Juniper Junos OS Vulnerability (JSA69513)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA69513 advisory. - An Access of Uninitialized Pointer vulnerability in the SIP ALG of Juniper Networks Junos OS allows an unauthenticated network-based attacker to cause a Denial of Service...

PT-2023-7051

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the p9pdu vreadf function in the net/9p/protocol.c module of the Linux kernel, which is associated with the use of an uninitialized pointer. Exploitation of this...

[slackware-security] krb5

New krb5 packages are available for Slackware 15.0 and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/krb5-1.19.2-i586-4slack15.0.txz: Rebuilt. Fix potential uninitialized pointer free in kadm5 XDR parsing. For more information, see:...

Slackware Linux 15.0 / current krb5 Vulnerability (SSA:2023-193-01)

The version of krb5 installed on the remote host is prior to 1.19.2 / 1.21.1. It is, therefore, affected by a vulnerability as referenced in the SSA:2023-193-01 advisory. - lib/kadm5/kadmrpcxdr.c in MIT Kerberos 5 aka krb5 before 1.20.2 and 1.21.x before 1.21.1 frees an uninitialized pointer. A...

Advisory ROSA-SA-2023-2188

Software: pure-ftpd 1.0.51 OS: ROSA-CHROME packageevrstring: pure-ftpd-1.0.51-1.src.rpm CVE-ID: CVE-2020-9274 BDU-ID: None CVE-Crit: HIGH CVE-DESC.: An uninitialized pointer vulnerability has been discovered in the linked list of diraliases. When the lookupaliasconst char alias or printaliasesvoi...

PT-2023-8967

Name of the Vulnerable Software and Affected Versions MIT Kerberos 5 aka krb5 versions 1.20.2 and earlier, 1.21.x versions prior to 1.21.1 Description The issue is related to the lib/kadm5/kadm rpc xdr.c file in the Kerberos implementation, where an uninitialized pointer is freed. This can be...

PT-2023-36801

Уязвимость функции wcd938x mbhc init модуля sound/soc/codecs/wcd938x.c поддержки звука SoC ядра операционной системы Linux связана с разыменованием неинициализированного указателя. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS when it contained a free of uninitialized pointer in the xlsxioreadsheetlistclose function. Exploiting this vulnerability is possible via a crafted XLSX file. Details Denial of Service DoS describes a family of...

Adaptive Substance Designer Code Execution

The vulnerability of the 3D model texturing program Adobe Substance Designer is related to the use of an uninitialized pointer. Exploiting this vulnerability could allow an attacker to execute arbitrary code during the analysis of SBS files...

Siemens Tecnomatix Plant Simulation Code Execution

The vulnerability of the software environment for simulation modeling of systems and processes in Siemens Tecnomatix Plant Simulation relates to access to an uninitialized pointer. Exploiting this vulnerability allows a perpetrator to execute arbitrary code using a specially crafted SPP file...

PT-2023-7050 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the drm mode setcrtc function in the drivers/gpu/drm/drm crtc.c module of the Linux kernel's DRM driver. It involves the use of an uninitialized pointer...

CVE-2023-34795

xlsxio v0.1.2 to v0.2.34 was discovered to contain a free of uninitialized pointer in the xlsxioreadsheetlistclose function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted XLSX file...

CVE-2023-34795

xlsxio v0.1.2 to v0.2.34 was discovered to contain a free of uninitialized pointer in the xlsxioreadsheetlistclose function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted XLSX file...

CVE-2023-34795

xlsxio v0.1.2 to v0.2.34 was discovered to contain a free of uninitialized pointer in the xlsxioreadsheetlistclose function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted XLSX file...

PT-2023-25009 · Xlsxio · Xlsxio

Name of the Vulnerable Software and Affected Versions: xlsxio versions 0.1.2 through 0.2.34 Description: The issue is related to a free of an uninitialized pointer in the xlsxioread sheetlist close function, which can be exploited by attackers to cause a Denial of Service DoS via a crafted XLSX...

xlsxio Resource Management Error Vulnerability

xlsxio is a cross-platform C library for reading values from and writing values to .xlsx files from the individual developer Brecht Sanders. A security vulnerability exists in xlsxio versions v0.1.2 through v0.2.34, which stems from the inclusion of an uninitialized pointer in the...

CVE-2023-34795

xlsxio v0.1.2 to v0.2.34 was discovered to contain a free of uninitialized pointer in the xlsxioreadsheetlistclose function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted XLSX file...

CVE-2023-21618

Adobe Substance 3D Designer version 12.4.1 and earlier is affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2023-21618

Adobe Substance 3D Designer version 12.4.1 and earlier is affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2023-21618 ZDI-CAN-20963: Adobe Substance 3D Designer SBS File Parsing Uninitialized Variable Remote Code Execution Vulnerability

Adobe Substance 3D Designer version 12.4.1 and earlier is affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...