GNUTLS-SA-2008-1-2 GnuTLS null-pointer dereference

The gnutlsrecvclientkxmessage function in lib/gnutlskx.c in libgnutls in gnutls-serv in GnuTLS before 2.2.4 continues to process Client Hello messages within a TLS message after one has already been processed, which allows remote attackers to cause a denial of service NULL dereference and crash v...

Single MySQL worker can be crashed (NULL deref) with certain SELECT statements

MySQL 5.x before 5.0.36 allows local users to cause a denial of service database crash by performing informationschema table subselects and using ORDER BY to sort a single-row result, which prevents certain structure elements from being initialized and triggers a NULL dereference in the filesort...

krb5: uninitialized pointer use in krb5kdc

KDC in MIT Kerberos 5 krb5kdc does not set a global variable for some krb4 message types, which allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via crafted messages that trigger a NULL pointer dereference or double-free...

NULL dereference in iwl driver

The iwlsetrate function in compatible/iwl3945-base.c in iwlwifi 1.1.21 and earlier dereferences an iwlgethwmode return value without checking for NULL, which might allow remote attackers to cause a denial of service kernel panic via unspecified vectors during module initialization...

CVE-2008-0944

Ipswitch Instant Messaging IM 2.0.8.1 and earlier allows remote attackers to cause a denial of service NULL dereference and application crash via a version field containing zero...

CVE-2008-0944

Ipswitch Instant Messaging IM 2.0.8.1 and earlier allows remote attackers to cause a denial of service NULL dereference and application crash via a version field containing zero...

DEBIAN-CVE-2008-0672

The processchatinput function in TinTin++ 1.97.9 and WinTin++ 1.97.9 allows remote attackers to cause a denial of service application crash via a YES message without a newline character, which triggers a NULL dereference...

Out-of-bounds

The processchatinput function in TinTin++ 1.97.9 and WinTin++ 1.97.9 allows remote attackers to cause a denial of service application crash via a YES message without a newline character, which triggers a NULL dereference...

CVE-2008-0672

The processchatinput function in TinTin++ 1.97.9 and WinTin++ 1.97.9 allows remote attackers to cause a denial of service application crash via a YES message without a newline character, which triggers a NULL dereference...

CVE-2008-0672

The processchatinput function in TinTin++ 1.97.9 and WinTin++ 1.97.9 allows remote attackers to cause a denial of service application crash via a YES message without a newline character, which triggers a NULL dereference...

CVE-2008-0672

The processchatinput function in TinTin++ 1.97.9 and WinTin++ 1.97.9 allows remote attackers to cause a denial of service application crash via a YES message without a newline character, which triggers a NULL dereference...

Design/Logic Flaw

Steamcast 0.9.75 and earlier allows remote attackers to cause a denial of service daemon crash via a large integer in the Content-Length HTTP header, which triggers a NULL dereference when malloc fails...

CVE-2008-0548

Steamcast 0.9.75 and earlier allows remote attackers to cause a denial of service daemon crash via a large integer in the Content-Length HTTP header, which triggers a NULL dereference when malloc fails...

CVE-2008-0548

Steamcast 0.9.75 and earlier is affected by a denial of service via a crafted large Content-Length HTTP header that causes a NULL dereference when malloc fails. Affected component: the server handling HTTP requests; root cause is handling of oversized Content-Length values. Impact is denial of se...

Design/Logic Flaw

The getrepeattype function in basicregexcreator.hpp in the Boost regex library aka Boost.Regex in Boost 1.33 and 1.34 allows context-dependent attackers to cause a denial of service NULL dereference and crash via an invalid regular expression...

CVE-2008-0172

The getrepeattype function in basicregexcreator.hpp in the Boost regex library aka Boost.Regex in Boost 1.33 and 1.34 allows context-dependent attackers to cause a denial of service NULL dereference and crash via an invalid regular expression...

CVE-2008-0172

CVE-2008-0172 affects the Boost.Regex component (basic_regex_creator.hpp get_repeat_type) in Boost 1.33 and 1.34, where context-dependent attackers can induce a denial of service by supplying an invalid regular expression that leads to a crash (NULL dereference). The MIRACLE_LINUX/AXSA, Red Hat R...

DEBIAN-CVE-2007-6684

The RTSP module in VideoLAN VLC 0.8.6d allows remote attackers to cause a denial of service crash via a request without a Transport parameter, which triggers a NULL pointer dereference...

Debian Security Advisory DSA 639-1 (mc)

The remote host is missing an update to mc announced via advisory DSA 639-1. OpenVAS Vulnerability Test $Id: deb6391.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 639-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

CVE-2007-6630

The Urlinit function in utils/url.c in Netembryo 0.0.4, when used by LScube Feng, allows remote attackers to cause a denial of service NULL dereference and daemon crash via a malformed URI containing a "/:" sequence, as demonstrated by a "DESCRIBE /: RTSP/1.0" request...