CVE-2022-1249

3.3 lowEPSS 0.2%

Low (3.3) in pesign project pesign. EPSS 0.2% chance of exploitation in the next 30 days.

A NULL pointer dereference flaw was found in pesign's cms_set_pw_data() function of the cms_common.c file. The function fails to handle the NULL pwdata invocation from daemon.c, which leads to an explicit NULL dereference and crash on all attempts to daemonize pesign.

Severity

CVSS 3.1

3.3 low

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 16% of CVEs (scores of 2026-10-31)
CWE: CWE-476
Published: 2022-04-29
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

pesign_project:pesign

References

https://bugzilla.redhat.com/show_bug.cgi?id=2065771
https://bugzilla.redhat.com/show_bug.cgi?id=2065771

Check your stack JSON