CWE-476: NULL Pointer Dereference vulnerabilities

A null-dereference vulnerability involving parsing requests specifying invalid protocols can cause the application to crash or potentially result in other undesirable effects. This issue affects Facebook Thrift from v2024.09.09.00 until v2024.09.23.00.

Windows Networking Denial of Service Vulnerability

Windows Networking Denial of Service Vulnerability

CVE-2024-42491 is a vulnerability in Asterisk PBX prior to versions 18.24.3, 20.9.3, 21.4.3, and certain certified versions. When Asterisk sends a SIP request to a URI with a host starting with `.1` or `[.1]` while the res_resolver_unbound module is loaded, it crashes with a segmentation fault. The issue is fixed in the specified versions. Workarounds include disabling the res_resolver_unbound module or setting rewrite_contact to yes on all PJSIP endpoints, though these may not suit all configurations.

CVE-2024-8235 is a vulnerability in libvirt where a code refactor introduced a corner case causing a NULL pointer dereference on platforms that allocate 0 bytes of memory as a NULL pointer. This flaw can cause the virtinterfaced daemon to crash when clients connect to the read-only socket and invoke certain APIs. The issue affects libvirt version 10.4.0 and has a CVSS score of 6.2, indicating a medium severity impact focused on availability.

CVE-2024-7006 is a null pointer dereference vulnerability in the libtiff library, specifically in the tif_dirinfo.c component. This flaw can cause an application using libtiff to crash due to a segmentation fault, resulting in a denial of service condition. The issue arises when certain conditions trigger memory allocation failures, such as restricted heap space or fault injection.

A vulnerability has been found in Dahua products. Attackers can send carefully crafted data packets to the interface with vulnerabilities, causing the device to crash.

null pointer dereference in mod_proxy in Apache HTTP Server 2.4.59 and earlier allows an attacker to crash the server via a malicious request. Users are recommended to upgrade to version 2.4.60, which fixes this issue.

nscd: Null pointer crashes after notfound response If the Name Service Cache Daemon's (nscd) cache fails to add a not-found netgroup response to the cache, the client request can result in a null pointer dereference. This flaw was introduced in glibc 2.15 when the cache was added to nscd. This vulnerability is only present in the nscd binary.

CVE-2024-27041 is a medium severity vulnerability in the Linux kernel's AMD GPU display driver. It addresses improper NULL pointer checks for the 'adev->dm.dc' pointer in the amdgpu_dm_fini() function. The flaw could lead to a NULL pointer dereference, causing a denial of service (kernel crash). The issue was identified through static analysis and fixed by consolidating and improving NULL checks before certain function calls.

FreeRDP versions prior to 3.5.1 contain a NULL pointer dereference vulnerability that can cause the client to crash. This issue is addressed in version 3.5.1. No workarounds are currently known.

A packet processing mechanism in Palo Alto Networks PAN-OS software enables a remote attacker to reboot hardware-based firewalls. Repeated attacks eventually cause the firewall to enter maintenance mode, which requires manual intervention to bring the firewall back online. This affects the following hardware firewall models: - PA-5400 Series firewalls - PA-7000 Series firewalls

CVE-2024-26661 is a vulnerability in the Linux kernel's AMD display driver where a NULL pointer dereference could occur due to missing validation of a timing generator pointer in the dcn21_set_pipe() function. This flaw could lead to a denial of service (system crash) if exploited.

Envoy is a high-performance edge/middle/service proxy. When PPv2 is enabled both on a listener and subsequent cluster, the Envoy instance will segfault when attempting to craft the upstream PPv2 header. This occurs when the downstream request has a command type of LOCAL and does not have the protocol block. This issue has been addressed in releases 1.29.1, 1.28.1, 1.27.3, and 1.26.7. Users are advised to upgrade. There are no known workarounds for this vulnerability.

Vba32 Antivirus v3.36.0 is vulnerable to a Denial of Service vulnerability by triggering the 0x2220A7 IOCTL code of the Vba32m64.sys driver.

NULL Pointer Dereference vulnerability in Linux Linux kernel kernel on Linux, x86, ARM (net, bluetooth modules) allows Overflow Buffers. This vulnerability is associated with program files /net/bluetooth/rfcomm/core.C. This issue affects Linux kernel: v2.6.12-rc2.

A vulnerability has been identified in JT2Go (All versions < V14.3.0.6), Teamcenter Visualization V13.3 (All versions < V13.3.0.13), Teamcenter Visualization V14.1 (All versions < V14.1.0.12), Teamcenter Visualization V14.2 (All versions < V14.2.0.9), Teamcenter Visualization V14.3 (All versions < V14.3.0.6). The affected applications contain a null pointer dereference vulnerability while parsing specially crafted CGM files. An attacker could leverage this vulnerability to crash the application causing denial of service condition.

Nullptr dereference in paddle.crop in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service.

IEEE 1609.2 dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 allows denial of service via packet injection or crafted capture file

The ACEManager component of ALEOS 4.16 and earlier does not adequately perform input sanitization during authentication, which could potentially result in a Denial of Service (DoS) condition for ACEManager without impairing other router functions. ACEManager recovers from the DoS condition by restarting within ten seconds of becoming unavailable.