DEBIAN-CVE-2026-63686

A NULL pointer dereference in modxml2enc in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an untrusted backend server to cause a denial of service via a proxied response with a charset whose conversion partially succeeds then fails. Users are recommended to...

CVE-2026-63686

A NULL pointer dereference in modxml2enc in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an untrusted backend server to cause a denial of service via a proxied response with a charset whose conversion partially succeeds then fails. Users are recommended to...

CVE-2026-23398

CVE-2026-23398 Linux 内核 icmptagvalidation 空指针解引用（远程拒绝服务） 描述 net/ipv4/icmp.c 中的 icmptagvalidation 在解引用 inetprotosproto 时未进行 NULL 检查。远程攻击者可以发送单个精心构造的 ICMP Fragmentation Needed 数据包，其中包含未注册的内部协议号，从而在 softirq 上下文中使内核崩溃。 受影响版本：提交 614aefe56af8（主线）之前的 Linux 内核 / d938dd5a0ad7（稳定版 6.12）之前的版本 用法 sudo python...

CVE-2026-63686

The Apache HTTP Server (versions before 2.4.69 ) is vulnerable to a NULL pointer dereference within the mod_xml2enc module. An untrusted backend server can trigger a Denial of Service (DoS) by returning a crafted response with a character set that partially succeeds and then fails during conversi...

CVE-2026-63686

A NULL pointer dereference in modxml2enc in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an untrusted backend server to cause a denial of service via a proxied response with a charset whose conversion partially succeeds then fails. Users are recommended to...

CVE-2026-63686 Apache HTTP Server: mod_xml2enc crash on charset conversion failure

A NULL pointer dereference in modxml2enc in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an untrusted backend server to cause a denial of service via a proxied response with a charset whose conversion partially succeeds then fails. Users are recommended to...

CVE-2026-63686

A NULL pointer dereference in modxml2enc in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an untrusted backend server to cause a denial of service via a proxied response with a charset whose conversion partially succeeds then fails. Users are recommended to...

EUVD-2026-90912

A NULL pointer dereference in modxml2enc in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an untrusted backend server to cause a denial of service via a proxied response with a charset whose conversion partially succeeds then fails. Users are recommended to...

DEBIAN-CVE-2026-46729

NULL Pointer Dereference vulnerability in Apache HTTP Servers modheartmonitor over unicast listener. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68...

CVE-2026-46729

NULL Pointer Dereference vulnerability in Apache HTTP Servers modheartmonitor over unicast listener. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68...

EUVD-2026-90887

NULL Pointer Dereference vulnerability in Apache HTTP Servers modheartmonitor over unicast listener. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68...

CVE-2026-46729 Apache HTTP Server: mod_heartmonitor denial of service

NULL Pointer Dereference vulnerability in Apache HTTP Servers modheartmonitor over unicast listener. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68...

CVE-2026-46729

NULL Pointer Dereference vulnerability in Apache HTTP Servers modheartmonitor over unicast listener. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68...

CVE-2026-46729

Apache HTTP Server versions 2.4.0 through 2.4.68 are vulnerable to a NULL Pointer Dereference within the mod_heartmonitor module. The flaw occurs over a unicast listener , which can lead to a denial of service (DoS) condition. While the vulnerability is confirmed to impact availability, specific ...

CVE-2026-45729

CVE-2026-45729 — Desreferencia de puntero NULL en ThorVG mediante SVG malformado Severidad: CVSS 4.3 Media — CWE-476 Aviso: GHSA-f863-8ghq-7h64 Corregido en: ThorVG v1.0.5 Estado: Parcheado / Divulgado Resumen El analizador SVG de ThorVG desreferencia un puntero que nunca se inicializa cuando...

practice-22-23

プロジェクト 実行方法: ./script.sh GitHub リポジトリ - https://github.com/LaCinquette/practice-22-23 実施手順 1. 脆弱性を探すため、FFmpegプロジェクトを選択しました。その中で、要件に一致するコミットを見つけました。具体的には: CWE-476 （ヌルポインタの参照外し）のタイプに一致 2. 以下の内容のDockerfileを作成しました: 1. ベースイメージとしてUbuntu 22.04を選択 2...

cve-2021-3449

CVE-2021-3449 OpenSSL この問題は 2021 年 3 月 17 日に Nokia から OpenSSL に報告されました。修正は Nokia の Peter Kästle と Samuel Sapalski によって開発されました。 対策 既知の修正方法は libssl1.1 を更新することのみです。 一部のアプリケーションはデフォルトで TLS 再ネゴシエーションを無効化する堅牢な TLS 設定を使用していますが、古い OpenSSL バージョンを実行している場合、このバグの影響を受けます。 エクスプロイト main.go は TLS...

BIT-PGBOUNCER-2026-19888 NULL pointer dereference in SCRAM client-final-message parsing in PgBouncer

Missing validation of a mandatory attribute in the SCRAM client-final-message parser in PgBouncer through 1.25.2 allows an unauthenticated remote attacker to crash the process. A malformed message can make the parser report success while leaving a required value unset, which is then dereferenced ...

CVE-2026-63686: NULL Pointer Dereference

A NULL pointer dereference in modxml2enc in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an untrusted backend server to cause a denial of service via a proxied response with a charset whose conversion partially succeeds then fails. Users are recommended to...

Rocky Linux 10.2 [CIQ] Security Update: 389-ds-base / 389-ds-base-bdb / 389-ds-base-bdb-debuginfo / etc Multiple Vulnerabilities (crlsa-2026_64785)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202664785 advisory. 389-ds-base: 389-ds-base: heap buffer overflow via SASL wrapped-record length lower-bound underflow in sasliostartpacket CVE-2026-18355 389-ds-base:...