CWE-476
5,846 CVEs • Abstraction: Base • Likelihood of Exploit: Medium
NULL Pointer Dereference
The product dereferences a pointer that it expects to be valid but is NULL.
CVEs (5,846)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
The Q.931 dissector in Ethereal before 0.10.0, and Tethereal, allows remote attackers to cause a denial of service (crash) via a malformed Q.931, which triggers a null dereference. |
xchat 2.0.6 allows remote attackers to cause a denial of service (crash) via a passive DCC request with an invalid ID number, which causes a null dereference. |
SkyStream EMR5000 1.16 through 1.18 does not drop packets or disable the Ethernet interface when the buffers are full, which allows remote attackers to cause a denial of service (null pointer exception and kernel panic)...Show more |
2Debian Ethereal2Debian Linux EtherealApr 16, 2026 Jun 18, 2002 N/A· v4 7.5 HIGH· v3 7.5 HIGH· v2 SMB dissector in Ethereal 0.9.3 and earlier allows remote attackers to cause a denial of service (crash) or execute arbitrary code via malformed packets that cause Ethereal to dereference a NULL pointer. |
The uipc system calls (uipc_syscalls.c) in OpenBSD 2.9 and 3.0 provide user mode return instead of versus rval kernel mode values to the fdrelease function, which allows local users to cause a denial of service and trigg...Show more |
3Bsdi FreebsdOpenbsd3Bsd Os FreebsdOpenbsdApr 16, 2026 Nov 4, 1998 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 IP fragmentation denial of service in FreeBSD allows a remote attacker to cause a crash. |