CVE-2021-26111

A missing release of memory after effective lifetime vulnerability in FortiSwitch 6.4.0 to 6.4.6, 6.2.0 to 6.2.6, 6.0.0 to 6.0.6, 3.6.11 and below may allow an attacker on an adjacent network to exhaust available memory by sending specifically crafted LLDP/CDP/EDP packets to the device...

CVE-2021-26111

CVE-2021-26111 affects FortiSwitch memory management: versions 6.4.0–6.4.6, 6.2.0–6.2.6, 6.0.0–6.0.6, 3.6.11 and earlier are vulnerable. A missing release of memory after effective lifetime can allow an attacker on an adjacent network to exhaust available memory by sending specially crafted LLDP/...

CVE-2021-26111

A missing release of memory after effective lifetime vulnerability in FortiSwitch 6.4.0 to 6.4.6, 6.2.0 to 6.2.6, 6.0.0 to 6.0.6, 3.6.11 and below may allow an attacker on an adjacent network to exhaust available memory by sending specifically crafted LLDP/CDP/EDP packets to the device...

The vulnerability of the Cache Manager API of the Squid proxy server allows a hacker to induce a service failure.

The vulnerability of the Squid proxy server’s Cache Manager API component is related to memory release errors. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

PT-2021-3092

Name of the Vulnerable Software and Affected Versions Microsoft HTTP Protocol Stack versions prior to the fixed version Description The issue is related to a memory usage problem after memory release in the HTTP Protocol Stack of Microsoft Windows operating systems. This can be exploited by a...

GHSA-4PV3-63JW-4JW2 Missing Release of Memory after Effective Lifetime in Apache Tika

A carefully crafted or corrupt file may trigger a System.exit in Tika's OneNote Parser. Crafted or corrupted files can also cause out of memory errors and/or infinite loops in Tika's ICNSParser, MP3Parser, MP4Parser, SAS7BDATParser, OneNoteParser and ImageParser. Apache Tika users should upgrade ...

Missing Release of Memory after Effective Lifetime in Apache Tika

A carefully crafted or corrupt file may trigger a System.exit in Tika's OneNote Parser. Crafted or corrupted files can also cause out of memory errors and/or infinite loops in Tika's ICNSParser, MP3Parser, MP4Parser, SAS7BDATParser, OneNoteParser and ImageParser. Apache Tika users should upgrade ...

The vulnerability of the User Mode Driver (UMD) of the Linux kernel, which allows a hacker to trigger a service failure

The vulnerability of the User Mode Driver UMD of the Linux operating system is related to memory release errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the IPv4 tunneling implementation in the Trace TCP/IP protocol stack, related to the repeated memory release, allows a attacker to cause a service failure.

The vulnerability of the IPv4 tunneling implementation in the Trace TCP/IP protocol stack is related to the reallocation of memory. Exploiting this vulnerability can allow a malicious actor to cause service interruptions from a remote location...

The vulnerability of the Link Layer Discovery Protocol implementation in Cisco Small Business RV series routers’ software allows a attacker to cause service failure.

The vulnerability of the Link Layer Discovery Protocol LLDP implementation in Cisco Small Business RV series routers involves improper memory release before deleting last-hop links. Exploiting this vulnerability allows a malicious actor to cause service failures remotely...

The vulnerability in the `pp_tokline` function of the `asm/preproc.c` file of the NASM assembler for the x86 processor architecture allows a attacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the pptokline function in the asm/preproc.c file of the x86 architecture NASM assembler is related to the repeated release of a memory area. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity, and even cause...

The vulnerability in the `default_add_message` function of the `read-catalog.c` file in the GNU project’s library, related to the internationalization of Gettext, allows a hacker to repeatedly release a memory area, enabling them to access confidential data, compromise its integrity, and cause service failures.

The vulnerability in the defaultaddmessage function of the read-catalog.c file in the GNU project’s library is related to the repeated release of a memory area. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity, and even cause...

The vulnerability of Internet Explorer and Microsoft Edge browsers, related to the repeated release of memory, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of Internet Explorer and Microsoft Edge relates to the repeated release of memory. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information...

The vulnerability of the gdhcp component of the Connman connection controller allows a hacker to exploit it to disclose protected information.

The vulnerability of the gdhcp component in the Connman connection controller is related to a memory release error. Exploiting this vulnerability could allow a remote attacker to disclose sensitive information that is protected by this security mechanism...

The vulnerability of the usm_free_usmStateReference function in the software for deploying and using the SNMP protocol Net-SNMP allows a attacker to trigger a service failure.

The vulnerability of the usmfreeusmStateReference function in the software for deploying and using the SNMP protocol Net-SNMP is due to repeated memory release. Exploiting this vulnerability can allow a malicious actor to cause service failures through specially crafted GetBulk requests...

The vulnerability of the SetImageExtent() function in the ImageMagick console graphics editor allows a hacker to cause a service failure.

The vulnerability of the SetImageExtent function /MagickCore/image.c in the console-based graphic editor ImageMagick is related to memory release errors. Exploiting this vulnerability could allow a remote attacker to trigger a service failure by using a specially created file...

The vulnerability of the console-based graphic editor ImageMagick, related to memory release errors, allows a hacker to cause a system failure.

The vulnerability of the console-based graphic editor ImageMagick is related to memory release errors. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause a service failure using a specially created file...

The vulnerability of the ICMP packet processing service in the NX-OS operating system allows a hacker to induce a service failure.

The vulnerability of the ICMP packet processing service in the NX-OS operating system is related to a memory release error. Exploiting this vulnerability could allow a malicious actor to cause a service failure remotely...

The vulnerability of the IPv6 implementation of the Cisco NX-OS network operating system for Cisco routers allows a attacker to cause a service failure.

The vulnerability of the IPv6 implementation of the Cisco NX-OS network operating system’s Cisco routers is related to a memory release error. Exploiting this vulnerability could allow a malicious actor to cause service failure remotely...

ZTE ZXR E all versions up to VRBP Security Vulnerability

The ZTE ZXR10 9904 is a switch device from China's ZTE ZTE. A security vulnerability exists in the ZTE ZXR10 8900E all versions up to V3.03.20R2B30P1, which originates from the product's improper handling of memory release in certain scenarios, resulting in memory leakage and leading to service...