envoy: Use-after-free when response filters increase response data

A flaw was found in envoy. If the amount of buffered data by envoy goes over the limit, the buffer may overflow while a response is being processed by the filter chain. This issue possibly causes the operation to abort incorrectly, resulting in the access of a freed memory block...

UBUNTU-CVE-2022-28282

By using a link with rel="localization" a use-after-free could have been triggered by destroying an object during JavaScript execution and then referencing the object through a freed pointer, leading to a potential exploitable crash. This vulnerability affects Thunderbird 91.8, Firefox 99, and...

PT-2022-7484 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The vulnerability is related to the RDMA/cma component of the Linux kernel and is caused by the use of memory after it has been freed. This can lead to a denial of service. The issue...

CVE-2021-43825

A flaw was found in envoy. If the amount of buffered data by envoy goes over the limit, the buffer may overflow while a response is being processed by the filter chain. This issue possibly causes the operation to abort incorrectly, resulting in the access of a freed memory block...

CVE-2021-43825

Envoy is an open source edge and service proxy, designed for cloud-native applications. Sending a locally generated response must stop further processing of request or response data. Envoy tracks the amount of buffered request and response data and aborts the request if the amount of buffered dat...

PT-2022-11914 · Envoy · Envoy

Name of the Vulnerable Software and Affected Versions: Envoy affected versions not specified Description: The issue arises when Envoy, an open source edge and service proxy, fails to correctly abort the operation when the buffer overflows while a response is being processed by the filter chain...

Fix of CVE: CVE-2022-0413, CVE-2022-0417, CVE-2022-0408, CVE-2022-0443

CVE-2022-0408: fix stack corruption when looking for spell suggestions - CVE-2022-0413: fix using freed memory when substitute with function call - CVE-2022-0417: fix illegal memory access caused by ':retab 0' - CVE-2022-0443: fix using freed memory with ':lopen' and ':bwipe'...

CLSA-2022-1645465659 Fixed CVEs in vim: CVE-2022-0408, CVE-2022-0413, CVE-2022-0417, CVE-2022-0443

CVE-2022-0408: fix stack corruption when looking for spell suggestions - CVE-2022-0413: fix using freed memory when substitute with function call - CVE-2022-0417: fix illegal memory access caused by ':retab 0' - CVE-2022-0443: fix using freed memory with ':lopen' and ':bwipe'...

CLSA-2022-1645465475 Fix CVE(s): CVE-2022-0408, CVE-2022-0417, CVE-2022-0443, CVE-2022-0413

SECURITY UPDATE: Stack corruption when looking for spell suggestions - debian/patches/CVE-2022-0408.patch: Prevent the depth increased too much, add a five second time limit to finding suggestions - CVE-2022-0408 SECURITY UPDATE: Using freed memory when substitute with function call -...

Radareorg Radare2 资源管理错误漏洞

radare2 is a set of libraries and tools for working with binary files. radareorg Radare2 is vulnerable to a resource management error that stems from the product's reuse of freed memory. No detailed vulnerability details are currently available...

vim resource management error vulnerability (CNVD-2022-09246)

Vim is a UNIX-based editor. vim suffers from a resource management error vulnerability that arises from the use of freed memory and can be exploited by an attacker to enter a specially crafted file to cause a crash or code execution...

Vim 资源管理错误漏洞

Vim is a UNIX-based editor. vim suffers from a resource management error vulnerability that arises from the use of freed memory and can be exploited by an attacker to enter a specially crafted file to cause a crash or code execution...

Fix of CVE: CVE-2021-4192, CVE-2021-4193

CVE-2021-4192: fix using freed memory in /%V - CVE-2021-4193: fix going beyond the end of the line with /%V...

Google Chrome resource management error vulnerability

Google Chrome is a Web browser from Google, Inc. A resource management error vulnerability exists in Google Chrome, which stems from the product's screen capture component referencing freed memory. A remote attacker could use this vulnerability to create a specially crafted web page, trick a vict...

MediaTek Apusys资源管理错误漏洞

MediaTek Apusys is a chipset component from China's MediaTek Corporation MediaTek. A resource management error vulnerability exists in MediaTek Apusys, which arises from the product's apusys component making duplicate references to freed memory. An attacker could use this vulnerability to cause a...

MediaTek Apusys 资源管理错误漏洞

MediaTek Apusys is a chipset component from China's MediaTek Corporation MediaTek. A resource management error vulnerability exists in MediaTek Apusys, which arises from the product's apusys component making duplicate references to freed memory. An attacker could use this vulnerability to cause a...

MediaTek Apusys 资源管理错误漏洞

MediaTek Apusys is a chipset component from China's MediaTek Corporation MediaTek. A resource management error vulnerability exists in MediaTek Apusys, which arises from the product's apusys component making duplicate references to freed memory. An attacker could use this vulnerability to cause a...

CLSA-2021-1639686040 Fix CVE(s): CVE-2021-3984, CVE-2021-3973, CVE-2021-3974, CVE-2021-4019, CVE-2021-4069

SECURITY UPDATE: Using freed memory with regexp using a mark - debian/patches/CVE-2021-3974.patch: Get the line again after getting the mark position - CVE-2021-3974 SECURITY UPDATE: Illegal memory access when C-indenting - debian/patches/CVE-2021-3984.patch: Also set the cursor column -...

CLSA-2021-1639681874 Fix CVE(s): CVE-2021-3984, CVE-2021-3973, CVE-2021-3974, CVE-2021-4019, CVE-2021-4069

SECURITY UPDATE: Using freed memory with regexp using a mark - debian/patches/CVE-2021-3974.patch: Get the line again after getting the mark position - CVE-2021-3974 SECURITY UPDATE: Illegal memory access when C-indenting - debian/patches/CVE-2021-3984.patch: Also set the cursor column -...

PT-2021-7644 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to the fixed version Android kernel Description: The issue is related to a memory corruption vulnerability in the backing-dev.c file of the Linux operating system, specifically in the bdi put and bdi unregister...