• 公告ID (KylinSec-SA-2022-1516)

摘要:

A NULL pointer dereference flaw was found in pesign s cms_set_pw_data() function of the cms_common.c file. The function fails to handle the NULL pwdata invocation from daemon.c, which leads to an explicit NULL dereference and crash on all attempts to daemonize pesign.

安全等级: Low

公告ID: KylinSec-SA-2022-1516

发布日期: 2022年6月2日

关联CVE: CVE-2022-1249  

  • 详细介绍

1. 漏洞描述

   

A NULL pointer dereference flaw was found in pesign s cms_set_pw_data() function of the cms_common.c file. The function fails to handle the NULL pwdata invocation from daemon.c, which leads to an explicit NULL dereference and crash on all attempts to daemonize pesign.

2. 影响范围

cve名称 产品 组件 是否受影响
CVE-2022-1249 KY3.4-4A pesign Unaffected
CVE-2022-1249 KY3.4-5A pesign Unaffected
CVE-2022-1249 KY3.5.1 pesign Unaffected

3. 影响组件

    无

4. 修复版本

    无

5. 修复方法

   无

6. 下载链接

    无
上一篇:KylinSec-SA-2022-1515 下一篇:KylinSec-SA-2022-1517