Vulnerabilities > NULL Pointer Dereference

DATE CVE VULNERABILITY TITLE RISK
2018-02-26 CVE-2018-7492 NULL Pointer Dereference vulnerability in multiple products
A NULL pointer dereference was found in the net/rds/rdma.c __rds_rdma_map() function in the Linux kernel before 4.14.7 allowing local attackers to cause a system panic and a denial-of-service, related to RDS_GET_MR and RDS_GET_MR_FOR_DEST.
local
low complexity
linux debian canonical CWE-476
5.5
2018-02-24 CVE-2018-7456 NULL Pointer Dereference vulnerability in multiple products
A NULL Pointer Dereference occurs in the function TIFFPrintDirectory in tif_print.c in LibTIFF 3.9.3, 3.9.4, 3.9.5, 3.9.6, 3.9.7, 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0beta7, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta, 4.0.5, 4.0.6, 4.0.7, 4.0.8 and 4.0.9 when using the tiffinfo tool to print crafted TIFF information, a different vulnerability than CVE-2017-18013.
network
low complexity
libtiff debian canonical CWE-476
6.5
2018-02-24 CVE-2018-7454 NULL Pointer Dereference vulnerability in Xpdfreader Xpdf 4.00
A NULL pointer dereference in XFAForm::scanFields in XFAForm.cc in xpdf 4.00 allows attackers to launch denial of service via a specific pdf file, as demonstrated by pdftohtml.
local
low complexity
xpdfreader CWE-476
5.5
2018-02-24 CVE-2018-7452 NULL Pointer Dereference vulnerability in Xpdfreader Xpdf 4.00
A NULL pointer dereference in JPXStream::fillReadBuf in JPXStream.cc in xpdf 4.00 allows attackers to launch denial of service via a specific pdf file, as demonstrated by pdftohtml.
local
low complexity
xpdfreader CWE-476
5.5
2018-02-24 CVE-2017-18199 NULL Pointer Dereference vulnerability in GNU Libcdio
realloc_symlink in rock.c in GNU libcdio before 1.0.0 allows remote attackers to cause a denial of service (NULL Pointer Dereference) via a crafted iso file.
network
low complexity
gnu CWE-476
6.5
2018-02-23 CVE-2018-7336 NULL Pointer Dereference vulnerability in multiple products
In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, the FCP protocol dissector could crash.
network
low complexity
wireshark debian CWE-476
7.5
2018-02-22 CVE-2018-7285 NULL Pointer Dereference vulnerability in Digium Asterisk
A NULL pointer access issue was discovered in Asterisk 15.x through 15.2.1.
network
low complexity
digium CWE-476
7.5
2018-02-21 CVE-2015-5316 NULL Pointer Dereference vulnerability in multiple products
The eap_pwd_perform_confirm_exchange function in eap_peer/eap_pwd.c in wpa_supplicant 2.x before 2.6, when EAP-pwd is enabled in a network configuration profile, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an EAP-pwd Confirm message followed by the Identity exchange.
network
high complexity
w1-fi debian CWE-476
5.9
2018-02-21 CVE-2015-6569 NULL Pointer Dereference vulnerability in Atlassian Floodlight
Race condition in the LoadBalancer module in the Atlassian Floodlight Controller before 1.2 allows remote attackers to cause a denial of service (NULL pointer dereference and thread crash) via a state manipulation attack.
network
high complexity
atlassian CWE-476
5.9
2018-02-15 CVE-2017-12545 NULL Pointer Dereference vulnerability in HP System Management Homepage
A remote denial of service vulnerability in HPE System Management Homepage for Windows and Linux version prior to v7.6.1 was found.
network
low complexity
hp CWE-476
7.5