CVE-2018-10775 - bibutils: NULL pointer dereference in _fields_add function in fields.c in libbibcore.a

Back Back to CVE browser

MEDIUM

bibutils: NULL pointer dereference in _fields_add function in fields.c in libbibcore.a

Published May 7, 2018

6.5

MEDIUM

CVSS 3.0

EPSS 1.66%

Description

NULL pointer dereference in the _fields_add function in fields.c in libbibcore.a in bibutils through 6.2 allows remote attackers to cause a denial of service (application crash), as demonstrated by end2xml.

Affected products

Red Hat Enterprise Linux 8

bibutils

Not affected
Red Hat Enterprise Linux 8

ghc-hs-bibutils

Not affected

Product	Package	State	Advisory
Red Hat Enterprise Linux 8	bibutils	Not affected	n/a
Red Hat Enterprise Linux 8	ghc-hs-bibutils	Not affected	n/a

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-476

NULL Pointer Dereference

References (5)

https://access.redhat.com/security/cve/CVE-2018-10775
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1577280
Issue Tracking
https://drive.google.com/drive/u/1/folders/1qtq272m7jJaEUPGFLvyXmIl5zNJv7rd1
x_refsource_MISCExploitThird Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2018-10775
https://www.cve.org/CVERecord?id=CVE-2018-10775

Link	Providers	Tags
https://access.redhat.com/security/cve/CVE-2018-10775		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1577280		Issue Tracking
https://drive.google.com/drive/u/1/folders/1qtq272m7jJaEUPGFLvyXmIl5zNJv7rd1		x_refsource_MISCExploitThird Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2018-10775
https://www.cve.org/CVERecord?id=CVE-2018-10775