Vulnerabilities > NULL Pointer Dereference

DATE CVE VULNERABILITY TITLE RISK
2018-09-16 CVE-2018-17075 NULL Pointer Dereference vulnerability in multiple products
The html package (aka x/net/html) before 2018-07-13 in Go mishandles "in frameset" insertion mode, leading to a "panic: runtime error" for html.Parse of <template><object>, <template><applet>, or <template><marquee>.
network
low complexity
golang fedoraproject CWE-476
7.5
2018-09-16 CVE-2018-17073 NULL Pointer Dereference vulnerability in Bitmap Project Bitmap
wernsey/bitmap before 2018-08-18 allows a NULL pointer dereference via a 4-bit image.
network
low complexity
bitmap-project CWE-476
7.5
2018-09-13 CVE-2018-17000 NULL Pointer Dereference vulnerability in multiple products
A NULL pointer dereference in the function _TIFFmemcmp at tif_unix.c (called from TIFFWriteDirectoryTagTransferfunction) in LibTIFF 4.0.9 allows an attacker to cause a denial-of-service through a crafted tiff file.
network
low complexity
libtiff debian canonical CWE-476
6.5
2018-09-09 CVE-2018-16749 NULL Pointer Dereference vulnerability in multiple products
In ImageMagick 7.0.7-29 and earlier, a missing NULL check in ReadOneJNGImage in coders/png.c allows an attacker to cause a denial of service (WriteBlob assertion failure and application exit) via a crafted file.
network
low complexity
imagemagick canonical debian CWE-476
6.5
2018-09-07 CVE-2018-16657 NULL Pointer Dereference vulnerability in multiple products
In Kamailio before 5.0.7 and 5.1.x before 5.1.4, a crafted SIP message with an invalid Via header causes a segmentation fault and crashes Kamailio.
network
low complexity
debian kamailio CWE-476
critical
9.8
2018-09-06 CVE-2018-16517 NULL Pointer Dereference vulnerability in Nasm Netwide Assembler
asm/labels.c in Netwide Assembler (NASM) is prone to NULL Pointer Dereference, which allows the attacker to cause a denial of service via a crafted file.
local
low complexity
nasm CWE-476
5.5
2018-09-06 CVE-2018-1000800 NULL Pointer Dereference vulnerability in Zephyrproject Zephyr 1.12.0
zephyr-rtos version 1.12.0 contains a NULL base pointer reference vulnerability in sys_ring_buf_put(), sys_ring_buf_get() that can result in CPU Page Fault (error code 0x00000010).
network
low complexity
zephyrproject CWE-476
critical
9.8
2018-09-06 CVE-2018-1000661 NULL Pointer Dereference vulnerability in Jsish 2.4.67
jsish version 2.4.67 contains a CWE-476: NULL Pointer Dereference vulnerability in Jsi_LogMsg (jsiUtils.c:196) that can result in Crash due to segmentation fault.
network
low complexity
jsish CWE-476
6.5
2018-09-04 CVE-2018-10914 NULL Pointer Dereference vulnerability in multiple products
It was found that an attacker could issue a xattr request via glusterfs FUSE to cause gluster brick process to crash which will result in a remote denial of service.
network
low complexity
gluster redhat debian opensuse CWE-476
6.5
2018-09-04 CVE-2018-16428 NULL Pointer Dereference vulnerability in multiple products
In GNOME GLib 2.56.1, g_markup_parse_context_end_parse() in gmarkup.c has a NULL pointer dereference.
network
low complexity
gnome canonical CWE-476
critical
9.8