Linux Distros Unpatched Vulnerability : CVE-2018-20751

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in croppage in PoDoFo 0.9.6. For a crafted PDF document, pPage-GetObject-GetDictionary.AddKeyPdfNameMediaBox,var can be problematic due ...

Linux Distros Unpatched Vulnerability : CVE-2018-6951

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in GNU patch through 2.7.6. There is a segmentation fault, associated with a NULL pointer dereference, leading to a denial of service in...

[SECURITY] [DLA 4282-1] firebird3.0 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4282-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk August 25, 2025 https://wiki.debian.org/LTS -...

SUSE-SU-2025:02972-1 Security update for ffmpeg-4

This update for ffmpeg-4 fixes the following issues: - CVE-2024-36618: Fixed integer overflow iff ULONGMAX INT64MAX bsc1234020. - CVE-2025-7700: Fixed potential NULL pointer dereference bsc1246790...

Linux Distros Unpatched Vulnerability : CVE-2019-14872

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The dtoar function of the newlib libc library, prior to version 3.3.0, performs multiple memory allocations without checking their return value. This could resu...

Linux Distros Unpatched Vulnerability : CVE-2019-8376

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Tcpreplay 4.3.1. A NULL pointer dereference occurred in the function getlayer4v6 located at get.c. This can be triggered by sending a...

Fedora 44 : libtiff (2025-c612cbc58f)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-c612cbc58f advisory. Automatic update for libtiff-4.7.0-8.fc44. Changelog Mon Aug 25 2025 Michal Hlavinka - 4.7.0-8 - fix CVE-2025-9165: memory leak in tiffcmp rhbz23896...

FFmpeg 代码问题漏洞

FFmpeg is a complete solution for recording, converting, and streaming audio and video from the FFmpeg team. A code issue vulnerability exists in FFmpeg that originates from an attacker being able to force a null pointer to be dereferenced, potentially resulting in a denial of service...

PT-2025-44097

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel where the return value of the platform get resource function is not properly checked. This function can return NULL in case of failure, and the lack of ...

Linux Distros Unpatched Vulnerability : CVE-2016-9113

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - There is a NULL pointer dereference in function imagetobmp of convertbmp.c:980 of OpenJPEG 2.1.2. image-comps0.data is not assigned a value after...

Linux Distros Unpatched Vulnerability : CVE-2018-20199

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A NULL pointer dereference was discovered in ifilterbank of libfaad/filtbank.c in Freeware Advanced Audio Decoder 2 FAAD2 2.8.8. The vulnerability causes a...

Linux Distros Unpatched Vulnerability : CVE-2017-9051

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libav before 12.1 is vulnerable to an invalid read of size 1 due to NULL pointer dereferencing in the nsvreadchunk function in libavformat/nsvdec.c. CVE-2017-90...

Linux Distros Unpatched Vulnerability : CVE-2018-14332

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Clementine Music Player 1.3.1. Clementine.exe is vulnerable to a user mode write access violation due to a NULL pointer dereference i...

Linux Distros Unpatched Vulnerability : CVE-2017-9470

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In ytnef 1.9.2, the MAPIPrint function in lib/ytnef.c allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a...

Linux Distros Unpatched Vulnerability : CVE-2017-8847

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The bufRead::get function in libzpaq/libzpaq.h in liblrzip.so in lrzip 0.631 allows remote attackers to cause a denial of service NULL pointer dereference and...

CVE-2025-9396

A security flaw has been discovered in ckolivas lrzip up to 0.651. This impacts the function GIstrtollinternal of the file strtoll.c. Performing manipulation results in null pointer dereference. The attack is only possible with local access. The exploit has been released to the public and may be...

CVE-2025-9396 ckolivas lrzip strtol_l.c __GI_____strtol_l_internal null pointer dereference

A security flaw has been discovered in ckolivas lrzip up to 0.651. This impacts the function GIstrtollinternal of the file strtoll.c. Performing manipulation results in null pointer dereference. The attack is only possible with local access. The exploit has been released to the public and may be...

CVE-2025-9396

CVE-2025-9396 affects lrzip up to version 0.651 (ckolivas). The vulnerability targets __GI_____strtol_l_internal in strtol_l.c, where input manipulation can cause a null pointer dereference. Exploitation requires local access; public exploits exist. No vendor patch/version is provided in the avai...

CVE-2025-38672

In the Linux kernel, the following vulnerability has been resolved: Revert "drm/gem-dma: Use dmabuf from GEM object instance" This reverts commit e8afa1557f4f963c9a511bd2c6074a941c308685. The dmabuf field in struct drmgemobject is not stable over the object instance's lifetime. The field becomes...

CVE-2025-38621

In the Linux kernel, the following vulnerability has been resolved: md: make rdevaddable usable for rcu mode Our testcase trigger panic: BUG: kernel NULL pointer dereference, address: 00000000000000e0 ... Oops: Oops: 0000 1 SMP NOPTI CPU: 2 UID: 0 PID: 85 Comm: kworker/2:1 Not tainted 6.16.0+ 94...