PT-2022-13748 · Pesign+1 · Pesign+1

Pedro Sampaio · Published 2022-04-29 · Updated 2024-05-20 · CVE-2022-1249

Positive Technologies (AI Summary)

CVSS v3.1

3.3

Low

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions pesign (affected versions not specified)

Description A NULL pointer dereference flaw was found in pesign's cms set pw data() function of the cms common.c file. The function fails to handle the NULL pwdata invocation from daemon.c, which leads to an explicit NULL dereference and crash on all attempts to daemonize pesign.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

ALT-PU-2023-4417

ALT-PU-2024-5107

ALT-PU-2024-7744

AZL-9655

CVE-2022-1249

Affected Products

Alt Linux

Pesign

References · 9

• https://cve.org/CVERecord?id=CVE-2022-1249 · Security Note
• https://ubuntu.com/security/CVE-2022-1249 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-1249 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-1249 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-9655 · Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2065771 · Patch
• https://osv.dev/vulnerability/CVE-2022-1249 · Vendor Advisory
• https://github.com/rhboot/pesign/pull/79 · Note
• https://t.me/cibsecurity/41665 · Telegram Post