775 matches found
RUSTSEC-2021-0022 Use-after-free in `subscript_next` and `subscript_prev` wrappers
Affected versions of this crate had an unsound implementation which could pass a pointer to freed memory to ydbsubscriptnextst and ydbsubscriptprevst if the variable and subscripts did not have enough memory allocated on the first call to hold the next variable in the database. For example, the...
Huawei Taurus-AL00A Resource Management Error Vulnerability
Huawei Taurus-AL00A is a smartphone from Huawei of China.Huawei Taurus-AL00A is vulnerable to a resource management error. A module fails to properly process a message, and a function references freed memory. An attacker could use this vulnerability to trick a user into running a carefully...
Unbreakable Enterprise kernel security update
5.4.17-2036.101.2uek - vt: Disable KDFONTOPCOPY Daniel Vetter Orabug: 32187738 CVE-2020-28974 - pagefrag: Recover from memory pressure Dongli Zhang Orabug: 32177966 - Fonts: Support FONTEXTRAWORDS macros for built-in fonts Peilin Ye Orabug: 32176254 CVE-2020-28915 - fbdev, newportcon: Move...
Artifex Software MuPDF Resource Management Error Vulnerability
Artifex Software MuPDF is a free, lightweight PDF reader from Artifex Software, USA. A resource management error vulnerability exists in Artifex Software MuPDF library 1.17.0-rc1 and earlier versions, which stems from when a valid page is followed by an invalid pixmap-sized page, resulting in the...
FreeBSD 资源管理错误漏洞
FreeBSD is a Unix-like operating system from the Freebsd Foundation. pts is a pseudo-terminal driver used in it. FreeBSD suffers from a denial of service vulnerability, which can be exploited by an attacker to force the use of a freed memory area via FreeBSD's ICMPv6 to trigger a denial of servic...
WebKitGTK Resource Management Error Vulnerability
WebKitGTK is a full-featured port of the WebKit rendering engine for projects that require any type of web integration, from hybrid HTML/CSS applications to full-fledged web browsers. It provides the full functionality of WebKit for a wide range of systems from desktop computers to embedded syste...
Mozilla Firefox MCallGetProperty Code Issue Vulnerability
Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox, which can be exploited by an attacker to force the use of a freed memory area via Firefox's MCallGetProperty to trigger a denial of service and...
Linux kernel denial of service vulnerability (CNVD-2020-58038)
Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. Linux kernel suffers from a denial of service vulnerability that originates from vtdokdgkbioctl. An attacker can exploit the vulnerability to force the use of a freed...
UBUNTU-CVE-2020-7068
In PHP versions 7.2.x below 7.2.33, 7.3.x below 7.3.21 and 7.4.x below 7.4.9, while processing PHAR files using phar extension, pharparsezipfile could be tricked into accessing freed memory, which could lead to a crash or information disclosure...
The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are related to memory usage after it is released. This allows attackers to execute arbitrary code.
The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015/Reader 2015 is related to the use of memory after it is freed. Exploiting this vulnerability allow...
The vulnerability of the sg_write function in Linux operating system kernels, allowing a hacker to execute arbitrary code
The vulnerability of the sgwrite function in Linux operating system kernels is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Fedora 31 : 1:dovecot (2020-b60344c987)
CVE-2020-10957: lmtp/submission: A client can crash the server by sending a NOOP command with an invalid string parameter. This occurs particularly for a parameter that doesn't start with a double quote. This applies to all SMTP services, including submission-login, which makes it possible to...
The vulnerability of the Firefox Web browser’s session object recompilation component, related to the access to freed memory segments, allows attackers to gain unauthorized access to confidential data, cause service failures, and compromise data integrity.
The vulnerability of the Firefox Web browser’s session object recompilation component relates to the access to freed memory resources. Exploiting this vulnerability can allow an attacker to gain unauthorized access to confidential data, cause service failures, and compromise data integrity...
The vulnerability of Google Chrome web browser’s download manager allows a hacker to compromise data integrity, cause service failures, or gain unauthorized access to confidential information.
The vulnerability of Google Chrome web browser’s download manager is related to the use of freed memory segments. Exploiting this vulnerability can allow an attacker to compromise data integrity, cause service failures, or gain unauthorized access to confidential information through a specially...
The vulnerability in the hw/9pfs/cofile.c and hw/9pfs/9p.c components of the QEMU hardware emulation software allows a attacker to trigger a service failure by repeatedly accessing the freed memory area.
The vulnerability in the components hw/9pfs/cofile.c and hw/9pfs/9c.c of the QEMU hardware emulator involves repeated access to a freed memory area. Exploiting this vulnerability can allow an attacker to cause a system failure...
CVE-2019-20079
The autocmd feature in window.c in Vim before 8.1.2136 accesses freed memory...
CVE-2019-20079
The autocmd feature in window.c in Vim before 8.1.2136 accesses freed memory...
CVE-2019-20079
The autocmd feature in window.c in Vim before 8.1.2136 accesses freed memory...
