PT-2024-40306 · Crates.Io · Xous

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned, so the information cannot be determined. Description: The issue concerns the functions as slice and as slice mut being considered unsound. This is because any pointer, regardless of its bit...

Unsound usages of `core::slice::from_raw_parts_mut`

The library breaks the safety assumptions when using unsafe API slice::fromrawpartsmut. The pointer passed to fromrawpartsmut is misaligned by casting u8 to u16 raw pointer directly, which is unsound. The bug is patched by using alignoffset, which could make sure the memory address is aligned to ...

CVE-2017-12678

In TagLib 1.11.1, the rebuildAggregateFrames function in id3v2framefactory.cpp has a pointer to cast vulnerability, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted audio file...

Microsoft SQL Server 2012 SP3 11.0.6020.0 through 11.0.6247.0 Multiple Privilege Escalation (3194721)

Binary data 9811.prm...

Microsoft SQL Server 2012 SP2 11.0.5058.0 through 11.0.5387.0 Multiple Privilege Escalation (3194719)

Binary data 9810.prm...

SQL RDBMS Engine Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in Microsoft SQL Server when it improperly handles pointer casting. An attacker could exploit the vulnerability if the attacker's credentials allow access to an affected SQL server database. An attacker who successfully exploited this vulnerability...

SQL RDBMS Engine Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in Microsoft SQL Server when it improperly handles pointer casting. An attacker could exploit the vulnerability if the attacker's credentials allow access to an affected SQL server database. An attacker who successfully exploited this vulnerability...

PT-2016-7266

Name of the Vulnerable Software and Affected Versions Microsoft SQL Server versions 2014 SP1 through 2016 Description The issue arises from improper handling of pointer casting, allowing remote authenticated users to gain elevated privileges. An attacker with access to an affected SQL server...

PT-2016-7270

Name of the Vulnerable Software and Affected Versions Microsoft SQL Server versions 2012 SP2 through 2012 SP3 Description The issue arises from improper handling of pointer casting, allowing remote authenticated users to gain elevated privileges. An attacker with access to an affected SQL server...

PT-2016-7265

Name of the Vulnerable Software and Affected Versions Microsoft SQL Server 2016 Description The issue arises from improper handling of pointer casting, allowing remote authenticated users to gain privileges. An attacker could exploit this by accessing an affected SQL server database, potentially...

PT-2015-2771

Name of the Vulnerable Software and Affected Versions Microsoft SQL Server 2008 SP3 and SP4, 2008 R2 SP2 and SP3, 2012 SP1 and SP2, and 2014 Description The issue is related to incorrect casting of pointers, which can be exploited by remote authenticated users to gain elevated privileges. This ca...