Linux kernel 代码问题漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A denial of service vulnerability exists in the Linux kernel, which stems from the lack of a check for the return value of kzalloc in dpucrtcatomiccheck in...

Denial Of Service (DoS)

libmp4v2.so is vulnerable to Denial of Service DoS. The vulnerability exists in via MP4File::ReadString at mp4fileio.cpp because the memory allocation is not properly implemented which allows an attacker to cause memory leaks resulting in an application crash...

CVE-2023-34454 snappy-java's Integer Overflow vulnerability in compress leads to DoS

snappy-java is a fast compressor/decompressor for Java. Due to unchecked multiplications, an integer overflow may occur in versions prior to 1.1.10.1, causing an unrecoverable fatal error. The function compresschar input in the file Snappy.java receives an array of characters and compresses it. I...

PT-2025-41125

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s bcache subsystem related to memory allocation. Specifically, the bch btree node alloc function could return a NULL pointer under certain conditions...

GO-2023-1766 Denial of service from memory leak in github.com/ipfs/go-libipfs

An attacker can cause a Bitswap server to allocate and leak unbounded amounts of memory...

Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2023-2235)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2024-20952 · Imlib2 +1 · Imlib2 +1

Name of the Vulnerable Software and Affected Versions: imlib2 version 1.9.1 Description: The issue is related to the mishandling of memory allocation in the function init imlib fonts. Recommendations: For imlib2 version 1.9.1, consider disabling the init imlib fonts function until a patch is...

Uncontrolled Resource Consumption in LengthPrefixedMessageReader

Impact Affected gRPC Swift clients and servers are vulnerable to uncontrolled resource consumption attacks. Excessive memory may be allocated when parsing messages. This can lead to a denial of service. Patches The problem has been fixed in 1.2.0. Workarounds No workaround is available. Users mus...

Amazon Linux 2023 : libssh, libssh-config, libssh-devel (ALAS2023-2023-186)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-186 advisory. A NULL pointer dereference was found In libssh during re-keying with algorithm guessing. This issue may allow an authenticated client to cause a denial of service. CVE-2023-1667 A vulnerability...

Medium: libssh

Issue Overview: A NULL pointer dereference was found In libssh during re-keying with algorithm guessing. This issue may allow an authenticated client to cause a denial of service. CVE-2023-1667 A vulnerability was found in libssh, where the authentication check of the connecting client can be...

CVE-2023-2253

A flaw was found in the /v2/catalog endpoint in distribution/distribution, which accepts a parameter to control the maximum number of records returned query string: n. This vulnerability allows a malicious user to submit an unreasonably large value for n, causing the allocation of a massive strin...

CVE-2023-2253

A flaw was found in the /v2/catalog endpoint in distribution/distribution, which accepts a parameter to control the maximum number of records returned query string: n. This vulnerability allows a malicious user to submit an unreasonably large value for n, causing the allocation of a massive strin...

Ubuntu 23.04 : Go vulnerabilities (USN-6140-1)

The remote Ubuntu 23.04 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6140-1 advisory. It was discovered that Go did not properly manage memory under certain circumstances. An attacker could possibly use this issue to cause a panic resulting in...

CVE-2023-2253

A flaw was found in the /v2/catalog endpoint in distribution/distribution, which accepts a parameter to control the maximum number of records returned query string: n. This vulnerability allows a malicious user to submit an unreasonably large value for n, causing the allocation of a massive strin...

Ubuntu 20.04 LTS / 22.04 LTS / 23.04 : libssh vulnerabilities (USN-6138-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS / 23.04 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6138-1 advisory. Philip Turnbull discovered that libssh incorrectly handled rekeying with algorithm guessing. A remote attacker could use this issue t...

OESA-2023-1329 libssh security update

The ssh library was designed to be used by programmers needing a working SSH implementation by the mean of a library. The complete control of the client is made by the programmer. With libssh, you can remotely execute programs, transfer files, use a secure and transparent tunnel for your remote...

The vulnerability of the TL1 protocol implementation in Cisco IOS XR Network Convergence System (NCS) 4000 Series routers allows a attacker to cause service interruptions.

The vulnerability of the TL1 protocol implementation in Cisco IOS XR Network Convergence System NCS 4000 Series routers is related to uncontrolled memory allocation. Exploiting this vulnerability can allow an attacker to cause service failures...

Qualcomm Adreno/KGSL Data Leakage Exploit

On Qualcomm Adreno/KGSL builds where CONFIGQCOMKGSLUSESHMEM is not set or on older KGSL versions without CONFIGQCOMKGSLUSESHMEM, KGSL allocates GPU-shared memory from its own page pool. Pages from this pool are inserted into VMAs that don't have any weird flags like VMPFNMAP set, which means...

Fedora 37 : libssh (2023-5fa5ca2043)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-5fa5ca2043 advisory. Update to 0.10.5 CVE-2023-1667 CVE-2023-2283 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note...

Integer Overflow in tjexample.c

Description The tjexample.c example program uses tjAlloc function to allocate the output buffer of the JPEG buffer. tjAlloc uses malloc which takes a sizet number of bytes an unsigned integer. However, tjAlloc itself takes the number of bytes as a signed integer:...