Advisory ROSA-SA-2023-2159

Software: httpd 2.4.37 OS: ROSA Virtualization 2.1 packageevrstring: 2.4.37 CVE-ID: CVE-2006-20001 BDU-ID: 2023-01105 CVE-Crit: HIGH CVE-DESC: A vulnerability in the moddav module of the Apache HTTP Server web server is related to an operation exceeding buffer boundaries. Exploitation of the...

CVE-2022-42418

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

PT-2023-34504

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.163 Description The issue concerns null pointer dereferencing in the find dup cset node entry and find dup cset prop functions. This problem was introduced in version v5.0 and is fixed in version v5.10.163...

PT-2023-34452

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.163 Description The issue concerns a null pointer dereferencing in the power supply functionality. This problem was introduced in version v5.0 and is fixed in Linux Kernel version v5.10.163. The actual impa...

PT-2023-34197

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.0 through v5.15.85 Description The issue concerns null pointer dereferencing in the find dup cset node entry and find dup cset prop functions. This problem was introduced in version v5.0 and fixed in version v5.15.86...

PT-2023-34135

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.86 Description The issue concerns a null pointer dereferencing in the power supply get battery info function. This problem was introduced in version v5.0 and fixed in version v5.15.86. The actual impact and...

PT-2023-33719 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.16 Description: The issue concerns a null pointer dereferencing in the power supply functionality, specifically in the power supply get battery info function. This problem was introduced in version v5.0 and...

radare2 code issue vulnerability (CNVD-2023-06084)

radare2 is a set of libraries and tools for working with binary files. radare2 versions prior to 5.8.2 are vulnerable to a code issue that stems from NULL pointer dereferencing. No detailed vulnerability details are currently available...

PT-2022-36009

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.0.10 Description The issue is related to null pointer dereferencing in pinctrl dt to map. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2022-36173

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.80 Description The issue concerns a null pointer dereferencing in pinctrl dt to map. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2022-36486

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.267 Description The issue concerns a null pointer dereferencing in pinctrl dt to map. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

ROS-20221123-01

The vulnerability of qfbufaddline function of Vim text editor is related to memory usage after its release. Exploitation of the vulnerability may allow an intruder to affect the confidentiality, integrity and availability of protected information Vulnerability of the inscompladd function of the...

Vim code issue vulnerability (CNVD-2022-68076)

Vim is a cross-platform text editor. a code issue vulnerability exists in versions prior to Vim 9.0.0552, which stems from NULL pointer dereferencing. No detailed vulnerability details are currently available...

LibTIFF Pointer Dereferencing DoS

The vulnerability of the LibTIFF library is related to pointer arithmetic errors. Exploiting this vulnerability allows a remote attacker to trigger a service failure using a specially created TIFF file...

vim code issue vulnerability (CNVD-2022-68089)

Vim is a cross-platform text editor. vim 9.0.0259 previous versions have a code issue vulnerability that stems from NULL pointer dereferencing. No detailed vulnerability details are currently available...

OPC UA Pointer Dereferencing DoS

The vulnerability of OPC UA data transmission implementations in industrial networks is related to pointer dereferencing errors. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

USN-5448-1: ncurses vulnerabilities

It was discovered that ncurses was not properly checking array bounds when executing the fmtentry function, which could result in an out-of-bounds write. An attacker could possibly use this issue to execute arbitrary code. CVE-2017-10684 It was discovered that ncurses was not properly checking us...

PT-2022-3542

Name of the Vulnerable Software and Affected Versions Apple M1 and A14 processors affected versions not specified Description The issue is related to errors in pointer dereferencing in the Data Memory-Dependent Prefetcher DMP mechanism of Apple M1 and A14 processors. Exploitation of this issue ma...

MP4Box gf_hinter_finalize Heap Buffer Overflow DoS

The vulnerability of the gfhinterfinalize function in the MP4Box multimedia platform of GPAC is related to pointer dereferencing errors. Exploiting this vulnerability allows a remote attacker to trigger a service failure using a specially created file...

Autodesk Navisworks Manage PDF File Parsing Untrusted Pointer Dereference Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Navisworks Manage. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...