Vulnerabilities > NULL Pointer Dereference

DATE CVE VULNERABILITY TITLE RISK
2017-12-03 CVE-2017-8820 NULL Pointer Dereference vulnerability in multiple products
In Tor before 0.2.5.16, 0.2.6 through 0.2.8 before 0.2.8.17, 0.2.9 before 0.2.9.14, 0.3.0 before 0.3.0.13, and 0.3.1 before 0.3.1.9, remote attackers can cause a denial of service (NULL pointer dereference and application crash) against directory authorities via a malformed descriptor, aka TROVE-2017-010.
network
low complexity
tor-project debian CWE-476
7.5
2017-11-30 CVE-2017-15116 NULL Pointer Dereference vulnerability in multiple products
The rngapi_reset function in crypto/rng.c in the Linux kernel before 4.2 allows attackers to cause a denial of service (NULL pointer dereference).
local
low complexity
linux redhat CWE-476
5.5
2017-11-29 CVE-2017-17050 NULL Pointer Dereference vulnerability in Tgsoft Vir.It Explorer 8.5.42
TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via a NULL value in a 0x82730020 DeviceIoControl request to \\.\Viragtlt.
local
low complexity
tgsoft CWE-476
7.8
2017-11-29 CVE-2017-17049 NULL Pointer Dereference vulnerability in Tgsoft Vir.It Explorer 8.5.42
TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via a NULL value in a 0x82730010 DeviceIoControl request to \\.\Viragtlt.
local
low complexity
tgsoft CWE-476
7.8
2017-11-26 CVE-2017-16948 NULL Pointer Dereference vulnerability in Tgsoft Vir.It Explorer 8.5.42
TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via a NULL value in a 0x82730008 DeviceIoControl request to \\.\Viragtlt.
local
low complexity
tgsoft CWE-476
7.8
2017-11-22 CVE-2017-12193 NULL Pointer Dereference vulnerability in Linux Kernel
The assoc_array_insert_into_terminal_node function in lib/assoc_array.c in the Linux kernel before 4.13.11 mishandles node splitting, which allows local users to cause a denial of service (NULL pointer dereference and panic) via a crafted application, as demonstrated by the keyring key type, and key addition and link creation operations.
local
low complexity
linux CWE-476
5.5
2017-11-18 CVE-2017-16883 NULL Pointer Dereference vulnerability in Libming
The outputSWF_TEXT_RECORD function in util/outputscript.c in libming <= 0.4.8 is vulnerable to a NULL pointer dereference, which may allow attackers to cause a denial of service via a crafted swf file.
network
low complexity
libming CWE-476
6.5
2017-11-17 CVE-2017-4938 NULL Pointer Dereference vulnerability in VMWare Fusion and Workstation
VMware Workstation (12.x before 12.5.8) and Fusion (8.x before 8.5.9) contain a guest RPC NULL pointer dereference vulnerability.
local
low complexity
vmware CWE-476
6.5
2017-11-17 CVE-2017-16868 NULL Pointer Dereference vulnerability in Swftools 0.9.2
In SWFTools 0.9.2, the wav_convert2mono function in lib/wav.c does not properly restrict a multiplication within a malloc call, which allows remote attackers to cause a denial of service (integer overflow and NULL pointer dereference) via a crafted WAV file.
local
low complexity
swftools CWE-476
5.5
2017-11-17 CVE-2017-1000200 NULL Pointer Dereference vulnerability in Tcmu-Runner Project Tcmu-Runner
tcmu-runner version 1.0.5 to 1.2.0 is vulnerable to a dbus triggered NULL pointer dereference in the tcmu-runner daemon's on_unregister_handler() function resulting in denial of service
network
low complexity
tcmu-runner-project CWE-476
7.5