CVE-2022-1249

2022-04-2915:43:10

CWE-476

redhat

www.cve.org

cve-2022-1249

pesign

cms_set_pw_data

AI Score

4.1

Confidence

High

EPSS

Percentile

12.6%

JSON

A NULL pointer dereference flaw was found in pesign’s cms_set_pw_data() function of the cms_common.c file. The function fails to handle the NULL pwdata invocation from daemon.c, which leads to an explicit NULL dereference and crash on all attempts to daemonize pesign.

CNA Affected

[
  {
    "product": "pesign",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "pesign 115"
      }
    ]
  }
]

References

bugzilla.redhat.com/show_bug.cgi?id=2065771