CVE-2018-3840 - A denial-of-service vulnerability exists in the Pixar Renderman IT Display Service 21.6 (0x67) · CoreCVE

Back Back to CVE browser

HIGH

A denial-of-service vulnerability exists in the Pixar Renderman IT Display Service 21.6 (0x67)

Published Jun 26, 2018

7.5

HIGH

CVSS 3.1

EPSS 1.62%

Description

A denial-of-service vulnerability exists in the Pixar Renderman IT Display Service 21.6 (0x67). The vulnerability is present in the parsing of a network packet without proper validation of the packet. The data read by the application is not validated, and its use can lead to a null pointer dereference. The IT application is opened by a user and then listens for a connection on port 4001. An attacker can deliver an attack once the application has been opened.

Affected products

Vendor Talos Product Pixar Renderman Default
n/a
- Version
  Renderman 21.6
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Pixar Renderman

n/a

Version	Status	Constraints
Renderman 21.6	affected	-

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-20

Improper Input Validation

CWE-476

NULL Pointer Dereference

References (1)

https://talosintelligence.com/vulnerability_reports/TALOS-2018-0523
x_refsource_MISCExploitThird Party Advisory

Link	Providers	Tags
https://talosintelligence.com/vulnerability_reports/TALOS-2018-0523		x_refsource_MISCExploitThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner talos

Published Jun 26, 2018

Updated Sep 16, 2024

Reserved Jan 2, 2018

Link CVE-2018-3840

CISA Vulnrichment

Updated n/a

Status Modified

Modified Jun 17, 2026

Link CVE-2018-3840

Severity n/a

Public date n/a

Links CVE-2018-3840