CVE-2024-22043: Null Pointer Dereference
A vulnerability has been identified in Parasolid V35.0 (All versions < V35.0.251), Parasolid V35.1 (All versions < V35.1.170). The affected applications contain a null pointer dereference vulnerability while parsing specially crafted XT files. An attacker could leverage this vulnerability to crash the application causing denial of service condition.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Parasolidto a version that resolves this vulnerability.Fixed in V35.0.251 - Upgrade
Upgrade
Parasolidto a version that resolves this vulnerability.Fixed in V35.1.170 - Compensating control
If you cannot upgrade immediately, avoid opening/parsing specially crafted Parasolid XT files from untrusted sources to prevent the null pointer dereference crash (DoS).
Event History
Frequently Asked Questions
What is the severity of CVE-2024-22043?
CVE-2024-22043 is considered a medium severity vulnerability due to its potential to cause application crashes.
How do I fix CVE-2024-22043?
To mitigate CVE-2024-22043, upgrade Parasolid to version 35.0.251 or 35.1.170 or later.
What applications are affected by CVE-2024-22043?
CVE-2024-22043 affects all versions of Siemens Parasolid prior to V35.0.251 and V35.1.170.
What kind of vulnerability is CVE-2024-22043?
CVE-2024-22043 is a null pointer dereference vulnerability that occurs while parsing specially crafted XT files.
Can CVE-2024-22043 lead to remote code execution?
No, CVE-2024-22043 does not lead to remote code execution; it primarily allows for application crashes.