernel, an untrusted pointer dereference vulnerability exists in WideVine DRM. Android Mitigation only Fix from $1,9502017-06-13 HIGH 7.8 CVE-2015-9027 In all Android releases from CAF using the Linux kernel, an untrusted pointer dereference vulnerability exists in WideVine DRM. Android Mitigation only Fix from $1,9502017-06-13 HIGH 7.5 CVE-2016-5391 libreswan before 3.18 allows remote attackers to cause a denial of service (NULL pointer dereference and pluto daemon restart). Fedora after 3.17 Fix from $1,9502017-06-13 MEDIUM 6.5 CVE-2017-9124 The quicktime_match_32 function in util.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service (NULL pointer dereference and ap… Libquicktime No fix yet Fix from $1,6002017-06-12 HIGH 7.5 CVE-2014-7919 b/libs/gui/ISurfaceComposer.cpp in Android allows attackers to trigger a denial of service (null pointer dereference and process crash). Android Mitigation only Fix from $1,9502017-06-08 MEDIUM 5.5 CVE-2017-4900 VMware Workstation Pro/Player 12.x before 12.5.3 contains a NULL pointer dereference vulnerability that exists in the SVGA driver. Successful exploit… Workstation Player Patch available Fix from $1,6002017-06-07 MEDIUM 5.5 CVE-2017-9470 In ytnef 1.9.2, the MAPIPrint function in lib/ytnef.c allows remote attackers to cause a denial of service (NULL pointer dereference and application … Ytnef No fix yet Fix from $1,6002017-06-07 HIGH 7.5 CVE-2017-9468 In Irssi before 1.0.3, when receiving a DCC message without source nick/host, it attempts to dereference a NULL pointer. Thus, remote IRC servers can… Debian Linux after 1.0.2 Fix from $1,9502017-06-07 HIGH 7.8 CVE-2014-9943 In Core Kernel in all Android releases from CAF using the Linux kernel, a Null Pointer Dereference vulnerability could potentially exist. Android Patch available Fix from $1,9502017-06-06 HIGH 7.8 CVE-2014-9949 In TrustZone in all Android releases from CAF using the Linux kernel, an Untrusted Pointer Dereference vulnerability could potentially exist. Android Patch available Fix from $1,9502017-06-06 HIGH 7.5 CVE-2017-9343 In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the MSNIP dissector misuses a NULL pointer. This was addressed in epan/dissectors/packet-msnip.c by … Wireshark after 2.2.6 Fix from $1,9502017-06-02 HIGH 7.5 CVE-2017-9347EPSS 14% In Wireshark 2.2.0 to 2.2.6, the ROS dissector could crash with a NULL pointer dereference. This was addressed in epan/dissectors/asn1/ros/packet-ros… Wireshark after 2.2.6 Fix from $1,9502017-06-02 HIGH 7.5 CVE-2017-7502 Null pointer dereference vulnerability in NSS since 3.24.0 was found when server receives empty SSLv2 messages resulting into denial of service by re… Network Security Services Patch available Fix from $1,9502017-05-30 MEDIUM 5.5 CVE-2017-7511 poppler since version 0.17.3 has been vulnerable to NULL pointer dereference in pdfunite triggered by specially crafted documents. Poppler Patch available Fix from $1,6002017-05-30