218 matches found
PT-2023-18558 · Ftp · Ftp
Name of the Vulnerable Software and Affected Versions: FTP project through 96c1a35 Description: The issue allows remote attackers to cause a denial of service due to memory consumption by engaging in client activity, such as establishing and then terminating a connection. This occurs because mall...
PT-2022-6181 · Iptables · Iptables
Name of the Vulnerable Software and Affected Versions: iptables affected versions not specified Description: The issue is related to memory deallocation errors in the xtables-nft-multi and xtables-legacy-multi utilities of the iptables package in the EMIAS OS operating system. Exploitation of thi...
PT-2022-34115 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.137 Description: The issue is related to the deallocation of EPC memory in the dw pcie ep init function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kerne...
PT-2022-33510 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.2 Description: The issue is related to the deallocation of EPC memory in the dw pcie ep init function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...
The vulnerability of the kernel of iOS, macOS Mojave, tvOS, and watchOS allows a hacker to execute arbitrary code.
The vulnerability of the kernel of iOS, macOS Mojave, tvOS, and watchOS is related to the use of memory after deallocation. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of Google Chrome’s IndexedDB function allows attackers to execute arbitrary code.
The vulnerability of the IndexedDB function in Google Chrome browser is related to the use of memory after deallocation. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
CVE-2019-20006
An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxmlcharcontent puts a pointer to the internal address of a larger block as xml-txt. This is later deallocated using free, leading to a segmentation fault...
Adobe Framemaker 资源管理错误漏洞
Adobe Framemaker is the United States of America Odooby Adobe company's set of page layout software for writing and editing large or complex documents including structured documents. A memory misreference vulnerability exists in Adobe Framemaker. The vulnerability arises from a mix-up in the...
The vulnerability of the Screen Capture function in Google Chrome browser allows a hacker to execute arbitrary code.
The vulnerability of the Screen Capture function in Google Chrome browser relates to the use of memory after deallocation. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code through a specially created web page from a remote location...
Google Chrome 资源管理错误漏洞
Google Chrome is a web browser from Google, Inc. A code execution vulnerability exists in Google Chrome Omnibox, which is caused by a confusion in the program's instructions for freeing memory and can be exploited by attackers to execute arbitrary code on the system or cause a denial of service...
The vulnerability of the Accessibility component in Google Chrome browser allows a perpetrator to access confidential information.
The vulnerability of the Accessibility component in Google Chrome browser relates to memory usage after deallocation. Exploiting this vulnerability could allow an attacker to access confidential information through a specially created web page...
The vulnerability in the command-line utility BusyBox, related to memory usage after deallocation, allows a hacker to execute arbitrary code.
The vulnerability of the BusyBox command-line utility set is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...
USN-5163-1: Linux kernel vulnerabilities
Ilja Van Sprundel discovered that the SCTP implementation in the Linux kernel did not properly perform size validations on incoming packets in some situations. An attacker could possibly use this to expose sensitive information kernel memory. CVE-2021-3655 It was discovered that the Option USB Hi...
Ubuntu: Security Advisory (USN-5140-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2021-38467
A specific function code receives a raw pointer supplied by the user and deallocates this pointer. The user can then control what memory regions will be freed and cause use-after-free condition...
Race condition
A specific function code receives a raw pointer supplied by the user and deallocates this pointer. The user can then control what memory regions will be freed and cause use-after-free condition...
CVE-2021-38467
CVE-2021-38467 (AUVESY Versiondog) is a use-after-free vulnerability described in multiple sources as arising when a function receives a raw user-supplied pointer and deallocates it, allowing control over what memory is freed. The vulnerability affects Versiondog and has high impact on integrity ...
The vulnerability of the CSS Node-css-what selector analyzer, related to memory usage after deallocation, allows a attacker to cause a service failure.
The vulnerability of the CSS Node-css-what selector analyzer is related to an error in checking the size of input data. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
GHSA-VFQX-HV88-F9CV Double-free in id-map
A double free can occur in getorinsert upon a panic of a user-provided f function. getorinsert reserves space for a value, before calling the user provided insertion function f. If the function f panics then uninitialized or previously freed memory can be dropped...
