GSD-2023-1000484 mptcp: use proper req destructor for IPv6

mptcp: use proper req destructor for IPv6 This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit...

Design/Logic Flaw

lesspipe before 2.06 allows attackers to execute code via Perl Storable pst files, because of deserialized object destructor execution via a key/value pair in a hash...

CVE-2022-44542

CVE-2022-44542 affects lesspipe up to version 2.05; vulnerability arises from handling Perl Storable (pst) files where a crafted PST can trigger deserialized object destructor execution, enabling remote code execution. Impact is described as total compromise with high confidentiality, integrity, ...

The vulnerabilities of the functions unix_sock_destructor() and unix_release_sock() in the BPF subsystem of Linux kernel allow a attacker to cause a service failure.

The vulnerabilities of the unixsockdestructor and unixreleasesock functions in the BPF subsystem of Linux kernels involve the use of memory after it has been freed. Exploiting these vulnerabilities can allow a remote attacker to cause service interruptions...

UBUNTU-CVE-2022-3543

A vulnerability, which was classified as problematic, has been found in Linux Kernel. This issue affects the function unixsockdestructor/unixreleasesock of the file net/unix/afunix.c of the component BPF. The manipulation leads to memory leak. It is recommended to apply a patch to fix this issue...

Linux kernel 安全漏洞

Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. A security vulnerability exists in the Linux kernel that originates from an affected function unixsockdestructor/unixreleasesock in the net/unix/afunix.c file of the component BPF, which could lead to a...

PT-2022-5202 · Linux +4 · Linux Kernel +4

Name of the Vulnerable Software and Affected Versions: Linux Kernel affected versions not specified Description: The issue is related to the use of memory after it has been freed in the unix sock destructor and unix release sock functions of the BPF subsystem in Linux operating systems. This can ...

编号撤回

Laravel, a web application framework from the Laravel Team Laravel, has a security vulnerability that stems from a vulnerability in 1 RoutingPendingResourceRegistration.php via destruct, 2 cal in QueueCapsuleManager.php and 3 the deserialization pop-up chain invoke in...

CVE-2021-40418

When parsing a file that is submitted to the DPDecoder service as a job, the R3D SDK will mistakenly skip over the assignment of a property containing an object referring to a UUID that was parsed from a frame within the video container. Upon destruction of the object that owns it, the...

Design/Logic Flaw

When parsing a file that is submitted to the DPDecoder service as a job, the R3D SDK will mistakenly skip over the assignment of a property containing an object referring to a UUID that was parsed from a frame within the video container. Upon destruction of the object that owns it, the...

CVE-2021-39559

An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function GString::GString located in GString.cc. It allows an attacker to cause Denial of Service...

CVE-2021-39539

An issue was discovered in pdftools through 20200714. A NULL pointer dereference exists in the function node::BDCNode::BDCNode located in bdcnode.cpp. It allows an attacker to cause Denial of Service...

Pdftools 代码问题漏洞

PDFTools is a tool for converting PDF files to ePUB format. node::BDCNode::BDCNode function in bdcnode.cpp in PDFTools 20200714 and earlier versions is vulnerable to a null pointer dereference. An attacker could exploit this vulnerability to cause a denial of service...

ROS-2-1224

2.1224 Vulnerability in firefox browser CVE-2020-6819 and CVE-2020-6820 1. Vulnerability description: Two critical vulnerabilities have been discovered that could lead to the execution of attacker code when processing specially formatted content. It is warned that facts of using these...

GHSA-C3CW-C387-PJ65 Double free in crossbeam

Even if an element is popped from a queue, crossbeam would run its destructor inside the epoch-based garbage collector. This is a source of double frees. The flaw was corrected by wrapping elements inside queues in a ManuallyDrop...

Double free in crossbeam

Even if an element is popped from a queue, crossbeam would run its destructor inside the epoch-based garbage collector. This is a source of double frees. The flaw was corrected by wrapping elements inside queues in a ManuallyDrop...

GHSA-RXR4-X558-X7HW Double free in smallvec

If an iterator passed to SmallVec::insertmany panicked in Iterator::next, destructors were run during unwinding while the vector was in an inconsistent state, possibly causing a double free a destructor running on two copies of the same value. This is fixed in smallvec 0.6.3 by ensuring that the...

Keystone Engine 安全漏洞

Keystone Engine is an assembler framework. A security vulnerability exists in Keystone Engine that stems from Keystone Engine having an invalid idle in llvmks::SmallVectorImpl::SmallVectorImpl...

VulnCheck KEV: CVE-2021-3007

Laminas Project laminas-http before 2.14.2, and Zend Framework 3.0.0, has a deserialization vulnerability that can lead to remote code execution if the content is controllable, related to the destruct method of the Zend\Http\Response\Stream class in Stream.php. NOTE: Zend Framework is no longer...

Xpdf Invalid Memory Access Vulnerability (CNVD-2020-54074)

Xpdf is a free PDF viewer and toolkit that includes a text extractor, image converter, HTML converter and more. An invalid memory access vulnerability exists in the TextString::TextString function in Catalog.cc in Xpdf 4.0.2. An attacker can exploit this vulnerability by sending a specially craft...