179 matches found
CVE-2021-43539
Failure to correctly record the location of live pointers across wasm instance calls resulted in a GC occurring within the call not tracing those live pointers. This could have led to a use-after-free causing a potentially exploitable crash. This vulnerability affects Thunderbird 91.4.0, Firefox...
PT-2022-4797 · Mariadb +9 · Mariadb +10
Name of the Vulnerable Software and Affected Versions: MariaDB versions 10.5.9 and earlier Description: The issue is related to errors in pointer handling, which can cause an application crash when a NULL value is encountered in the aggr variable within the sub select postjoin aggr function. This...
The vulnerability in the implementation of the show_transport_handle() function in Linux operating systems allows a malicious actor to gain unauthorized access to protected information.
The vulnerability of the showtransporthandle function in Linux operating systems is related to improper handling of pointers. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability of QEMU’s emulation software, related to the swapping of the zero pointer, allows a hacker to trigger a service failure.
The vulnerability of QEMU’s emulation software-related hardware lies in the handling of the null pointer. Exploiting this vulnerability can allow an attacker to cause a system failure...
varnish: not clearing pointer between two client requests leads to information disclosure
An issue was discovered in Varnish Cache before 6.0.5 LTS, 6.1.x and 6.2.x before 6.2.2, and 6.3.x before 6.3.1. It does not clear a pointer between the handling of one client request and the next request within the same connection. This sometimes causes information to be disclosed from the...
The vulnerability of the Coturn web server, related to the swapping of the zero pointer, allows attackers to trigger a service failure.
The vulnerability of the Coturn web server is related to the handling of the zero pointer. Exploiting this vulnerability could allow a malicious actor to cause service failures...
The vulnerability of the emulation software for hardware devices on various platforms, QEMU, allows a hacker to trigger a service failure.
The vulnerability of software for emulating hardware on various platforms under QEMU is related to deficiencies in the handling of zero pointer assignments. Exploiting this vulnerability can allow an attacker to cause a system failure...
CVE-2020-5898
In versions 7.1.5-7.1.9, BIG-IP Edge Client Windows Stonewall driver does not sanitize the pointer received from the userland. A local user on the Windows client system can send crafted DeviceIoControl requests to \.\urvpndrv device causing the Windows kernel to crash...
Denial Of Service (DoS)
squid is vulnerable to denial of service. The vulnerability exists due to incorrect pointer handling when processing ESI Responses which allows an attacker to crash the application via malicious input...
The vulnerability of Xen hypervisors, related to the swapping of the zero pointer, allows a attacker to trigger a service failure.
The vulnerability of Xen hypervisors is related to the handling of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of Samba software, related to the handling of the null pointer, allows a perpetrator to trigger a service failure.
The vulnerability of Samba software is related to the handling of the null pointer. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...
The vulnerability of the RouterOS operating system in MikroTik routers, related to the assignment of the zero pointer, allows a hacker to cause a service failure.
The vulnerability of the RouterOS operating system for MikroTik lies in the handling of the zero pointer. Exploiting this vulnerability allows a malicious actor to cause service interruptions using a specially created package...
CVE-2019-5290
Huawei S5700 and S6700 have a DoS security vulnerability. Attackers with certain permissions perform specific operations on affected devices. Because the pointer in the program is not processed properly, the vulnerability can be exploited to cause the device to be abnormal...
Huawei S5700 and Huawei S6700 Denial of Service Vulnerabilities
The Huawei S5700 and Huawei S6700 are both enterprise-class switches from Huawei, a Chinese company. A denial of service vulnerability exists in the Huawei S5700 and S6700, which arises from a program's failure to reasonably handle pointers, and can be exploited by an attacker to cause a device...
PT-2019-17561 · Huawei · Huawei S5700 +2
Name of the Vulnerable Software and Affected Versions: Huawei S5700 and S6700 affected versions not specified Description: The issue is related to a DoS security vulnerability. Attackers with certain permissions can perform specific operations on affected devices, exploiting the vulnerability due...
The vulnerability of the SIP protocol implementation in Cisco IOS and Cisco IOS XE operating systems allows a attacker to trigger a service failure.
The vulnerability of the SIP protocol implementation in Cisco IOS and Cisco IOS XE operating systems is related to the handling of the zero pointer. Exploiting this vulnerability allows a malicious actor to cause service failures by sending specially crafted SIP packets...
CVE-2019-13527
In Rockwell Automation Arena Simulation Software Cat. 9502-Ax, Versions 16.00.00 and earlier, a maliciously crafted Arena file opened by an unsuspecting user may result in the use of a pointer that has not been initialized...
Squid 3.x < 3.5.28 / 4.x < 4.0.23 Multiple Denial of Service Vulnerabilities (SQUID-2018:1) (SQUID-2018:2)
According to its banner, the version of Squid running on the remote host is 3.x prior to 3.5.28, or 4.x prior to 4.0.23. It is, therefore, affected by multiple vulnerabilities: - A denial of service DoS vulnerability exists in the ESI response processing component due to incorrect pointer handlin...
Squid 3.1.12.2 <= 3.1.x <= 3.1.23 / 3.2.0.8 <= 3.2.x <= 3.2.14 / 3.3.x / 3.4.x / 3.5.x <= 3.5.27 / 4.x < 4.0.13 Denial of Service Vulnerability (SQUID-2018:3)
According to its banner, the version of Squid running on the remote host is 3.1.x after or equal to 3.1.12.2 and prior or equal to 3.1.23, 3.2.x after or equal to 3.2.0.8 and prior or equal to 3.2.0.8, 3.3.x, 3.4.x, 3.5.x prior or equal to 3.5.27, or 4.x prior to 4.0.13. It is, therefore, affecte...
Amazon Linux AMI : squid (ALAS-2018-1081)
The Squid Software Foundation Squid HTTP Caching Proxy contains a NULL pointer Dereference vulnerability in HTTP Response X-Forwarded-For header processing that can result in Denial of Service to all clients of the proxy. This attack appear to be exploitable via Remote HTTP server responding with...