32 matches found
SUSE-SU-2024:3744-1 Security update for qemu
This update for qemu fixes the following issues: Security fixes: - CVE-2024-8354: Fixed assertion failure in usbepget bsc1230834 - CVE-2024-8612: Fixed information leak in virtio devices bsc1230915 Update version to 8.2.7: Security fixes: - CVE-2024-7409: Fixed denial of service via improper...
GO-2022-0816 Improper Resource Shutdown or Release in HashiCorp Vault in github.com/hashicorp/vault
Improper Resource Shutdown or Release in HashiCorp Vault in github.com/hashicorp/vault...
The vulnerability of the i40e component in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the i40e component in the Linux operating system is related to the improper release of the client instance, followed by the removal of the i40e module. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2024-4693 Qemu-kvm: virtio-pci: improper release of configure vector leads to guest triggerable crash
A flaw was found in the QEMU Virtio PCI Bindings hw/virtio/virtio-pci.c. An improper release and use of the irqfd for vector 0 during the boot process leads to a guest triggerable crash via vhostnetstop. This flaw allows a malicious guest to crash the QEMU process on the host...
CVE-2024-4693
CVE-2024-4693 affects QEMU’s Virtio PCI Bindings (hw/virtio/virtio-pci.c). The issue is an improper release/use of irqfd for vector 0 during boot, leading to a guest-triggered crash of the host QEMU process via vhost_net_stop(). Exploitation would require a guest to trigger the path locally; CVSS...
CVE-2023-33049 Improper Release of Memory Before Removing Last Reference in Multi-Mode Call Processor
Transient DOS in Multi-Mode Call Processor due to UE failure because of heap leakage...
PT-2023-36775
Уязвимость функции chacha crypt arch модуля arch/s390/crypto/chacha-glue.c поддержки платформы S390 ядра операционной системы Linux связана с неправильным отключением или освобождением ресурса. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...
CVE-2022-22204
An Improper Release of Memory Before Removing Last Reference vulnerability in the Session Initiation Protocol SIP Application Layer Gateway ALG of Juniper Networks Junos OS allows unauthenticated network-based attacker to cause a partial Denial of Service DoS. On all MX and SRX platforms, if the...
CVE-2022-22204: Missing Release of Memory after Effective Lifetime
An Improper Release of Memory Before Removing Last Reference vulnerability in the Session Initiation Protocol SIP Application Layer Gateway ALG of Juniper Networks Junos OS allows unauthenticated network-based attacker to cause a partial Denial of Service DoS. On all MX and SRX platforms, if the...
The vulnerability of the Microsoft .NET Framework software platform, related to improper cleaning or release of resources, allows a perpetrator to cause a service failure.
The vulnerability of the Microsoft .NET Framework software platform is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
CVE-2021-3544
Several memory leaks were found in the virtio vhost-user GPU device vhost-user-gpu of QEMU in versions up to and including 6.0. They exist in contrib/vhost-user-gpu/vhost-user-gpu.c and contrib/vhost-user-gpu/virgl.c due to improper release of memory i.e., free after effective lifetime...
