Linux kernel 资源管理错误漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in versions of Linux kernel prior to 6.3.2, which stems from a memory reuse after release issue found in rkvdecremove in...

ImageMagick 资源管理错误漏洞

ImageMagick is a set of open-source image processing software from the American company ImageMagick. The software can read, convert or write images in a variety of formats. A security vulnerability exists in ImageMagick, which stems from a memory reuse after release issue found in the...

The vulnerability in the implementation of the J1939 network protocol of the Linux operating system allows a perpetrator to gain access to protected information or compromise data integrity.

The vulnerability in the implementation of the J1939 network protocol in Linux operating systems relates to the reutilization of memory previously freed in the j1939netdevstart function within the net/can/j1939/main.c module. This occurs due to concurrent access to ndev-mlpriv-j1939priv race...

LibTIFF 缓冲区错误漏洞

LibTIFF is a library for reading and writing TIFF Tagged Image File Format files. The library contains some command line tools for working with TIFF files. A security vulnerability exists in LibTIFF version 4.5.0 and earlier versions, which stems from a memory reuse after release issue...

The vulnerability of FortiWeb web applications’ network firewalls, related to the re-release of memory, allows attackers to execute arbitrary code.

The vulnerability of FortiWeb web applications’ network firewalls is related to the re-release of memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

NanoMQ 资源管理错误漏洞

NanoMQ is a lightweight and fast MQTT Broker for IoT edge platforms open-sourced by EMQ Technologies, USA. A security vulnerability exists in NanoMQ version 0.17.2, which stems from improper data tracking and can trigger memory reuse after release by calling the function...

The vulnerability of the Linux operating system’s SCSI kernel driver allows attackers to gain access to protected information.

The vulnerability in the Linux operating system’s SCSI kernel driver is related to the repeated use of previously freed memory in the function iscsiswtcpsessioncreate within the drivers/scsi/iscsitcp.c module. This occurs due to improper error handling of the errors returned by...

UNISOC Chipsets 资源管理错误漏洞

UNISOC Chipsets is a chipset from China's Unisplendour UNISOC. A security vulnerability exists in the UNISOC Chipsets apipe driver module, which stems from the presence of a logic error that results in memory reuse after release...

Linux kernel 资源管理错误漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the presence of a memory reuse after release problem. An attacker exploiting this vulnerability could cause ...

libwebp 资源管理错误漏洞

libwebp is a library for encoding and decoding the WebP image format. A resource management error vulnerability exists in libwebp that stems from a lack of memory in the VP8 encoder, which can lead to memory reuse after release...

PT-2023-36406 · Gnu +1 · Linux +1

Уязвимость реализации сетевого протокола J1939 ядра операционной системы Linux связана с повторным использованием ранее освобожденной в функции j1939 netdev start памяти в модуле net/can/j1939/main.c из-за конкурентного доступа к ndev-ml priv-j1939 priv состояние гонки. Эксплуатация уязвимости...

The vulnerability of the btsdioremove() function in the drivers\bluetooth\btsdio.c driver of the Linux operating system’s Bluetooth kernel allows a attacker to cause a service failure.

The vulnerability of the btsdioremove function in the drivers\bluetooth\btsdio.c driver of the Linux operating system’s Bluetooth kernel relates to the reutilization of previously freed memory due to a race condition. Exploiting this vulnerability could allow an attacker to cause a service failur...

The vulnerability of the indexing filter of the traffic control system tcindex (net/sched/cls_tcindex.c) in the Linux operating system allows a hacker to increase their privileges.

The vulnerability of the indexing filter in the tcindex traffic control system net/sched/clstcindex.c in the Linux operating system is related to improper handling of filters, resulting in the re-release of previously released memory. Exploiting this vulnerability can allow an attacker to increas...

PT-2023-4320

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free vulnerability was found in the cxgb4 driver. The bug occurs when the cxgb4 device is detaching due to a possible rearming of the flower stats timer from the work queue...

Apple Safari 资源管理错误漏洞

Apple Safari is a web browser from Apple Inc. and is the default browser that comes with the Mac OS X and iOS operating systems. Apple Safari version 16.4.1 suffers from a resource management error vulnerability that originates from memory reuse after release. An attacker could exploit this...

Google Chrome Networking APIs Code Execution Vulnerability

Google Chrome is a web browser from Google, an American company. A code execution vulnerability exists in Google Chrome Networking APIs that stems from a memory reuse after release issue in the networking APIs. An attacker could exploit this vulnerability to execute arbitrary code on a system or...

MediaTek 芯片竞争条件问题漏洞

MediaTek chips are a variety of chips from MediaTek, a Chinese company called MediaTek. The MediaTek chips contain a security vulnerability that originates from memory reuse after release. An attacker could exploit the vulnerability to escalate privileges. The following products are affected:...

MediaTek 芯片竞争条件问题漏洞

MediaTek chips are a variety of chips from MediaTek, a Chinese company called MediaTek. The MediaTek chips contain a security vulnerability that originates from memory reuse after release. An attacker could exploit the vulnerability to escalate privileges. The following products are affected:...

MediaTek 芯片资源管理错误漏洞

MediaTek chips are a variety of chips from MediaTek, a Chinese company called MediaTek. The MediaTek chips contain a security vulnerability that originates from memory reuse after release. The vulnerability can be exploited by an attacker to escalate privileges. The following products are affecte...

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser from Google, an American company. A code execution vulnerability exists in Google Chrome Networking APIs that stems from a memory reuse after release issue in the networking APIs. An attacker could exploit this vulnerability to execute arbitrary code on a system or...