6707 matches found
CVE-2018-18508
In Network Security Services NSS before 3.36.7 and before 3.41.1, a malformed signature can cause a crash due to a null dereference, resulting in a Denial of Service...
UBUNTU-CVE-2018-18508
In Network Security Services NSS before 3.36.7 and before 3.41.1, a malformed signature can cause a crash due to a null dereference, resulting in a Denial of Service...
EulerOS 2.0 SP2 : krb5 (EulerOS-SA-2018-1425)
According to the versions of the krb5 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - null dereference in kadmind or DN container check bypass by supplying special crafted data CVE-2018-5729 - DN container check bypass by supplying...
EulerOS 2.0 SP3 : zsh (EulerOS-SA-2018-1396)
According to the versions of the zsh package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - zsh: buffer overflow for very long fds in i1/4zi1/4+ fd syntax CVE-2014-10071 - zsh: buffer overflow when scanning very long directory paths for...
EulerOS 2.0 SP3 : krb5 (EulerOS-SA-2018-1398)
According to the versions of the krb5 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - null dereference in kadmind or DN container check bypass by supplying special crafted data CVE-2018-5729 - DN container check bypass by supplying...
Scientific Linux Security Update : zsh on SL7.x x86_64 (20181030)
Security Fixes : - zsh: Stack-based buffer overflow in genmatchesfiles at compctl.c CVE-2018-1083 - zsh: buffer overflow for very long fds in & fd syntax CVE-2014-10071 - zsh: buffer overflow when scanning very long directory paths for symbolic links CVE-2014-10072 - zsh: NULL dereference in cd i...
Oracle Linux 7 : krb5 (ELSA-2018-3071)
The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-3071 advisory. - Fix flaws in LDAP DN checking CVE-2018-5729, CVE-2018-5730 Tenable has extracted the preceding description block directly from the Oracle Linux...
krb5: null dereference in kadmind or DN container check bypass by supplying special crafted data
MIT krb5 1.6 or later allows an authenticated kadmin with permission to add principals to an LDAP Kerberos database to cause a denial of service NULL pointer dereference or bypass a DN container check by supplying tagged data that is internal to the database module...
mupdf/pdf_fuzzer: NULL
Detailed report: https://oss-fuzz.com/testcase?key=5658375946240000 Project: mupdf Fuzzer: aflmupdfpdffuzzer Fuzz target binary: pdffuzzer Job Type: aflasanmupdf Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: NULL Sanitizer: address ASAN Reproducer...
envoy/h1_capture_fuzz_test: NULL
Project: https://github.com/envoyproxy/envoy.git Detailed report: https://oss-fuzz.com/testcase?key=5674755374448640 Project: envoy Fuzzer: libFuzzerenvoyh1capturefuzztest Fuzz target binary: h1capturefuzztest Job Type: libfuzzerubsanenvoy Platform Id: linux Crash Type: Null-dereference READ Cras...
USN-3776-1 linux, linux-aws, linux-kvm, linux-raspi2, linux-snapdragon vulnerabilities
Jann Horn discovered that the vmacache subsystem did not properly handle sequence number overflows, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service system crash or execute arbitrary code. CVE-2018-17182 It was discovered that the...
CVE-2018-17073
wernsey/bitmap before 2018-08-18 allows a NULL pointer dereference via a 4-bit image...
PT-2019-8602
Name of the Vulnerable Software and Affected Versions Eclipse Mosquitto versions 1.0 through 1.4.15 Description A Null Dereference issue was found in the Mosquitto library, which could cause crashes for applications using the library. Recommendations For Eclipse Mosquitto versions 1.0 through...
ALPINE-CVE-2018-14598
An issue was discovered in XListExtensions in ListExt.c in libX11 through 1.6.5. A malicious server can send a reply in which the first string overflows, causing a variable to be set to NULL that will be freed later on, leading to DoS segmentation fault...
curl/curl_fuzzer_http: NULL
Project: https://github.com/curl/curl.git Detailed report: https://oss-fuzz.com/testcase?key=5101396595572736 Project: curl Fuzzer: libFuzzercurlfuzzerhttp Fuzz target binary: curlfuzzerhttp Job Type: libfuzzerubsancurl Platform Id: linux Crash Type: Null-dereference READ Crash Address:...
Denial of Service in PAN-OS Management Web Interface
Palo Alto Networks makes use of a 3rd-party component impacted by CVE-2018-8715. This issue has been confirmed to present a risk for denial of service to the PAN-OS Management Web Interface. Ref PAN-93089, CVE-2018-8715 A specially crafted HTTP POST request with an invalid “If-modified" header...
Denial of Service in PAN-OS Management Web Interface
Palo Alto Networks makes use of a 3rd-party component impacted by CVE-2018-8715. This issue has been confirmed to present a risk for denial of service to the PAN-OS Management Web Interface. Ref PAN-93089, CVE-2018-8715 A specially crafted HTTP POST request with an invalid “If-modified" header...
CVE-2018-13303
In FFmpeg 4.0.1, a missing check for failure of a call to initgetbits8 in the avprivac3parseheader function in libavcodec/ac3parser.c may trigger a NULL pointer dereference while converting a crafted AVI file to MPEG4, leading to a denial of service...
PT-2018-2701
Name of the Vulnerable Software and Affected Versions Network Security Services NSS versions prior to 3.36.7 Network Security Services NSS versions prior to 3.41.1 Description A malformed signature can cause a crash due to a null dereference, resulting in a Denial of Service. The vulnerability is...
gdal/gdal_fuzzer: NULL
Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5144842333061120 Project: gdal Fuzzer: libFuzzergdalfuzzer Fuzz target binary: gdalfuzzer Job Type: libfuzzerubsangdal Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000...