MGASA-2022-0488 Updated libtar packages fix security vulnerability

After tarclose, libtar.c releases the memory pointed to by pointer t. After tarclose is called in the list function, it continues to use pointer t: freelonglinklongnamet-thbuf . As a result, the released memory is used use-after-free. CVE-2021-33640...

Fedora 36 : libtar (2022-ccc68b06cc)

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-ccc68b06cc advisory. - fix use-after-free bugs introduced by incorrect memleak fixes CVE-2021-33640 Tenable has extracted the preceding description block directly from t...

CVE-2021-33640

CVE-2021-33640 is a use-after-free in libtar after tar_close() in tar_close/t->th_buf handling (free_longlink_longname). The issue is documented across multiple advisories and scanners: EulerOS (EulerOS-SA-2023-1575/1585), TencentOS/TSSA-2023:0136, Oracle Linux ELSA-2023-2898, Fedora 2022 advi...

CVE-2021-33640

After tarclose, libtar.c releases the memory pointed to by pointer t. After tarclose is called in the list function, it continues to use pointer t: freelonglinklongnamet-thbuf . As a result, the released memory is used use-after-free...

Linux kernel 资源管理错误漏洞

The Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. A security vulnerability exists in the Linux kernel, which stems from the fact that an attacker can force the Linux kernel to free up memory via split2MBgttentry resulting in a denial of service and...

The vulnerability of Moxa VPORT 06EC-2V IP camera software and Moxa VPort 461A video encoder software, related to memory release errors, allows a intruder to trigger a service failure.

The vulnerability of Moxa VPORT 06EC-2V IP camera microprogramming software and Moxa VPort 461A video encoder microprogramming software is related to memory release errors. Exploiting this vulnerability can allow an attacker to cause service failure by sending specially crafted packets...

CVE-2022-29515

Missing release of memory after effective lifetime in firmware for IntelR SPS before versions SPSE306.00.03.035.0 may allow a privileged user to potentially enable denial of service via local access...

CVE-2022-29515

Missing release of memory after effective lifetime in firmware for IntelR SPS before versions SPSE306.00.03.035.0 may allow a privileged user to potentially enable denial of service via local access...

CVE-2022-29515

Missing release of memory after effective lifetime in firmware for IntelR SPS before versions SPSE306.00.03.035.0 may allow a privileged user to potentially enable denial of service via local access...

PT-2022-19671 · Intel · Intel Sps

Name of the Vulnerable Software and Affected Versions: IntelR SPS versions prior to SPS E3 06.00.03.035.0 Description: The issue is related to a missing release of memory after its effective lifetime in the firmware for IntelR SPS. This could allow a privileged user to potentially enable denial o...

CVE-2022-44546

The kernel module has the vulnerability that the mapping is not cleared after the memory is automatically released. Successful exploitation of this vulnerability may cause a system restart...

PT-2022-27230 · Unknown · Kernel Module

Name of the Vulnerable Software and Affected Versions: Kernel module affected versions not specified Description: The issue is related to a kernel module that fails to clear mapping after automatic memory release. This can potentially lead to a system restart if exploited. Recommendations: At the...

The vulnerability of the cURL command-line utility, related to the repeated release of memory, allows a hacker to execute arbitrary code.

The vulnerability of the command-line tool cURL is related to the repeated release of memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ROS-20221103-01

Vim text editor vulnerability is related to memory release error in qfupdatebuffer function in the quickfix.c file of the autocmd Handler component. Exploitation of the vulnerability could allow an attacker, acting remotely, trick the victim into opening a specially crafted file, causing a progra...

PT-2022-7332 · Xenstore +1 · Xenstore +1

Name of the Vulnerable Software and Affected Versions: Xenstore affected versions not specified Description: The issue is related to errors in memory release due to the creation of an arbitrary number of nodes via transactions. This can enable a malicious guest to create an arbitrary number of...

PT-2022-7319 · Xenstore +1 · Xenstore +1

Name of the Vulnerable Software and Affected Versions: Xenstore affected versions not specified Description: The issue allows guests to create an arbitrary number of nodes via transactions. If a node is created in a transaction and later deleted in the same transaction, the transaction will be...

Vulnerability of the l2cap_recv_acldata() function (net/bluetooth/l2cap_core.c) in Linux operating system kernels, allowing a hacker to trigger a service failure

The vulnerability of the l2caprecvacldata function net/bluetooth/l2capcore.c in Linux operating systems is related to memory release errors. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability of the Garbage Collector component of the JavaScript script handler in Mozilla Firefox, Firefox ESR, and the email client Thunderbird allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the Garbage Collector component of the JavaScript script handler in Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to improper release of memory segments. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause a service...

Exim 资源管理错误漏洞

Exim is an open source messaging agent MTA that runs on Unix systems and is responsible for routing, forwarding and delivering mail. Exim suffers from a resource management error vulnerability that stems from the presence of a memory reuse after release issue...

ROS-20221007-03

Vim text editor vulnerability is related to a memory release error in the function didsetstringoption of the optionstr.c file. Exploitation of the vulnerability could allow an attacker, acting remotely, trick the victim into opening a specially crafted file, crashing the program, and executing...