目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1310 元

100%
请我们喝杯咖啡

CWE-476 空指针解引用 类漏洞列表 1187

CWE-476 空指针解引用 类弱点 1187 条 CVE 漏洞汇总，含 AI 中文分析。

CWE-476空指针解引用属于内存安全类漏洞，指程序在指针为NULL时仍尝试访问其指向的内存。攻击者通常通过构造特定输入触发空指针，导致程序崩溃引发拒绝服务，或在特定架构下利用该异常改变执行流以执行恶意代码。开发者应避免在解引用前未验证指针有效性，通过添加空值检查、使用静态分析工具检测潜在风险，并确保代码逻辑能妥善处理无效指针情况，从而从根本上消除隐患。

MITRE CWE 官方描述
CWE：CWE-476 NULL Pointer Dereference（空指针解引用） 英文：The product dereferences a pointer that it expects to be valid but is NULL. 译文：产品解引用了一个它预期为有效但实际上为 NULL 的指针。
常见影响 (2)
AvailabilityDoS: Crash, Exit, or Restart
NULL pointer dereferences usually result in the failure of the process unless exception handling (on some platforms) is available and implemented. Even when exception handling is being used, it can still be very difficult to return the software to a safe state of operation.
Integrity, ConfidentialityExecute Unauthorized Code or Commands, Read Memory, Modify Memory
In rare circumstances, when NULL is equivalent to the 0x0 memory address and privileged code can access it, then writing or reading memory is possible, which may lead to code execution.
缓解措施 (5)
ImplementationFor any pointers that could have been modified or provided from a function that can return NULL, check the pointer for NULL before use. When working with a multithreaded or otherwise asynchronous environment, ensure that proper locking APIs are used to lock before the check, and unlock when it has finished [REF-1484].
RequirementsSelect a programming language that is not susceptible to these issues.
ImplementationCheck the results of all functions that return a value and verify that the value is non-null before acting upon it.
Effectiveness: Moderate
Architecture and DesignIdentify all variables and data stores that receive information from external sources, and apply input validation to make sure that they are only initialized to expected values.
ImplementationExplicitly initialize all variables and other data stores, either during declaration or just before the first usage.
代码示例 (2)
This example takes an IP address from a user, verifies that it is well formed and then looks up the hostname and copies it into a buffer.
void host_lookup(char *user_supplied_addr){ struct hostent *hp; in_addr_t *addr; char hostname[64]; in_addr_t inet_addr(const char *cp); /*routine that ensures user_supplied_addr is in the right format for conversion */ validate_addr_form(user_supplied_addr); addr = inet_addr(user_supplied_addr); hp = gethostbyaddr( addr, sizeof(struct in_addr), AF_INET); strcpy(hostname, hp->h_name); }
Bad · C
In the following code, the programmer assumes that the system always has a property named "cmd" defined. If an attacker can control the program's environment so that "cmd" is not defined, the program throws a NULL pointer exception when it attempts to call the trim() method.
String cmd = System.getProperty("cmd"); cmd = cmd.trim();
Bad · Java
CVE ID标题CVSS风险等级Published
CVE-2019-14872 Red Hat newlib libc library 代码问题漏洞 — newlib 6.5 -2020-03-19
CVE-2019-14871 Red Hat Newlib 代码问题漏洞 — newlib 6.5 -2020-03-18
CVE-2020-7062 PHP 代码问题漏洞 — PHP 7.5 High2020-02-27
CVE-2019-3995 ELOG 代码问题漏洞 — ELOG 7.5 -2019-12-17
CVE-2019-10207 Linux kernel 安全漏洞 — kernel 5.5 -2019-11-25
CVE-2019-14847 Samba 代码问题漏洞 — samba 6.5 -2019-11-06
CVE-2019-5010 Python X509证书解析器代码问题漏洞 — Python 7.5 -2019-10-31
CVE-2019-15680 TightVNC 代码问题漏洞 — TightVNC 7.5 -2019-10-29
CVE-2019-12654 Cisco IOS和IOS XE 代码问题漏洞 — Cisco IOS 15.0(1)XA2 7.5 -2019-09-25
CVE-2019-12647 Cisco IOS和IOS XE 代码问题漏洞 — Cisco IOS 7.5 -2019-09-25
CVE-2019-13542 3S-Smart Software Solutions CODESYS Control 代码问题漏洞 — 3S-Smart Software Solutions GmbH CODESYS V3 OPC UA Server 6.5 -2019-09-17
CVE-2019-5055 NETGEAR N300 代码问题漏洞 — N300 WNR2000v5 7.5 -2019-09-11
CVE-2019-5054 NETGEAR N300 代码问题漏洞 — N300 WNR2000v5 7.5 -2019-09-11
CVE-2019-1900 Cisco UCS C-Series Servers和UCS S-Series Servers Integrated Management Controller 代码问题漏洞 — Cisco Unified Computing System (Management Software) 7.5 -2019-08-21
CVE-2019-10140 Linux kernel 代码问题漏洞 — kernel: 5.5 -2019-08-15
CVE-2018-16871 Linux kernel 代码问题漏洞 — kernel: 7.5 -2019-07-30
CVE-2019-1010162 Jsish 代码问题漏洞 — jsi 6.5 -2019-07-23
CVE-2019-1922 Cisco IP Phone 8800 Series和Cisco IP Phone 7800 Series 代码问题漏洞 — Cisco IP Phone 8800 Series Software 7.5 -2019-07-06
CVE-2017-7655 Eclipse Mosquitto 代码问题漏洞 — Eclipse Mosquitto 7.5 -2019-03-27
CVE-2019-3840 Red Hat libvirt 代码问题漏洞 — libvirt 6.3 -2019-03-27
CVE-2018-6343 Facebook Proxygen 安全漏洞 — Proxygen 7.5 -2018-12-31
CVE-2018-16851 Samba AD DC LDAP服务器安全漏洞 — samba 6.5 -2018-11-28
CVE-2018-16852 Samba 安全漏洞 — samba 4.4 -2018-11-28
CVE-2018-14646 Linux kernel 安全漏洞 — kernel: 5.5 -2018-11-26
CVE-2018-12469 Micro Focus Enterprise Developer and Enterprise Server 安全漏洞 — Micro Focus Enterprise Developer, Micro Focus Enterprise Server 7.5 -2018-10-12
CVE-2018-10914 Red Hat glusterfs服务器代码问题漏洞 — glusterfs 6.5 -2018-09-04
CVE-2017-2635 Red Hat Libvirt 安全漏洞 — libvirt 6.5 -2018-08-22
CVE-2018-10918 Samba 代码问题漏洞 — samba 6.5 -2018-08-22
CVE-2016-9572 OpenJPEG 安全漏洞 — openjpeg 6.5 -2018-08-01
CVE-2016-8626 Red Hat Ceph 输入验证漏洞 — Ceph 6.5 -2018-07-31

CWE-476（空指针解引用） 是常见的弱点类别，本平台收录该类弱点关联的 1187 条 CVE 漏洞。