Vulnerability index

Browse CVEs

2,191 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness NULL Pointer DereferenceCWE-476 × clear
Linux Kernel MEDIUM 5.5
CVE-2018-14646

The Linux kernel before 4.15-rc8 was found to be vulnerable to a NULL pointer dereference bug in the __netlink_ns_capable() function in the net/netli…

Fix: after 4.14
Fix from $1,600 2018-11-26
Linux Kernel MEDIUM 5.5
CVE-2018-19406

kvm_pv_send_ipi in arch/x86/kvm/lapic.c in the Linux kernel through 4.19.2 allows local users to cause a denial of service (NULL pointer dereference …

Fix: after 4.19.2
Fix from $1,600 2018-11-21
Linux Kernel MEDIUM 5.5
CVE-2018-19407

The vcpu_scan_ioapic function in arch/x86/kvm/x86.c in the Linux kernel through 4.19.2 allows local users to cause a denial of service (NULL pointer …

Fix: after 4.19.2
Fix from $1,600 2018-11-21
Linux Kernel HIGH 7.5
CVE-2017-2634EPSS 5%

It was found that the Linux kernel's Datagram Congestion Control Protocol (DCCP) implementation before 2.6.22.17 used the IPv4-only inet_sk_rebuild_h…

Fix: 2.6.22.17+
Fix from $1,950 2018-07-27
Linux Kernel MEDIUM 5.5
CVE-2018-14609

An issue was discovered in the Linux kernel through 4.17.10. There is an invalid pointer dereference in __del_reloc_root() in fs/btrfs/relocation.c w…

Fix: after 4.17.10
Fix from $1,600 2018-07-27
Linux Kernel MEDIUM 5.5
CVE-2018-14612

An issue was discovered in the Linux kernel through 4.17.10. There is an invalid pointer dereference in btrfs_root_node() when mounting a crafted btr…

Fix: after 4.17.10
Fix from $1,600 2018-07-27
Linux Kernel MEDIUM 5.5
CVE-2018-14613

An issue was discovered in the Linux kernel through 4.17.10. There is an invalid pointer dereference in io_ctl_map_page() when mounting and operating…

Fix: after 4.17.10
Fix from $1,600 2018-07-27
Linux Kernel MEDIUM 5.5
CVE-2018-14614

An issue was discovered in the Linux kernel through 4.17.10. There is an out-of-bounds access in __remove_dirty_segment() in fs/f2fs/segment.c when m…

Fix: after 4.17.10
Fix from $1,600 2018-07-27
Linux Kernel MEDIUM 5.5
CVE-2018-14616

An issue was discovered in the Linux kernel through 4.17.10. There is a NULL pointer dereference in fscrypt_do_page_crypto() in fs/crypto/crypto.c wh…

Fix: after 4.17.10
Fix from $1,600 2018-07-27
Linux Kernel MEDIUM 5.5
CVE-2018-14617

An issue was discovered in the Linux kernel through 4.17.10. There is a NULL pointer dereference and panic in hfsplus_lookup() in fs/hfsplus/dir.c wh…

Fix: after 4.17.10
Fix from $1,600 2018-07-27
Linux Kernel MEDIUM 5.5
CVE-2018-13093

An issue was discovered in fs/xfs/xfs_icache.c in the Linux kernel through 4.17.3. There is a NULL pointer dereference and panic in lookup_slow() on …

Fix: after 4.17.3
Fix from $1,600 2018-07-03
Linux Kernel MEDIUM 5.5
CVE-2018-13094

An issue was discovered in fs/xfs/libxfs/xfs_attr_leaf.c in the Linux kernel through 4.17.3. An OOPS may occur for a corrupted xfs image after xfs_da…

Fix: after 4.17.3
Fix from $1,600 2018-07-03
Linux Kernel MEDIUM 5.5
CVE-2018-12928

In the Linux kernel 4.15.0, a NULL pointer dereference was discovered in hfs_ext_read_extent in hfs.ko. This can occur during a mount of a crafted hf…

Mitigation only
Fix from $1,600 2018-06-28
Linux Kernel MEDIUM 5.5
CVE-2018-1000200

The Linux Kernel versions 4.14, 4.15, and 4.16 has a null pointer dereference which can result in an out of memory (OOM) killing of large mlocked pro…

Patch available
Fix from $1,600 2018-06-05
Linux Kernel MEDIUM 5.5
CVE-2018-1130

Linux kernel before version 4.16-rc7 is vulnerable to a null pointer dereference in dccp_write_xmit() function in net/dccp/output.c in that allows a …

