CWE-626: Null Byte Interaction Error (Poison Null Byte)
The product does not properly handle null bytes or NUL characters when passing data between different representations or components.
A kind of CWE-147 Improper Neutralization of Input Terminators.
From the CWE List. © The MITRE Corporation.
Newest
-
libhttp-parser-xs-perlDebian,perl-HTTP-Parser-XSopenSUSE +1 more HTTP::Parser::XS versions before 0.18 for Perl truncate PATH_INFO at an encoded NUL byte in parse_http_request 9.1 Critical - netty Netty: MQTT Topic Name and Client ID Validation Bypass 3.5 Low
- netty Netty before 4.2.16.Final SOCKS Proxy Null Byte Injection 6.3 Medium
- gnu gnutls, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +36 more +38 more Gnutls: gnutls: authentication bypass via nul character in username 7.1 High
- axios Axios: Null Byte Injection via Reverse-Encoding in AxiosURLSearchParams 3.7 Low
- netty, red hat cryostat 4 on rhel 9, openshift serverless +28 more +30 more Netty: DNS Codec Input Validation Bypass in Netty (Encoder + Decoder) 7.5 High
- [unknown] kernel A stack information leak flaw was found in s390/s390x in the Linux kernel’s memory manager... 4.4 Medium
- netgear ac1200, ac1200 r6220 firmware +1 more This vulnerability allows network-adjacent attackers to bypass authentication on affected... 9.4 Critical
- facebook hhvm Various APC functions accept keys containing null bytes as input, leading to premature truncation... 9.8 Critical