Vulnerabilities > CVE-2022-1249 - NULL Pointer Dereference vulnerability in Pesign Project Pesign

CVSS 2.1 - LOW

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

PARTIAL

local

low complexity

pesign-project

CWE-476

NVD

Published: 2022-04-29

Updated: 2022-05-11

Summary

A NULL pointer dereference flaw was found in pesign's cms_set_pw_data() function of the cms_common.c file. The function fails to handle the NULL pwdata invocation from daemon.c, which leads to an explicit NULL dereference and crash on all attempts to daemonize pesign.

Vulnerable Configurations

Part	Description	Count
Application	Pesign_Project Pesign Project Pesign - Pesign Project Pesign 0.2 Pesign Project Pesign 0.3 Pesign Project Pesign 0.4 Pesign Project Pesign 0.5 Pesign Project Pesign 0.6 Pesign Project Pesign 0.7 Pesign Project Pesign 0.8 Pesign Project Pesign 0.9 Pesign Project Pesign 0.10 Pesign Project Pesign 0.97 Pesign Project Pesign 0.98 Pesign Project Pesign 0.99 Pesign Project Pesign 0.100 Pesign Project Pesign 0.101 Pesign Project Pesign 0.102 Pesign Project Pesign 0.103 Pesign Project Pesign 0.104 Pesign Project Pesign 0.105 Pesign Project Pesign 0.106 Pesign Project Pesign 0.107 Pesign Project Pesign 0.108 Pesign Project Pesign 0.109 Pesign Project Pesign 0.110 Pesign Project Pesign 0.111 Pesign Project Pesign 0.112 Pesign Project Pesign 113	27

Common Weakness Enumeration (CWE)

CWE-476 - NULL Pointer Dereference

References

https://bugzilla.redhat.com/show_bug.cgi?id=2065771