Lucene search
K

A NULL pointer dereference flaw was found in pesign's cms_set_pw_data() function of the cms_common.c file. The function fails to handle the NULL pwdata invocation from daemon.c, which leads to an explicit NULL dereference and crash on all attempts to daemonize pesign.

🗓️ 02 Oct 2025 06:11:13Reported by MicrosoftType 
mscve
 mscve
🔗 msrc.microsoft.com👁 1 Views

Null pointer dereference in pesign cms_set_pw_data crashes during daemonization due to null password data from daemon.c.

Related
Detection
ReporterTitlePublishedViews
Family
CBLMariner
CVE-2022-1249 affecting package pesign 0.112-32
12 Jan 202509:15
cbl_mariner
Circl
CVE-2022-1249
29 Apr 202220:24
circl
CNNVD
RedHat pesign 代码问题漏洞
29 Apr 202200:00
cnnvd
CVE
CVE-2022-1249
29 Apr 202215:43
cve
Cvelist
CVE-2022-1249
29 Apr 202215:43
cvelist
Debian CVE
CVE-2022-1249
29 Apr 202215:43
debiancve
EUVD
EUVD-2022-24582
3 Oct 202520:07
euvd
NVD
CVE-2022-1249
29 Apr 202216:15
nvd
OSV
AZL-9655 CVE-2022-1249 affecting package pesign 0.112-32
29 Apr 202216:15
osv
OSV
CVE-2022-1249
29 Apr 202216:15
osv
Rows per page
Vulners

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

02 Oct 2025 06:11Current
7High risk
Vulners AI Score7
CVSS 22.1
CVSS 3.13.3
EPSS0.0013
1