Fix: 4.16+
Fix from $1,600 2018-05-10
Linux Kernel MEDIUM 5.5
CVE-2018-10322

The xfs_dinode_verify function in fs/xfs/libxfs/xfs_inode_buf.c in the Linux kernel through 4.16.3 allows local users to cause a denial of service (x…

Fix: after 4.16.3
Fix from $1,600 2018-04-24
Linux Kernel MEDIUM 5.5
CVE-2018-10323

The xfs_bmap_extents_to_btree function in fs/xfs/libxfs/xfs_bmap.c in the Linux kernel through 4.16.3 allows local users to cause a denial of service…

Fix: after 4.16.3
Fix from $1,600 2018-04-24
Linux Kernel MEDIUM 5.5
CVE-2018-10074

The hi3660_stub_clk_probe function in drivers/clk/hisilicon/clk-hi3660-stub.c in the Linux kernel before 4.16 allows local users to cause a denial of…

Fix: 4.16+
Fix from $1,600 2018-04-12
Linux Kernel MEDIUM 5.5
CVE-2018-1092

The ext4_iget function in fs/ext4/inode.c in the Linux kernel through 4.15.15 mishandles the case of a root directory with a zero i_links_count, whic…

Fix: after 4.15.15
Fix from $1,600 2018-04-02
Linux Kernel MEDIUM 5.5
CVE-2018-1094

The ext4_fill_super function in fs/ext4/super.c in the Linux kernel through 4.15.15 does not always initialize the crc32c checksum driver, which allo…

Fix: after 4.15.15
Fix from $1,600 2018-04-02
Linux Kernel MEDIUM 5.5
CVE-2018-1095

The ext4_xattr_check_entries function in fs/ext4/xattr.c in the Linux kernel through 4.15.15 does not properly validate xattr sizes, which causes mis…

Fix: after 4.15.15
Fix from $1,600 2018-04-02
Linux Kernel MEDIUM 5.5
CVE-2017-18241

fs/f2fs/segment.c in the Linux kernel before 4.13 allows local users to cause a denial of service (NULL pointer dereference and panic) by using a nof…

Fix: 4.13+
Fix from $1,600 2018-03-21
Linux Kernel MEDIUM 5.5
CVE-2018-8043

The unimac_mdio_probe function in drivers/net/phy/mdio-bcm-unimac.c in the Linux kernel through 4.15.8 does not validate certain resource availabilit…

Fix: after 4.15.8
Fix from $1,600 2018-03-10
Linux Kernel MEDIUM 5.5
CVE-2017-18216

In fs/ocfs2/cluster/nodemanager.c in the Linux kernel before 4.15, local users can cause a denial of service (NULL pointer dereference and BUG) becau…

Fix: 4.15+
Fix from $1,600 2018-03-05
Linux Kernel MEDIUM 6.5
CVE-2018-1066

The Linux kernel before version 4.11 is vulnerable to a NULL pointer dereference in fs/cifs/cifsencrypt.c:setup_ntlmv2_rsp() that allows an attacker …

Fix: after 4.10.15
Fix from $1,600 2018-03-02
Linux Kernel MEDIUM 5.5
CVE-2018-7492

A NULL pointer dereference was found in the net/rds/rdma.c __rds_rdma_map() function in the Linux kernel before 4.14.7 allowing local attackers to ca…

Fix: 4.14.7+
Fix from $1,600 2018-02-26
Linux Kernel MEDIUM 5.9
CVE-2017-16914

The "stub_send_ret_submit()" function (drivers/usb/usbip/stub_tx.c) in the Linux Kernel before version 4.14.8, 4.9.71, 4.1.49, and 4.4.107 allows att…

Fix: 4.1.49 / 4.4.107+
Fix from $1,600 2018-01-31
Linux Kernel HIGH 7.8
CVE-2017-18079

drivers/input/serio/i8042.c in the Linux kernel before 4.12.4 allows attackers to cause a denial of service (NULL pointer dereference and system cras…

Fix: 3.2.94 / 3.16.49+
Fix from $1,950 2018-01-29
Linux Kernel MEDIUM 5.5
CVE-2018-5333EPSS 8%

In the Linux kernel through 4.14.13, the rds_cmsg_atomic function in net/rds/rdma.c mishandles cases where page pinning fails or an invalid address i…

Fix: after 4.14.13
Fix from $1,600 2018-01-11
Linux Kernel MEDIUM 5.5
CVE-2017-15116

The rngapi_reset function in crypto/rng.c in the Linux kernel before 4.2 allows attackers to cause a denial of service (NULL pointer dereference).

Fix: 4.2+
Fix from $1,600 2017-11-30