CVE-2018-7872: Null Pointer Dereference
Published Mar 8, 2018
·Updated
An invalid memory address dereference was discovered in the function getName in libming 0.4.8 for CONSTANT16 data. The vulnerability causes a segmentation fault and application crash, which leads to denial of service.
Affected Software
2 affected components
Libming Libming=0.4.8
Debian Debian Linux=7.0
Event History
Mar 8, 2018
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Data Sourced
via NVD·06:29 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2018-7872?
CVE-2018-7872 has a high severity level due to its potential to cause a denial of service.
2
How do I fix CVE-2018-7872?
To fix CVE-2018-7872, upgrade to a patched version of libming or apply any available security patches.
3
What impact does CVE-2018-7872 have on affected systems?
CVE-2018-7872 can cause a segmentation fault, leading to application crashes and service disruption.
4
Which versions are affected by CVE-2018-7872?
CVE-2018-7872 specifically affects libming version 0.4.8.
5
Is CVE-2018-7872 exploitable remotely?
Yes, CVE-2018-7872 can potentially be exploited remotely if the application using libming is accessible over a network.