Incorrect Comparison

Overview github.com/jackc/pgx/v5/pgproto3 is a low-level PostgreSQL database driver Affected versions of this package are vulnerable to Incorrect Comparison in the FunctionCall.Decode function. An attacker can cause a crash on 64-bit machine by sending a null argument in a FunctionCall response...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from not forcing a single empty string when argv is null in execve...

nommu: pass NULL argument to vma_iter_prealloc()

...

CVE-2024-53109

In the Linux kernel, the following vulnerability has been resolved: nommu: pass NULL argument to vmaiterprealloc When deleting a vma entry from a maple tree, it has to pass NULL to vmaiterprealloc in order to calculate internal state of the tree, but it passed a wrong argument. As a result, nommu...

CVE-2024-53109

CVE-2024-53109 affects Linux kernel nommu builds. The issue occurred when deleting a vma entry from a maple tree: do_munmap required passing NULL to vma_iter_prealloc(), but an incorrect argument was provided, causing crashes when accessing a vma iterator (e.g., acct_collect() reading vma sizes)....

CVE-2017-18301

In Small Cell SoC and Snapdragon Automobile, Mobile, Wear in version FSM9055, FSM9955, MDM9607, MDM9640, MDM9650, MSM8909W, SD 425, SD 427, SD 430, SD 435, SD 450, SD 617, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SD 845, SDM630, SDM636, SDM660, SDX20, SnapdragonHighMed2016, providing the NULL...

AZL-41475 CVE-2011-2691 affecting package syslinux for versions less than 6.04-11

The pngerr function in pngerror.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 makes a function call using a NULL pointer argument instead of an empty-string argument, which allows remote attackers to cause a denial of service application crash vi...

Ubuntu 5.10 : mysql-dfsg-4.1 vulnerability (USN-306-1)

MySQL did not correctly handle NULL as the second argument to the strtodate function. An authenticated user could exploit this to crash the server. Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to...