CVE-2022-1249CWE-476
A NULL pointer dereference flaw was found in pesign's cms_set_pw_data() function of the cms_common.c file
published April 29, 2022
What it is
A NULL pointer dereference flaw was found in pesign's cms_set_pw_data() function of the cms_common.c file. The function fails to handle the NULL pwdata invocation from daemon.c, which leads to an explicit NULL dereference and crash on all attempts to daemonize pesign.
The record
Technical detail
- CVSS
- Not scored
- CVSS v4.0
- Not supplied
- EPSS
- 0.00247 · 15.1th percentile
- Weakness
- CWE-476 · NULL Pointer Dereference
- Published
- 2022-04-29T15:43Z
EPSS history
Timeline