VYPR

CWE-476

NULL Pointer Dereference

BaseStableLikelihood: Medium

Description

The product dereferences a pointer that it expects to be valid but is NULL.

Hierarchy (View 1000)

Children

none

CVEs mapped to this weakness (5,530)

page 51 of 277
  • CVE-2021-25903HigJan 26, 2021
    risk 0.49cvss 7.5epss 0.01

    An issue was discovered in the cache crate through 2021-01-01 for Rust. A raw pointer is dereferenced.

  • CVE-2021-0206HigJan 15, 2021
    risk 0.49cvss 7.5epss 0.01

    A NULL Pointer Dereference vulnerability in Juniper Networks Junos OS allows an attacker to send a specific packet causing the packet forwarding engine (PFE) to crash and restart, resulting in a Denial of Service (DoS). By continuously sending these specific packets, an attacker…

  • CVE-2020-27279HigJan 6, 2021
    risk 0.49cvss 7.5epss 0.02

    A NULL pointer deference vulnerability has been identified in the protocol converter. An attacker could send a specially crafted packet that could reboot the device running Crimson 3.1 (Build versions prior to 3119.001).

  • CVE-2020-29652HigDec 17, 2020
    risk 0.49cvss 7.5epss 0.03

    A nil pointer dereference in the golang.org/x/crypto/ssh component through v0.0.0-20201203163018-be400aefbc4c for Go allows remote attackers to cause a denial of service against SSH servers.

  • CVE-2020-25692HigDec 8, 2020
    risk 0.49cvss 7.5epss 0.02

    A NULL pointer dereference was found in OpenLDAP server and was fixed in openldap 2.4.55, during a request for renaming RDNs. An unauthenticated attacker could remotely crash the slapd process by sending a specially crafted request, causing a Denial of Service.

  • CVE-2020-25465HigDec 4, 2020
    risk 0.49cvss 7.5epss 0.02

    Null Pointer Dereference. in xObjectBindingFromExpression at moddable/xs/sources/xsSyntaxical.c:3419 in Moddable SDK before OS200908 causes a denial of service (SEGV).

  • CVE-2019-12412HigNov 19, 2020
    risk 0.49cvss 7.5epss 0.04

    A flaw in the libapreq2 v2.07 to v2.13 multipart parser can deference a null pointer leading to a process crash. A remote attacker could send a request causing a process crash which could lead to a denial of service attack.

  • CVE-2020-28345HigNov 8, 2020
    risk 0.49cvss 7.5epss 0.00

    An issue was discovered on LG mobile devices with Android OS 10 software. The Wi-Fi subsystem may crash because of the lack of a NULL parameter check. The LG ID is LVE-SMP-200025 (November 2020).

  • CVE-2020-28344HigNov 8, 2020
    risk 0.49cvss 7.5epss 0.00

    An issue was discovered on LG mobile devices with Android OS 8.0, 8.1, 9.0, and 10 software. System services may crash because of the lack of a NULL parameter check. The LG ID is LVE-SMP-200024 (November 2020).

  • CVE-2020-5646HigNov 6, 2020
    risk 0.49cvss 7.5epss 0.04

    NULL pointer dereferences vulnerability in TCP/IP function included in the firmware of GT14 Model of GOT 1000 series (GT1455-QTBDE CoreOS version "05.65.00.BD" and earlier, GT1450-QMBDE CoreOS version "05.65.00.BD" and earlier, GT1450-QLBDE CoreOS version "05.65.00.BD" and…

  • CVE-2020-5655HigNov 2, 2020
    risk 0.49cvss 7.5epss 0.03

    NULL pointer dereferences vulnerability in TCP/IP function included in the firmware of MELSEC iQ-R series (RJ71EIP91 EtherNet/IP Network Interface Module First 2 digits of serial number are '02' or before, RJ71PN92 PROFINET IO Controller Module First 2 digits of serial number…

  • CVE-2019-8588HigOct 27, 2020
    risk 0.49cvss 7.5epss 0.02

    A null pointer dereference was addressed with improved input validation. This issue is fixed in AirPort Base Station Firmware Update 7.8.1, AirPort Base Station Firmware Update 7.9.1. A remote attacker may be able to cause a system denial of service.

  • CVE-2020-25821HigSep 23, 2020
    risk 0.49cvss 7.5epss 0.01

    peg-markdown 0.4.14 has a NULL pointer dereference in process_raw_blocks in markdown_lib.c. NOTE: This vulnerability only affects products that are no longer supported by the maintainer

  • CVE-2020-11158HigSep 8, 2020
    risk 0.49cvss 7.5epss 0.01

    u'Null pointer dereference in HP OfficeJet Pro 8210 jbig2 filter due to lack of check of PDF font array leads to denial of service' in IPS PDF releases prior to IPS System 2020.2

  • CVE-2020-24659HigSep 4, 2020
    risk 0.49cvss 7.5epss 0.04

    An issue was discovered in GnuTLS before 3.6.15. A server can trigger a NULL pointer dereference in a TLS 1.3 client if a no_renegotiation alert is sent with unexpected timing, and then an invalid second handshake occurs. The crash happens in the application's error handling…

  • CVE-2020-7711HigAug 23, 2020
    risk 0.49cvss 7.5epss 0.02

    This affects all versions of package github.com/russellhaering/goxmldsig. There is a crash on nil-pointer dereference caused by sending malformed XML signatures.

  • CVE-2020-5762HigJul 29, 2020
    risk 0.49cvss 7.5epss 0.03

    Grandstream HT800 series firmware version 1.0.17.5 and below is vulnerable to a denial of service attack against the TR-069 service. An unauthenticated remote attacker can stop the service due to a NULL pointer dereference in the TR-069 service. This condition is triggered due…

  • CVE-2020-12845HigJul 27, 2020
    risk 0.49cvss 7.5epss 0.03

    Cherokee 0.4.27 to 1.2.104 is affected by a denial of service due to a NULL pointer dereferences. A remote unauthenticated attacker can crash the server by sending an HTTP request to protected resources using a malformed Authorization header that is mishandled during a…

  • CVE-2020-3481HigJul 20, 2020
    risk 0.49cvss 7.5epss 0.03

    A vulnerability in the EGG archive parsing module in Clam AntiVirus (ClamAV) Software versions 0.102.0 - 0.102.3 could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to a null pointer dereference.…

  • CVE-2020-15689HigJul 13, 2020
    risk 0.49cvss 7.5epss 0.01

    Appweb before 7.2.2 and 8.x before 8.1.0, when built with CGI support, mishandles an HTTP request with a Range header that lacks an exact range. This may result in a NULL pointer dereference and cause a denial of service.