Django REST framework

Lookup for vulnerabilities affecting packages.

Vulnerability_id VCID-atz9-w986-w7eb

Summary

NULL Pointer Dereference
A flaw was found in libpng 1.6.38. A crafted PNG image can lead to a segmentation fault and denial of service in `png_setup_paeth_row()` function.

Aliases

alias	CVE-2022-3857

Fixed_packages

url	pkg:conan/libpng@1.6.39
purl	pkg:conan/libpng@1.6.39
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:conan/libpng@1.6.39

Affected_packages

url pkg:conan/libpng@1.6.38

purl pkg:conan/libpng@1.6.38

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-atz9-w986-w7eb

resource_url http://public2.vulnerablecode.io/packages/pkg:conan/libpng@1.6.38

url pkg:nuget/libpng@1.6.38

purl pkg:nuget/libpng@1.6.38

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-atz9-w986-w7eb

resource_url http://public2.vulnerablecode.io/packages/pkg:nuget/libpng@1.6.38

References

reference_url	https://sourceforge.net/p/libpng/bugs/300/
reference_id
reference_type
scores
url	https://sourceforge.net/p/libpng/bugs/300/

reference_url	https://nvd.nist.gov/vuln/detail/CVE-2022-3857
reference_id	CVE-2022-3857
reference_type
scores
url	https://nvd.nist.gov/vuln/detail/CVE-2022-3857

Weaknesses

cwe_id	1035
name	OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description	Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.

cwe_id	476
name	NULL Pointer Dereference
description	A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit.

cwe_id	937
name	OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description	Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.

Exploits

Severity_range_score null

Exploitability null

Weighted_severity null

Risk_score null

Resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-atz9-w986-w7eb

Vulnerability Instance