The vulnerabilities of OPC UA data transfer specification implementations in industrial networks, related to pointer dereferencing errors, allow attackers to trigger service failures.

The vulnerability of OPC UA data transmission implementations in industrial networks is related to pointer dereferencing errors. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

USN-5448-1: ncurses vulnerabilities

It was discovered that ncurses was not properly checking array bounds when executing the fmtentry function, which could result in an out-of-bounds write. An attacker could possibly use this issue to execute arbitrary code. CVE-2017-10684 It was discovered that ncurses was not properly checking us...

The vulnerability of the gf_hinter_finalize function in the MP4Box multimedia platform of GPAC allows a perpetrator to cause a service failure.

The vulnerability of the gfhinterfinalize function in the MP4Box multimedia platform of GPAC is related to pointer dereferencing errors. Exploiting this vulnerability allows a remote attacker to trigger a service failure using a specially created file...

Autodesk Navisworks Manage PDF File Parsing Untrusted Pointer Dereference Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Navisworks Manage. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Autodesk Navisworks Manage PDF File Parsing Untrusted Pointer Dereference Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Navisworks Manage. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Autodesk Navisworks Manage PDF File Parsing Untrusted Pointer Dereference Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Navisworks Manage. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

PT-2022-4800 · Libtiff +4 · Libtiff +4

Name of the Vulnerable Software and Affected Versions: libtiff version 4.3.0 Description: The issue is related to errors in pointer dereferencing, allowing a remote attacker to cause a denial-of-service using a specially crafted tiff file. This can be achieved through the tiffcrop function in...

PT-2022-4798 · Libtiff +9 · Libtiff +9

Name of the Vulnerable Software and Affected Versions: libtiff versions 4.0 through 4.3.0 Description: The issue is related to errors in pointer dereferencing in the TIFFReadDirectory function of the LibTIFF library, specifically in the tif dirread.c component. This can be exploited by a remote...

CVE-2021-40418

CVE-2021-40418 affects Blackmagic Design DaVinci Resolve’s R3D DPDecoder service and the R3D SDK. The issue arises when DPDecoder parses a file: it can skip assigning a property that should reference an UUID object parsed from a frame, leaving that member uninitialized. Upon destruction, the unin...

GSD-2021-1002476 net/smc: Fix NULL pointer dereferencing in smc_vlan_by_tcpsk()

net/smc: Fix NULL pointer dereferencing in smcvlanbytcpsk This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.83 by commit...

The vulnerability of the GPL eXosip library, related to pointer dereferencing errors, allows a violator to trigger a service failure.

The vulnerability of the GPL eXosip library is related to errors in processing certain 3xx redirect responses. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of the arch/powerpc/perf/core-book3s.c component of the Linux operating system, related to pointer dereferencing errors, allows an attacker to trigger a service failure.

The vulnerability of the arch/powerpc/perf/core-book3s.c component of the Linux operating system is related to pointer dereferencing errors. Exploiting this vulnerability could allow an attacker to trigger a service failure using the perf record command...

The vulnerability of component tftpserver.c in the client authentication library libssh, related to pointer dereferencing errors, allows a perpetrator to cause a service failure.

The vulnerability of the tftpserver.c component in the client authentication library libssh is related to pointer dereferencing errors. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

The vulnerability of the `FindServiceControlURLPath` and `FindServiceEventURLPath` functions in the Portable UPnP SDK library, related to pointer dereferencing errors, allows a malicious actor to trigger a service failure.

The vulnerability of the FindServiceControlURLPath and FindServiceEventURLPath functions in the Portable UPnP SDK library is related to pointer dereferencing errors. Exploiting this vulnerability could allow an attacker to cause service failure remotely...

The vulnerability of the generatePreview function in the OpenEXR library, related to pointer dereferencing errors, allows a hacker to trigger a service failure.

The vulnerability of the generatePreview function in the OpenEXR library is related to pointer dereferencing errors. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

Advisory ROSA-SA-2021-1917

Software: memcached 1.4.15 OS: Cobalt 7.9 CVE-ID: CVE-2017-9951 CVE-Crit: HIGH CVE-DESC: The tryreadcommand function in memcached.c in memcached prior to version 1.4.39 allows remote attackers to cause a denial of service segmentation error with an add / set key request, which allows to compare...

Advisory ROSA-SA-2021-1856

Software: irssi 0.8.15 OS: Cobalt 7.9 CVE-ID: CVE-2017-15227 CVE-Crit: HIGH CVE-DESC: Irssi before 1.0.5 may erroneously fail to remove destroyed channels from the request list when waiting for channel synchronization, resulting in post-release usage conditions on subsequent status updates...

Advisory ROSA-SA-2021-1831

Software: evolution-data-server 3.28.5 OS: Cobalt 7.9 CVE-ID: CVE-2020-14928 CVE-Crit: MEDIUM CVE-DESC: From evolution-data-server eds to 3.36.3 there is an issue with STARTTLS buffering that affects SMTP and POP3. When the server sends a "start TLS" response, eds reads additional data and...

Advisory ROSA-SA-2021-1824

Software: dovecot 2.2.36 OS: Cobalt 7.9 CVE-ID: CVE-2019-10691 CVE-Crit: HIGH CVE-DESC: The JSON encoder in Dovecot before 2.3.5.2 allows attackers to repeatedly cause the authentication service to fail by attempting to authenticate with an invalid UTF-8 sequence as the username. CVE-STATUS:...

CVE-2021-29574

CVE-2021-29574 concerns TensorFlow. The issue is an undefined behavior in tf.raw_ops.MaxPool3DGradGrad where inputs can be empty and trigger null-pointer dereferences due to lack of input validation in pooling_ops_3d.cc. Affected context includes TensorFlow versions in the 2.x line with planned f...