Falhas do tipo CWE-476

2.328 resultados

Desreferenciação de ponteiro nulo autenticado

O software permite que um usuário autenticado force a desreferenciação de um ponteiro ou referência nula, tipicamente ao passar valores inesperados ou inválidos a uma função. O aplicativo não valida adequadamente a entrada antes de usá-la, causando falha (crash) ou comportamento indefinido que pode levar a negação de serviço.

Exemplo

Um painel administrativo aceita um ID de usuário para deletar, mas não verifica se esse ID existe no banco antes de acessar seus atributos. Um admin autenticado passa ID=0 ou um valor que não corresponde a nenhum registro, e o código tenta acessar propriedades de um objeto nulo, derrubando a aplicação.

Como mitigar

Sempre valide e verifique que referências/ponteiros são válidos antes de desreferenciar: teste se o objeto existe, se o ID é válido e se está dentro do escopo esperado. Use assertions em desenvolvimento e tratamento de exceções robusto em produção para falhas inesperadas.

CVE-2020-8569MEDIUMKubernetes CSI snapshot-controller DoSEPSS 2.3%CVE-2018-0305—A vulnerability in the Cisco Fabric Services component of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remotEPSS 2.3%CVE-2011-1985HIGHwin32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SEPSS 2.3%CVE-2007-0342HIGHWebCore in Apple WebKit build 18794 allows remote attackers to cause a denial of service (null dereference and application crash) via a TD eEPSS 2.3%CVE-2020-13575HIGHA denial-of-service vulnerability exists in the WS-Addressing plugin functionality of Genivia gSOAP 2.8.107. A specially crafted SOAP requesEPSS 2.3%CVE-2018-16852MEDIUMSamba from version 4.9.0 and before version 4.9.3 is vulnerable to a NULL pointer de-reference. During the processing of an DNS zone in the EPSS 2.2%CVE-2020-25692—A NULL pointer dereference was found in OpenLDAP server and was fixed in openldap 2.4.55, during a request for renaming RDNs. An unauthenticEPSS 2.2%CVE-2021-39853MEDIUMAdobe Acrobat Reader DC Null Pointer Dereference Could Lead To Application Denial-of-ServiceEPSS 2.2%CVE-2021-3671—A null pointer de-reference was found in the way samba kerberos server handled missing sname in TGS-REQ (Ticket Granting Server - Request). EPSS 2.2%CVE-2016-9572MEDIUMA NULL pointer dereference flaw was found in the way openjpeg 2.1.2 decoded certain input images. Due to a logic error in the code responsibEPSS 2.2%CVE-2024-26183MEDIUMWindows Kerberos Denial of Service VulnerabilityEPSS 2.2%CVE-2024-38072HIGHWindows Remote Desktop Licensing Service Denial of Service VulnerabilityEPSS 2.2%CVE-1999-0052HIGHIP fragmentation denial of service in FreeBSD allows a remote attacker to cause a crash.EPSS 2.1%CVE-2025-60335HIGHA NULL pointer dereference in the main function of TOTOLINK N600R v4.3.0cu.7866_B20220506 allows attackers to cause a Denial of Service (DoSEPSS 2.1%CVE-2019-14847MEDIUMA flaw was found in samba 4.0.0 before samba 4.9.15 and samba 4.10.x before 4.10.10. An attacker can crash AD DC LDAP server via dirsync resEPSS 2.1%CVE-2023-21586MEDIUMAcrobat Reader | NULL Pointer Dereference (CWE-476)EPSS 2.1%CVE-2024-21356MEDIUMWindows Lightweight Directory Access Protocol (LDAP) Denial of Service VulnerabilityEPSS 2.1%CVE-2021-43016MEDIUMAdobe InCopy NULL Pointer Dereference Application Denial of ServiceEPSS 2.1%CVE-2019-5055HIGHAn exploitable denial-of-service vulnerability exists in the Host Access Point Daemon (hostapd) on the NETGEAR N300 (WNR2000v5 with FirmwareEPSS 2.0%CVE-2023-21757HIGHWindows Layer 2 Tunneling Protocol (L2TP) Denial of Service VulnerabilityEPSS 2.0%