Siemens SIMATIC Devices Improper Input Validation (CVE-2024-27038)

Vulnerability in Linux kernel: clk: clkcoreget NULL dereference It is possible for clkcoreget to dereference a NULL in the following sequence: clkcoreget ofclkgethwfromclkspec ofclkgethwfromprovider clkgethw clkgethw can return NULL which is dereferenced by clkcoreget at hw-core. Prior to commit...

Siemens SIMATIC, SCALANCE and RUGGEDCOM Devices NULL Pointer Dereference (CVE-2024-44990)

In the Linux kernel, the following vulnerability has been resolved: bonding: fix null pointer deref in bondipsecoffloadok We must check if there is an active slave before dereferencing the pointer. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot fo...

Siemens SIMATIC Devices NULL Pointer Dereference (CVE-2024-35940)

pstore/zone: Add a null pointer check to the pszkmsgread This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid503561; scriptversion"1.2";...

PT-2025-44015

Name of the Vulnerable Software and Affected Versions FRRouting/frr versions 2.0 through 10.4.1 Description FRRouting/frr contains a flaw due to a NULL pointer dereference in the opaque info detail function located in ospf opaque.c. This issue can be exploited by attackers sending a specially...

CVE-2025-61102

FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the showvtyextlinkadjsid function at ospfext.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted OSPF packet...

Siemens SIMATIC Devices NULL Pointer Dereference (CVE-2025-21846)

acct: perform last write from workqueue This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid503731; scriptversion"1.3";...

Kamailio 代码问题漏洞

Kamailio is an open source implementation of a SIP signaling server from Kamailio Open Source. A code issue vulnerability exists in Kamailio version 5.5, which stems from a null pointer dereference in the function yyerrorat in the file src/core/cfg.y, which could lead to a local attack...

CVE-2025-61105

FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the showvtylinkinfo function at ospfext.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted OSPF packet...

CVE-2025-61100

FRRouting/frr from v2.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the ospfopaquelsadump function at ospfopaque.c. This vulnerability allows attackers to cause a Denial of Service DoS under specific malformed LSA conditions...

CVE-2025-61101

FRRouting/frr versions 4.0–10.4.1 contain a NULL pointer dereference in ospf_ext.c (show_vty_ext_link_rmt_itf_addr) that can cause a DoS via a crafted OSPF packet. CVSSv3.1 base 7.5 (NETWORK, LOW complexity, NO user interaction, NO privileges, Availability impact HIGH). Remediation is available: ...

Siemens SIMATIC Devices NULL Pointer Dereference (CVE-2024-35933)

Bluetooth: btintel: Fix null ptr deref in btintelreadversion This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid503657; scriptversion"1.2";...

Siemens SIMATIC, SCALANCE and RUGGEDCOM Devices NULL Pointer Dereference (CVE-2024-47705)

In the Linux kernel, the following vulnerability has been resolved: block: fix potential invalid pointer dereference in blkaddpartition The blkaddpartition function initially used a single if-condition ISERRpart to check for errors when adding a partition. This was modified to handle the specific...

Siemens SIMATIC, SCALANCE and RUGGEDCOM Devices NULL Pointer Dereference (CVE-2024-49944)

sctp: set skstate back to CLOSED if autobind fails in sctplistenstart. In sctplistenstart invoked by sctpinetlisten, it should set the skstate back to CLOSED if sctpautobind fails due to whatever reason. Otherwise, next time when calling sctpinetlisten, if sctpsksk-reuse is already set via...

Siemens SIMATIC Devices NULL Pointer Dereference (CVE-2024-58020)

HID: multitouch: Add NULL check in mtinputconfigured This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid503738; scriptversion"1.3";...

Siemens SIMATIC Devices NULL Pointer Dereference (CVE-2024-22099)

NULL Pointer Dereference vulnerability in Linux Linux kernel kernel on Linux, x86, ARM net, bluetooth modules allows Overflow Buffers. This vulnerability is associated with program files /net/bluetooth/rfcomm/core.C. This issue affects Linux kernel: v2.6.12-rc2. This plugin only works with...

Siemens SIMATIC Devices NULL Pointer Dereference (CVE-2025-21639)

In the Linux kernel, the following vulnerability has been resolved: sctp: sysctl: rtomin/max: avoid using current-nsproxy As mentioned in a previous commit of this series, using the 'net' structure via 'current' is not recommended for different reasons: - Inconsistency: getting info from the...

FRRouting 安全漏洞

FRRouting is the FRRouting open source suite of network routing software that runs on Unix-like platforms. A security vulnerability exists in FRRouting versions 4.0 through 10.4.1, which stems from the presence of a null pointer dereference in the showvtylinkinfo function, which could lead to a...

Siemens SIMATIC Devices NULL Pointer Dereference (CVE-2024-50058)

"In the Linux kernel, the following vulnerability has been resolved: serial: protect uartportdtrrts in uartshutdown too Commit af224ca2df29 serial: core: Prevent unsafe uart port access, part 3 added few uport == NULL checks. It added one to uartshutdown, so the commit assumes, uport can be NULL ...

CVE-2025-61100

FRRouting/frr from v2.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the ospfopaquelsadump function at ospfopaque.c. This vulnerability allows attackers to cause a Denial of Service DoS under specific malformed LSA conditions...

Siemens SIMATIC Devices NULL Pointer Dereference (CVE-2025-21640)

In the Linux kernel, the following vulnerability has been resolved: sctp: sysctl: cookiehmacalg: avoid using current-nsproxy As mentioned in a previous commit of this series, using the 'net' structure via 'current' is not recommended for different reasons: - Inconsistency: getting info from the...