125 matches found
CVE-2022-21971
CVE-2022-21971: prauthproviders에서 초기화되지 않은 포인터 해제 근본 원인 WapAuthProvider::CreateInstance 생성자는 WapAuthProvider 객체0x78바이트를 할당하고 초기화하지만 상태를 완전히 초기화하지 못합니다. 0x50 오프셋의 포인터는 초기화되지 않았으며 소멸자가 호출될 때 해제됩니다WapAuthProvider::WapAuthProvider. prauthproviders!WapAuthProvider::WapAuthProvider+0x38: 00007ffda91f30...
CVE-2022-21974
CVE-2022-21974: RMSRoamingSecurity 원격 코드 실행에서 초기화되지 않은 포인터 해제 근본 원인 RMSRoamingSecurity!ATL::CComCreator ::CreateInstance 생성자는 CRmsRoamingSecurity 객체0x3470바이트를 할당하고 초기화하지만, 상태를 완전히 초기화하는 데 실패합니다. 예를 들어, 오프셋 0x3458에는 소멸자가 호출될 때 해제되는 초기화되지 않은 포인터가 있습니다CRmsRoamingSecurity::Cleanup에서: 0:000...
CVE-2022-21971
CVE-2022-21971: 초기화되지 않은 포인터 해제 prauthproviders 근본 원인 WapAuthProvider::CreateInstance 생성자는 WapAuthProvider 객체0x78 바이트를 할당하고 초기화하지만, 상태를 완전히 초기화하지 못합니다. 오프셋 0x50에 있는 포인터는 초기화되지 않은 상태이며, 소멸자WapAuthProvider::WapAuthProvider가 호출될 때 해제됩니다: prauthproviders!WapAuthProvider::WapAuthProvider+0x38:...
Astra Linux – Vulnerability in netcdf
A issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxmlcharcontent places a pointer to the internal address of a larger block as xml-txt. This pointer is later deallocated using free, resulting in a segmentation fault...
Astra Linux – Vulnerability in OpenLDAP
A flaw was discovered in OpenLDAP before version 2.4.57, which led to an invalid pointer issue and a crash in the slapd process during the saslAuthzTo processing step. This caused a denial-of-service attack...
K000163100: Linux kernel vulnerability CVE-2026-53227
Security Advisory Description In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: fix possible kfreeskb of ERRPTR After the patch in the "Fixes" tag, the allocation of the "reply" skb can happen either before or after locking the ovsmutex. However, error cleanups...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098935)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098935 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtables: zero chainstack array sashiko reports: looking at ebtables table translation...
Unity Linux 20.1050e Security Update: kernel (UTSA-2026-102027)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102027 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtables: zero chainstack array sashiko reports: looking at ebtables table translation...
AZL-93930 CVE-2026-64413 affecting package kernel for versions less than 6.6.145.2-1
In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtables: zero chainstack array sashiko reports: looking at ebtables table translation, could a sparse cpupossiblemask lead to an uninitialized pointer free? If cpupossiblemask is sparse for example, CPU 0 and CPU 2 ar...
CVE-2026-64413
In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtables: zero chainstack array sashiko reports: looking at ebtables table translation, could a sparse cpupossiblemask lead to an uninitialized pointer free? If cpupossiblemask is sparse for example, CPU 0 and CPU 2 ar...
UBUNTU-CVE-2026-64413
In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtables: zero chainstack array sashiko reports: looking at ebtables table translation, could a sparse cpupossiblemask lead to an uninitialized pointer free? If cpupossiblemask is sparse for example, CPU 0 and CPU 2 ar...
AZL-93393 CVE-2026-66034 affecting package libssh2 for versions less than 1.11.1-5
libssh2 through 1.11.1, fixed in commit a13bb6c, contains a missing bounds check vulnerability that allows a malicious SSH server to trigger an arbitrary-length heap out-of-bounds read and a free of an uninitialized pointer via the publickey subsystem. In libssh2publickeylistfetch, the version 1...
AZL-97410 CVE-2026-66034 affecting package rust for versions less than 1.96.0-1
libssh2 through 1.11.1, fixed in commit a13bb6c, contains a missing bounds check vulnerability that allows a malicious SSH server to trigger an arbitrary-length heap out-of-bounds read and a free of an uninitialized pointer via the publickey subsystem. In libssh2publickeylistfetch, the version 1...
CVE-2026-66034
libssh2 through 1.11.1, fixed in commit a13bb6c, contains a missing bounds check vulnerability that allows a malicious SSH server to trigger an arbitrary-length heap out-of-bounds read and a free of an uninitialized pointer via the publickey subsystem. In libssh2publickeylistfetch, the version 1...
AZL-97437 CVE-2026-58051 affecting package rust for versions less than 1.96.0-1
libssh2 through 1.11.1 grows its publickey list with SSH2REALLOC but does not zero-initialize new entries before parsing populates them, so a parse failure reaching the cleanup path leaves libssh2publickeylistfree operating on an uninitialized entry. A malicious SSH server offering the publickey...
AZL-90860 CVE-2026-53227 affecting package kernel for versions less than 6.6.143.1-1
In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: fix possible kfreeskb of ERRPTR After the patch in the "Fixes" tag, the allocation of the "reply" skb can happen either before or after locking the ovsmutex. However, error cleanups still follow the classical...
ROS-20260611-73-0035
The vulnerabilities of the sdlPointerNew and sdlPointerFree functions in the FreeRDP remote desktop protocol are related to the use of memory after it is freed. Exploiting these vulnerabilities can allow a malicious actor to cause service failure...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: vdpa/vpvdpa: fixed an issue where the wrong pointer was passed as an argument to vpvdparemove. In vpvdparemove, the code kfree&vpvdpamgtdev-mgtdev.idtable uses a reference to a pointer as an argument to kfree. This is a wrong...
The vulnerabilities of the sdl_Pointer_New() and sdl_Pointer_Free() functions in the implementation of the FreeRDP remote desktop protocol allow a intruder to cause a service failure.
The vulnerabilities of the sdlPointerNew and sdlPointerFree functions in the FreeRDP remote desktop protocol are related to the use of memory after it is freed. Exploiting these vulnerabilities can allow a malicious actor to cause service failure...