Skip to main content

NULL Pointer Dereference

CVE-2019-20919

Medium
4.7/10

Summary

An issue was discovered in the DBI module before 1.643 for Perl. The "hv_fetch()" documentation requires checking for NULL and the code does that. But, shortly thereafter, it calls "SvOK(profile)", causing a NULL pointer dereference.

  • HIGH
  • LOCAL
  • NONE
  • UNCHANGED
  • NONE
  • LOW
  • NONE
  • HIGH

CWE-476 - NULL Pointer Dereference

A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit.

References

Advisory Timeline

  • Published