Null pointer dereference

🗓️ 08 Feb 2023 20:15:00Reported by PRIOn knowledge baseType

prion

prion🔗 www.prio-n.com👁 31 Views

Invalid pointer dereference when reading malformed PKCS7 data, leading to application crash and denial of servic

Reporter	Title	Published	Views	Family All 140
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM SDK for Node.js and packaged modules affect IBM Business Automation Workflow Configuration Editor	1 Mar 202309:00	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Spectrum Conductor openssl 1.1.1 End of Life	5 Oct 202320:31	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in OpenSSL affect AIX	21 Mar 202320:07	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ Advanced Message Security on IBM i platform is affected by multiple issues in OpenSSL (CVE-2022-4203, CVE-2022-4304, CVE-2022-4450, CVE-2023-0216, CVE-2023-0217, CVE-2023-0401)	22 Jun 202317:20	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container Dashboard operands are vulnerable to denial of service and loss of confidentiality due to multiple vulnerabilities	25 Jul 202313:36	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in OpenSSL affect IBM Rational ClearQuest	4 Oct 202311:26	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Node.js, libcurl, Golang Go, Jetty, Guava, Netty, OpenSSL, Linux kernel may affect IBM Spectrum Protect Plus	23 Mar 202320:19	–	ibm
IBM Security Bulletins	Security Bulletin: OpenSSL publicly disclosed vulnerability affects IBM® MobileFirst Platform	19 Apr 202304:22	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Event Streams is affected by a denial of service due to OpenSSL vulnerabilities	10 Oct 202313:51	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in OpenSSL affect IBM Observability with Instana (Agent container image)	17 Oct 202314:45	–	ibm

Source	Link
openssl	www.openssl.org/news/secadv/20230207.txt
git	www.git.openssl.org/gitweb/
security	www.security.gentoo.org/glsa/202402-08

04 Feb 2024 09:15Current

7.3High risk

Vulners AI Score7.3

EPSS0.00853

invalid pointer dereference pkcs7 data application crash denial of service openssl third party applications untrusted data