kernel: use-after-free in smb2_is_status_io_timeout()

A use-after-free flaw was found in smb2isstatusiotimeout in CIFS in the Linux Kernel. After CIFS transfers response data to a system call, there are still local variable points to the memory region, and if the system call frees it faster than CIFS uses it, CIFS will access a free memory region,...

The vulnerability of the fftools/cmdutils.c component in the FFmpeg multimedia library allows a hacker to cause a service failure.

The vulnerability in the fftools/cmdutils.c component of the FFmpeg multimedia library is related to improper memory release before deleting the last reference. Exploiting this vulnerability allows an attacker to cause service failures remotely...

The vulnerability in the str2host.c component of the DNS library allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the str2host.c component in the DNS library involves a repeated memory release mechanism. Exploiting this vulnerability allows an attacker who operates remotely to gain access to confidential data, compromise its integrity, and cause service interruptions...

The vulnerability in the get_data function of the binutils/nm.c component of the GNU Binutils development environment allows a attacker to cause a service failure.

The vulnerability of the getdata function in the binutils/nm.c component of the GNU Binutils development environment is related to improper memory release before deleting the last reference. Exploiting this vulnerability allows an attacker to cause a service failure...

The vulnerability of the microblaze-dis.c component of the GNU Binutils development environment allows a hacker to trigger a system failure.

The vulnerability of the microblaze-dis.c component of the GNU Binutils development environment is related to improper memory release before deleting the last reference. Exploiting this vulnerability allows an attacker to cause a service failure...

The vulnerability of the ProcXkbGetKbdByName function in the xkb/xkb.c component of the Wayland protocol for X.Org XWayland, which is part of the X Window System X.Org Server, allows a malicious actor to cause a service failure.

The vulnerability of the ProcXkbGetKbdByName function in the xkb/xkb.c component of the Wayland protocol for X.Org XWayland, which is part of the X Window System X.Org Server, is related to improper memory release before deleting the last reference. Exploiting this vulnerability allows a remote...

The vulnerability of the GNU C Library’s system library lies in the improper release of memory before deleting the last reference, allowing a hacker to trigger a service failure.

The vulnerability of the GNU C Library is related to improper memory release before deleting the last reference. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

The vulnerability in the `net/ipv6/ipv6_sockglue.c` component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the net/ipv6/ipv6sockglue.c component of the Linux operating system’s kernel is related to improper memory release before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the `yajl_tree_parse` function in the YAJL-ruby JSON library allows a attacker to cause a service failure.

The vulnerability of the yajltreeparse function in the YAJL-ruby JSON library is related to improper memory release before deleting the last reference. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Advisory ROSA-SA-2023-2285

software: clamav 0.103.8 WASP: ROSA-CHROME packageevrstring: clamav-0.103.8-1.src.rpm CVE-ID: CVE-2022-20698 BDU-ID: 2022-00587 CVE-Crit: MEDIUM. CVE-DESC.: A vulnerability in the Clam AntiVirus software package is related to insufficient input validation. Exploitation of the vulnerability could...

Apache HTTP Server: HTTP/2 stream memory not reclaimed right away on RST

...

The vulnerability of the Packet Forwarding Engine (PFE) module in Juniper Networks’ Junos OS-based routers of the QFX5000 Series allows a attacker to induce a service failure.

The vulnerability of the Packet Forwarding Engine PFE module in Juniper Networks’ Junos OS-based QFX5000 Series routers is related to memory release errors. Exploiting this vulnerability can allow a malicious actor to trigger service interruptions...

The vulnerability of the Packet Forwarding Engine (PFE) module in Junos OS routers of the MX Series allows a hacker to cause a service failure.

The vulnerability of the Packet Forwarding Engine PFE module in Junos OS routers of the MX Series is related to memory release errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

Apache HTTP Server Resource Management Error Vulnerability

Apache HTTP Server is the United States Apache Apache Foundation of an open source web server . The server is fast, reliable, and extensible through a simple API. A resource management error vulnerability exists in Apache HTTP Server modhttp2, which stems from the fact that when a client resets t...

The vulnerability of the Packet Forwarding Engine (PFE) module in Juniper Networks’ Junos operating systems allows a hacker to trigger a service failure.

The vulnerability of the Packet Forwarding Engine PFE module in Juniper Networks’ Junos operating systems relates to the failure to release memory before deletion. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

The vulnerability of the ` stab_demangle_v3_arg` function in the GNU Binutils development tool, which allows a hacker to trigger a service failure.

The vulnerability of the stabdemanglev3arg function in the GNU Binutils development toolset is related to memory release errors. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the `find_abstract_instance` function in the GNU Binutils development environment, which allows a hacker to cause a service failure.

The vulnerability of the findabstractinstance function in the GNU Binutils development environment is related to memory release errors. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the pr_function_type function in the GNU Binutils development environment, which allows a hacker to trigger a service failure.

The vulnerability of the prfunctiontype function in the GNU Binutils development environment is related to memory release errors. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the `make_tempdir` and `make_tempname` functions in the GNU Binutils development tool allows a attacker to cause a service failure.

The vulnerability of the maketempdir and maketempname functions in the GNU Binutils development tool set is related to memory release errors. Exploiting this vulnerability could allow an attacker to cause a system failure...

CVE-2023-44193

An Improper Release of Memory Before Removing Last Reference vulnerability in Packet Forwarding Engine PFE of Juniper Networks Junos OS allows a local, low privileged attacker to cause an FPC crash, leading to Denial of Service DoS. On all Junos MX Series with MPC1 - MPC9, LC480, LC2101, MX10003,...