The vulnerability of the Webmail component of the FortiMail email protection system allows a hacker to cause a service failure.

The vulnerability of the Webmail component of the FortiMail email protection system is related to a memory release error. Exploiting this vulnerability could allow an attacker to cause service interruptions by sending specially crafted login requests to the system...

ROS-2-538

2.538 Multiple vulnerabilities in libwebp 1. Vulnerability description: CVE-2020-36332 A vulnerability in the libwebp library for encoding and decoding WebP images, is related to improper control of internal resource consumption. Exploitation of the vulnerability could allow an attacker acting...

Missing Release of Memory after Effective Lifetime in detect-character-encoding

Impact In detect-character-encoding v0.3.0 and earlier, allocated memory is not released. Patches The problem has been patched in detect-character-encoding v0.3.1. CVSS score CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/RL:O/RC:C Base Score: 7.5 High Temporal Score: 7.2 High Since...

GHSA-5RWJ-J5M3-3CHJ Missing Release of Memory after Effective Lifetime in detect-character-encoding

Impact In detect-character-encoding v0.3.0 and earlier, allocated memory is not released. Patches The problem has been patched in detect-character-encoding v0.3.1. CVSS score CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/RL:O/RC:C Base Score: 7.5 High Temporal Score: 7.2 High Since...

CVE-2021-39176 Missing Release of Memory after Effective Lifetime in detect-character-encoding

detect-character-encoding is a package for detecting character encoding using ICU. In detect-character-encoding v0.3.0 and earlier, allocated memory is not released. The problem has been patched in detect-character-encoding v0.3.1...

Use after free in internment

ArcIntern::drop has a race condition where it can release memory which is about to get another user. The new user will get a reference to freed memory. This was fixed by serializing access to an interned object while it is being deallocated. Versions prior to 0.3.12 used stronger locking which...

GHSA-RFGG-VCCR-M46M Missing release of memory in sized-chunks

An issue was discovered in the sized-chunks crate through 0.6.2 for Rust. In the Chunk implementation, clone can have a memory-safety issue upon a panic...

Missing release of memory in sized-chunks

Chunk: Array size is not checked when constructed with unit and pair. Array size is not checked when constructed with From. Clone and insertfrom are not panic-safe; A panicking iterator causes memory safety issues with them. InlineArray: Generates unaligned references for types with a large...

GHSA-X54V-QXXR-93QC Missing release of memory in sized-chunks

Chunk: Array size is not checked when constructed with unit and pair. Array size is not checked when constructed with From. Clone and insertfrom are not panic-safe; A panicking iterator causes memory safety issues with them. InlineArray: Generates unaligned references for types with a large...

The vulnerability of the gatttool disconnect_cb() subroutine in the shared/att.c component of the Bluetooth technology stack for Linux BlueZ allows a intruder to access confidential data, compromise its integrity, and cause a service failure.

The vulnerability of the gatttool disconnectcb subroutine in the shared/att.c component of the Bluetooth technology stack for Linux BlueZ is related to the repeated release of a memory area due to an excessive disconnection event from MGMT. Exploiting this vulnerability allows an attacker to gain...

The vulnerability of the WriteEPTImage function in the coders/ept.c component of the console image editing tool ImageMagick allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures. This vulnerability is related to the repeated release of the memory area, enabling a hacker to access sensitive information.

The vulnerability of the WriteEPTImage function in the coders/ept.c component of the console-based image editing tool ImageMagick is related to the repeated release of a memory area. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, an...

The vulnerability of the `inotify_update_existing_watch()` function in the Linux kernel’s `fs/notify/inotify/inotify_user.c` file, related to a lack of memory release mechanism, allows a malicious actor to trigger a service failure.

The vulnerability of the inotifyupdateexistingwatch function in the fs/notify/inotify/inotifyuser.c file of the Linux operating system’s kernel is related to a lack of memory release mechanism. Exploiting this vulnerability allows an attacker to trigger a service failure...

Advisory ROSA-SA-2021-1803

Software: bind 9.11.4 OS: Cobalt 7.9 CVE-ID: CVE-2018-5744 CVE-Crit: HIGH CVE-DESC: Memory release failure may occur when processing messages with a specific combination of EDNS parameters. Affected versions are BIND 9.10.7 - 9.10.8-P1, 9.11.3 - 9.11.5-P1, 9.12.0 - 9.12.3-P1 and versions 9.10.7-S...

The vulnerability of Xen hypervisors, related to memory release errors, allows a hacker to cause a service failure.

The vulnerability of the Xen hypervisor implementation is related to memory release errors. Exploiting this vulnerability can allow an attacker to cause a service failure by using the XSRESETWATCHES request...

CVE-2021-3544

Several memory leaks were found in the virtio vhost-user GPU device vhost-user-gpu of QEMU in versions up to and including 6.0. They exist in contrib/vhost-user-gpu/vhost-user-gpu.c and contrib/vhost-user-gpu/virgl.c due to improper release of memory i.e., free after effective lifetime...

DEBIAN-CVE-2021-3544

Several memory leaks were found in the virtio vhost-user GPU device vhost-user-gpu of QEMU in versions up to and including 6.0. They exist in contrib/vhost-user-gpu/vhost-user-gpu.c and contrib/vhost-user-gpu/virgl.c due to improper release of memory i.e., free after effective lifetime...

UBUNTU-CVE-2021-3544

Several memory leaks were found in the virtio vhost-user GPU device vhost-user-gpu of QEMU in versions up to and including 6.0. They exist in contrib/vhost-user-gpu/vhost-user-gpu.c and contrib/vhost-user-gpu/virgl.c due to improper release of memory i.e., free after effective lifetime...

The vulnerability of the PostgreSQL database management system’s INSERT...ON_CONFLICT...DOUPDATE implementation allows a perpetrator to gain unauthorized access to protected information.

The vulnerability in the implementation of INSERT commands with ON CONFLICT...DO UPDATE in the PostgreSQL database management system is related to memory release errors. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the UPDATE command implementation in the PostgreSQL database management system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the UPDATE command implementation in the PostgreSQL database management system is related to memory release errors. Exploiting this vulnerability allows an attacker, operating remotely, to gain unauthorized access to protected information...

Design/Logic Flaw

A missing release of memory after effective lifetime vulnerability in FortiSwitch 6.4.0 to 6.4.6, 6.2.0 to 6.2.6, 6.0.0 to 6.0.6, 3.6.11 and below may allow an attacker on an adjacent network to exhaust available memory by sending specifically crafted LLDP/CDP/EDP packets to the device...