Autodesk Navisworks Manage PDF File Parsing Untrusted Pointer Dereference Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Navisworks Manage. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Autodesk Navisworks Manage PDF File Parsing Untrusted Pointer Dereference Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Navisworks Manage. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

PT-2022-4800

Name of the Vulnerable Software and Affected Versions libtiff version 4.3.0 Description The issue is related to errors in pointer dereferencing, allowing a remote attacker to cause a denial-of-service using a specially crafted tiff file. This can be achieved through the tiffcrop function in...

PT-2022-4798

Name of the Vulnerable Software and Affected Versions libtiff versions 4.0 through 4.3.0 Description The issue is related to errors in pointer dereferencing in the TIFFReadDirectory function of the LibTIFF library, specifically in the tif dirread.c component. This can be exploited by a remote...

CVE-2021-40418

CVE-2021-40418 affects Blackmagic Design DaVinci Resolve’s R3D DPDecoder service and the R3D SDK. The issue arises when DPDecoder parses a file: it can skip assigning a property that should reference an UUID object parsed from a frame, leaving that member uninitialized. Upon destruction, the unin...

GSD-2021-1002476 net/smc: Fix NULL pointer dereferencing in smc_vlan_by_tcpsk()

net/smc: Fix NULL pointer dereferencing in smcvlanbytcpsk This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.83 by commit...

PT-2021-26944

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.83 Description The issue is related to a NULL pointer dereferencing in the smc vlan by tcpsk function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-27008

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.18 through 5.15.5 Description The issue is related to a NULL pointer dereferencing in the smc vlan by tcpsk function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-6034

Name of the Vulnerable Software and Affected Versions Linux kernel versions 5.8 through 5.15.14 Description The issue is related to errors in pointer dereferencing in the eBPF subsystem of the Linux kernel, allowing local users to gain privileges due to the availability of pointer arithmetic via...

Linux PowerPC Pointer Dereferencing DoS

The vulnerability of the arch/powerpc/perf/core-book3s.c component of the Linux operating system is related to pointer dereferencing errors. Exploiting this vulnerability could allow an attacker to trigger a service failure using the perf record command...

GPL eXosip Pointer Dereferencing DoS

The vulnerability of the GPL eXosip library is related to errors in processing certain 3xx redirect responses. Exploiting this vulnerability can allow a malicious actor to cause service failures...

OpenEXR generatePreview Pointer Dereferencing DoS

The vulnerability of the generatePreview function in the OpenEXR library is related to pointer dereferencing errors. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

Portable UPnP SDK Pointer Dereferencing DoS

The vulnerability of the FindServiceControlURLPath and FindServiceEventURLPath functions in the Portable UPnP SDK library is related to pointer dereferencing errors. Exploiting this vulnerability could allow an attacker to cause service failure remotely...

libssh TFTP Pointer Dereferencing DoS

The vulnerability of the tftpserver.c component in the client authentication library libssh is related to pointer dereferencing errors. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

Advisory ROSA-SA-2021-1917

Software: memcached 1.4.15 OS: Cobalt 7.9 CVE-ID: CVE-2017-9951 CVE-Crit: HIGH CVE-DESC: The tryreadcommand function in memcached.c in memcached prior to version 1.4.39 allows remote attackers to cause a denial of service segmentation error with an add / set key request, which allows to compare...

Advisory ROSA-SA-2021-1856

Software: irssi 0.8.15 OS: Cobalt 7.9 CVE-ID: CVE-2017-15227 CVE-Crit: HIGH CVE-DESC: Irssi before 1.0.5 may erroneously fail to remove destroyed channels from the request list when waiting for channel synchronization, resulting in post-release usage conditions on subsequent status updates...

Advisory ROSA-SA-2021-1831

Software: evolution-data-server 3.28.5 OS: Cobalt 7.9 CVE-ID: CVE-2020-14928 CVE-Crit: MEDIUM CVE-DESC: From evolution-data-server eds to 3.36.3 there is an issue with STARTTLS buffering that affects SMTP and POP3. When the server sends a "start TLS" response, eds reads additional data and...

Advisory ROSA-SA-2021-1824

Software: dovecot 2.2.36 OS: Cobalt 7.9 CVE-ID: CVE-2019-10691 CVE-Crit: HIGH CVE-DESC: The JSON encoder in Dovecot before 2.3.5.2 allows attackers to repeatedly cause the authentication service to fail by attempting to authenticate with an invalid UTF-8 sequence as the username. CVE-STATUS:...

CVE-2021-29616

TensorFlow is an end-to-end open source platform for machine learning. The implementation of TrySimplifyhttps://github.com/tensorflow/tensorflow/blob/c22d88d6ff33031aa113e48aa3fc9aa74ed79595/tensorflow/core/grappler/optimizers/arithmeticoptimizer.ccL390-L401 has undefined behavior due to...

CVE-2021-29574

CVE-2021-29574 concerns TensorFlow. The issue is an undefined behavior in tf.raw_ops.MaxPool3DGradGrad where inputs can be empty and trigger null-pointer dereferences due to lack of input validation in pooling_ops_3d.cc. Affected context includes TensorFlow versions in the 2.x line with planned f...