Fallos del tipo CWE-476

2328 resultados

Desreferência de ponteiro nulo autenticada remota

A aplicação tenta acessar um objeto ou endereço de memória que não foi inicializado ou foi definido como nulo, sem verificar essa condição antes. Um atacante autenticado consegue provocar esse acesso inválido enviando dados malformados ou inesperados, causando crash ou comportamento indefinido.

Ejemplo

Um endpoint autenticado de API recebe um ID de usuário, faz uma busca no banco que retorna nulo (usuário não existe) e tenta acessar diretamente campos desse objeto nulo sem validação — resultando em erro 500 ou travamento da aplicação.

Cómo mitigar

Sempre verificar se um objeto é nulo antes de usá-lo; usar análise estática (linters, SAST) para detectar acessos potenciais a nulos; validar e tratar casos onde dados esperados podem estar ausentes, mesmo que o usuário esteja autenticado.

CVE-2017-7502—Null pointer dereference vulnerability in NSS since 3.24.0 was found when server receives empty SSLv2 messages resulting into denial of servEPSS 4.2%CVE-2023-32252HIGHSession null pointer dereference denial-of-service vulnerabilityEPSS 4.1%CVE-2023-32248HIGHTree connection null pointer dereference denial-of-service vulnerabilityEPSS 4.1%CVE-2021-44740LOWAdobe Acrobat Pro DC NULL Pointer Dereference could lead to Application-denial-of-serviceEPSS 3.6%CVE-2021-44741LOWAdobe Acrobat Pro DC NULL Pointer Dereference could lead to Application-denial-of-serviceEPSS 3.6%CVE-2020-7062HIGHNull Pointer Dereference in PHP Session Upload ProgressEPSS 3.6%CVE-2020-8859MEDIUMThis vulnerability allows remote attackers to create a denial-of-service condition on affected installations of ELOG Electronic Logbook 3.1.EPSS 3.6%CVE-2024-47586MEDIUMNULL Pointer Dereference vulnerability in SAP NetWeaver Application Server for ABAP and ABAP PlatformEPSS 3.5%CVE-2018-14404MEDIUMA NULL pointer dereference vulnerability exists in the xpath.c:xmlXPathCompOpEval() function of libxml2 through 2.9.8 when parsing an invaliEPSS 3.5%CVE-2021-3537—A vulnerability found in libxml2 in versions before 2.9.11 shows that it did not propagate errors while parsing XML mixed content, causing aEPSS 3.5%CVE-2018-18066HIGHsnmp_oid_compare in snmplib/snmp_api.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by an unauthenticated attackEPSS 3.5%CVE-2020-5762—Grandstream HT800 series firmware version 1.0.17.5 and below is vulnerable to a denial of service attack against the TR-069 service. An unauEPSS 3.4%CVE-2018-16851MEDIUMSamba from version 4.0.0 and before versions 4.7.12, 4.8.7, 4.9.3 is vulnerable to a denial of service. During the processing of an LDAP seaEPSS 3.3%CVE-2018-16852MEDIUMSamba from version 4.9.0 and before version 4.9.3 is vulnerable to a NULL pointer de-reference. During the processing of an DNS zone in the EPSS 3.2%CVE-2014-0757—Smart Software Solutions (3S) CoDeSys Runtime Toolkit NULL Pointer DereferenceEPSS 3.2%CVE-2004-0458HIGHmah-jong before 1.6.2 allows remote attackers to cause a denial of service (server crash) via a missing argument, which triggers a null poinEPSS 3.2%CVE-2020-3481HIGHClam AntiVirus (ClamAV) Software Null Pointer Dereference VulnerabilityEPSS 3.2%CVE-2017-9631—A Null Pointer Dereference issue was discovered in Schneider Electric Wonderware ArchestrA Logger, versions 2017.426.2307.1 and prior. The nEPSS 3.2%CVE-2024-0727MEDIUMPKCS12 Decoding crashesEPSS 3.2%CVE-2021-21702MEDIUMNull Dereference in SoapClientEPSS 3.2%