Browse CVEs

HIGH 7.5 CVE-2018-19200 An issue was discovered in uriparser before 0.9.0. UriCommon.c allows attempted operations on NULL input via a uriResetUri* function. Debian Linux 0.9.0 / 8.0+ Fix from $1,9502018-11-12 MEDIUM 5.5 CVE-2018-18606 An issue was discovered in the merge_strings function in merge.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binu… Debian Linux No fix yet Fix from $1,6002018-10-23 MEDIUM 5.5 CVE-2018-18607 An issue was discovered in elf_link_input_bfd in elflink.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2… Debian Linux No fix yet Fix from $1,6002018-10-23 MEDIUM 6.5 CVE-2018-18088 OpenJPEG 2.3.0 has a NULL pointer dereference for "red" in the imagetopnm function of jp2/convert.c Debian Linux No fix yet Fix from $1,6002018-10-09 MEDIUM 6.5 CVE-2018-18065EPSS 17% _set_key in agent/helpers/table_container.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by an authenticated attacker to … Debian Linux 5.8+ Fix from $1,6002018-10-08 MEDIUM 6.5 CVE-2018-17000 A NULL pointer dereference in the function _TIFFmemcmp at tif_unix.c (called from TIFFWriteDirectoryTagTransferfunction) in LibTIFF 4.0.9 allows an a… Debian Linux No fix yet Fix from $1,6002018-09-13 CRITICAL 9.8 CVE-2018-16657 In Kamailio before 5.0.7 and 5.1.x before 5.1.4, a crafted SIP message with an invalid Via header causes a segmentation fault and crashes Kamailio. T… Debian Linux 5.0.7 / 5.1.4+ Fix from $2,3002018-09-07 MEDIUM 6.5 CVE-2016-9572 A NULL pointer dereference flaw was found in the way openjpeg 2.1.2 decoded certain input images. Due to a logic error in the code responsible for de… Debian Linux Patch available Fix from $1,6002018-08-01 HIGH 7.5 CVE-2017-15120EPSS 52% An issue has been found in the parsing of authoritative answers in PowerDNS Recursor before 4.0.8, leading to a NULL pointer dereference when parsing… Debian Linux 4.0.8+ Fix from $1,9502018-07-27 MEDIUM 5.5 CVE-2015-9261 huft_build in archival/libarchive/decompress_gunzip.c in BusyBox before 1.27.2 misuses a pointer, causing segfaults and an application crash during a… Debian Linux 1.27.2+ Fix from $1,6002018-07-26 HIGH 7.5 CVE-2018-12249 An issue was discovered in mruby 1.4.1. There is a NULL pointer dereference in mrb_class_real because "class BasicObject" is not properly supported i… Debian Linux Patch available Fix from $1,9502018-06-12 HIGH 7.5 CVE-2018-1000179 A NULL Pointer Dereference of CWE-476 exists in quassel version 0.12.4 in the quasselcore void CoreAuthHandler::handle(const Login &msg) coreauthhand… Debian Linux No fix yet Fix from $1,9502018-05-08 HIGH 7.5 CVE-2018-9240 ncmpc through 0.29 is prone to a NULL pointer dereference flaw. If a user uses the chat screen and another client sends a long chat message, a crash … Debian Linux after 0.29 Fix from $1,9502018-04-03 MEDIUM 6.5 CVE-2018-9132 libming 0.4.8 has a NULL pointer dereference in the getInt function of the decompile.c file. Remote attackers could leverage this vulnerability to ca… Debian Linux No fix yet Fix from $1,6002018-03-30 HIGH 7.5 CVE-2018-1000121EPSS 9% A NULL pointer dereference exists in curl 7.21.0 to and including curl 7.58.0 in the LDAP code that allows an attacker to cause a denial of service Debian Linux 7.2+ Fix from $1,9502018-03-14 MEDIUM 6.5 CVE-2017-18230 An issue was discovered in GraphicsMagick 1.3.26. A NULL pointer dereference vulnerability was found in the function ReadCINEONImage in coders/cineon… Debian Linux Patch available Fix from $1,6002018-03-14 MEDIUM 6.5 CVE-2017-18231 An issue was discovered in GraphicsMagick 1.3.26. A NULL pointer dereference vulnerability was found in the function ReadEnhMetaFile in coders/emf.c,… Debian Linux Patch available Fix from $1,6002018-03-14 HIGH 7.5 CVE-2018-7998 In libvips before 8.6.3, a NULL function pointer dereference vulnerability was found in the vips_region_generate function in region.c, which allows r… Debian Linux 8.6.3+ Fix from $1,9502018-03-09 MEDIUM 6.5 CVE-2018-7870 An invalid memory address dereference was discovered in getString in util/decompile.c in libming 0.4.8 for CONSTANT16 data. The vulnerability causes … Debian Linux No fix yet Fix from $1,6002018-03-08 MEDIUM 6.5 CVE-2018-7872 An invalid memory address dereference was discovered in the function getName in libming 0.4.8 for CONSTANT16 data. The vulnerability causes a segment… Debian Linux No fix yet Fix from $1,6002018-03-08 MEDIUM 6.5 CVE-2018-7866 A NULL pointer dereference was discovered in newVar3 in util/decompile.c in libming 0.4.8. The vulnerability causes a segmentation fault and applicat… Debian Linux No fix yet Fix from $1,6002018-03-08 HIGH 7.5 CVE-2018-0490 An issue was discovered in Tor before 0.2.9.15, 0.3.1.x before 0.3.1.10, and 0.3.2.x before 0.3.2.10. The directory-authority protocol-list subprotoc… Debian Linux after 0.3.1.9 Fix from $1,9502018-03-05 MEDIUM 6.5 CVE-2018-7542 An issue was discovered in Xen 4.8.x through 4.10.x allowing x86 PVH guest OS users to cause a denial of service (NULL pointer dereference and hyperv… Debian Linux after 4.10.0 Fix from $1,6002018-02-27 MEDIUM 6.5 CVE-2018-7456 A NULL Pointer Dereference occurs in the function TIFFPrintDirectory in tif_print.c in LibTIFF 3.9.3, 3.9.4, 3.9.5, 3.9.6, 3.9.7, 4.0.0alpha4, 4.0.0a… Debian Linux Patch available Fix from $1,6002018-02-24 MEDIUM 5.9 CVE-2015-5316 The eap_pwd_perform_confirm_exchange function in eap_peer/eap_pwd.c in wpa_supplicant 2.x before 2.6, when EAP-pwd is enabled in a network configurat… Debian Linux 2.6+ Fix from $1,6002018-02-21 HIGH 7.5 CVE-2018-7050 An issue was discovered in Irssi before 1.0.7 and 1.1.x before 1.1.1. A NULL pointer dereference occurs for an "empty" nick. Debian Linux 1.0.7+ Fix from $1,9502018-02-15 HIGH 7.5 CVE-2017-18189EPSS 5% In the startread function in xa.c in Sound eXchange (SoX) through 14.4.2, a corrupt header specifying zero channels triggers an infinite loop with a … Debian Linux after 14.4.2 Fix from $1,9502018-02-15 HIGH 7.5 CVE-2018-1000027EPSS 13% The Squid Software Foundation Squid HTTP Caching Proxy version prior to version 4.0.23 contains a NULL Pointer Dereference vulnerability in HTTP Resp… Debian Linux 4.0.23+ Fix from $1,9502018-02-09 HIGH 7.5 CVE-2017-12380EPSS 5% ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of… Debian Linux after 0.99.2 Fix from $1,9502018-01-26 HIGH 7.5 CVE-2016-10708EPSS 16% sshd in OpenSSH before 7.4 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an out-of-sequence NE… Debian Linux 7.4+ Fix from $1,9502018-01-21