Vulnerabilities > NULL Pointer Dereference

DATE CVE VULNERABILITY TITLE RISK
2017-05-30 CVE-2017-7502 NULL Pointer Dereference vulnerability in Mozilla Network Security Services
Null pointer dereference vulnerability in NSS since 3.24.0 was found when server receives empty SSLv2 messages resulting into denial of service by remote attacker.
network
low complexity
mozilla CWE-476
7.5
2017-05-28 CVE-2017-9250 NULL Pointer Dereference vulnerability in Jerryscript 1.0
The lexer_process_char_literal function in jerry-core/parser/js/js-lexer.c in JerryScript 1.0 does not skip memory allocation for empty strings, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via malformed JavaScript source code, related to the jmem_heap_free_block function.
network
low complexity
jerryscript CWE-476
7.5
2017-05-24 CVE-2017-9229 NULL Pointer Dereference vulnerability in multiple products
An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5.
network
low complexity
oniguruma-project ruby-lang php CWE-476
7.5
2017-05-24 CVE-2017-9217 NULL Pointer Dereference vulnerability in Systemd Project Systemd
systemd-resolved through 233 allows remote attackers to cause a denial of service (daemon crash) via a crafted DNS response with an empty question section.
network
low complexity
systemd-project CWE-476
7.5
2017-05-24 CVE-2017-9216 NULL Pointer Dereference vulnerability in multiple products
libjbig2dec.a in Artifex jbig2dec 0.13, as used in MuPDF and Ghostscript, has a NULL pointer dereference in the jbig2_huffman_get function in jbig2_huffman.c.
network
low complexity
artifex debian CWE-476
6.5
2017-05-23 CVE-2017-9211 NULL Pointer Dereference vulnerability in Linux Kernel
The crypto_skcipher_init_tfm function in crypto/skcipher.c in the Linux kernel through 4.11.2 relies on a setkey function that lacks a key-size check, which allows local users to cause a denial of service (NULL pointer dereference) via a crafted application.
local
low complexity
linux CWE-476
5.5
2017-05-23 CVE-2015-4054 NULL Pointer Dereference vulnerability in Pgbouncer
PgBouncer before 1.5.5 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) by sending a password packet before a startup packet.
network
low complexity
pgbouncer CWE-476
7.5
2017-05-22 CVE-2017-4916 NULL Pointer Dereference vulnerability in VMWare Workstation Player and Workstation PRO
VMware Workstation Pro/Player contains a NULL pointer dereference vulnerability that exists in the vstor2 driver.
network
low complexity
vmware CWE-476
6.5
2017-05-19 CVE-2017-7475 NULL Pointer Dereference vulnerability in Cairographics Cairo 1.15.4
Cairo version 1.15.4 is vulnerable to a NULL pointer dereference related to the FT_Load_Glyph and FT_Render_Glyph resulting in an application crash.
local
low complexity
cairographics CWE-476
5.5
2017-05-19 CVE-2017-9083 NULL Pointer Dereference vulnerability in Freedesktop Poppler 0.54.0
poppler 0.54.0, as used in Evince and other products, has a NULL pointer dereference in the JPXStream::readUByte function in JPXStream.cc.
network
low complexity
freedesktop CWE-476
6.5