ROS-20240514-15

The vulnerability of the file includes/specials/SpecialMovePage.php of the software tool for implementing the MediaWiki hypertext environment is related to incorrect cleanup or release of resources. MediaWiki hypertext environment is related to incorrect resource clearing or freeing. Exploitation...

The vulnerability of the jpc_streamlistremove function (src/libjasper/jpc/jpc_dec.c:2407) in the JPC library, allowing a hacker to trigger a service failure.

The vulnerability of the jpcstreamlistremove function src/libjasper/jpc/jpcdec.c:2407 in the JPC library is related to improper cleaning or release of resources. Exploiting this vulnerability could allow an attacker to cause service failures by using specially created image files...

The vulnerability of the file includes/specials/SpecialMovePage.php, a software tool used to implement the hypertext environment of MediaWiki. This vulnerability allows a malicious actor to cause a service failure.

The vulnerability of the SpecialMovePage.php program, used for implementing the MediaWiki hypertext environment, is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions using the Special:MovePage parameter...

Vulnerability of the Server component: The Information Schema of the Oracle MySQL Server database management system, which allows a hacker to cause a service failure.

Vulnerability of the Server component: The information schema of the Oracle MySQL Server database management system is related to improper cleaning or release of resources. Exploiting this vulnerability may allow a malicious actor to cause service interruptions remotely...

Vulnerability of the Server component: The Optimizer component of the Oracle MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the Oracle MySQL Server component of the database management system’s optimizer is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...

kernel: Linux kernel igb driver: Denial of Service due to improper SR-IOV cleanup

A flaw was found in the Linux kernel's igb driver. When the igb module is loaded with Single Root I/O Virtualization SR-IOV enabled on certain network adapters, and the SR-IOV initialization subsequently fails, the driver does not properly clean up allocated resources. A local user can exploit th...

ROS-20240422-09

Apache Tomcat application server vulnerability is related to incomplete cleanup of temporary or auxiliary resources. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of denial of service...

The vulnerabilities of Intel PROSet/Wireless WiFi and Intel Killer Wi-Fi network devices, related to improper cleaning or freeing up of resources, allow a hacker to trigger a service failure.

The vulnerability of Intel PROSet/Wireless WiFi and Intel Killer Wi-Fi network device drivers is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the SSH daemon on the ArubaOS-Switch operating system’s routers, including the Aruba 5400R, Aruba 3810, Aruba 2920, Aruba 2930F, Aruba 2930M, Aruba 2530, Aruba 2540, Aruba 3800 models, allows a hacker to cause service interruptions.

The vulnerability of the SSH daemon on the ArubaOS-Switch operating system’s routers, including the Aruba 5400R, Aruba 3810, Aruba 2920, Aruba 2930F, Aruba 2930M, Aruba 2530, Aruba 2540, and Aruba 3800 models, is related to improper cleaning or release of resources. Exploiting this vulnerability...

UBUNTU-CVE-2024-26743

In the Linux kernel, the following vulnerability has been resolved: RDMA/qedr: Fix qedrcreateuserqp error flow Avoid the following warning by making sure to free the allocated resources in case that qedrinituserqueue fail. ----------- cut here ----------- WARNING: CPU: 0 PID: 143192 at...

CVE-2024-20354

A vulnerability in the handling of encrypted wireless frames of Cisco Aironet Access Point AP Software could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on the affected device. This vulnerability is due to incomplete cleanup of resources when dropping...

The vulnerability of the EMUI operating system of HarmonyOS and Android relates to improper cleaning or release of resources, allowing attackers to trigger service failures.

The vulnerability of the EMUI operating system of HarmonyOS and Android is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the skb_segment function in the Linux kernel component allows a hacker to cause a service failure.

The vulnerability of the skbsegment function in the Linux kernel component is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause service failures...

SUSE CVE-2023-52569

In the Linux kernel, the following vulnerability has been resolved: btrfs: remove BUG after failure to insert delayed dir index item Instead of calling BUG when we fail to insert a delayed dir index item into the delayed node's tree, we can just release all the resources we have allocated/acquire...

The vulnerability of the f2fs_write_compressed_pages() function in the fs/f2fs/compress.c module of the Linux kernel’s file system f2fs allows a hacker to cause a service failure.

The vulnerability of the f2fswritecompressedpages function in the fs/f2fs/compress.c module of the Linux kernel’s file system f2fs is related to improper cleanup or release of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

SUSE CVE-2023-52457

In the Linux kernel, the following vulnerability has been resolved: serial: 8250: omap: Don't skip resource freeing if pmruntimeresumeandget failed Returning an error code from .remove makes the driver core emit the little helpful error message: remove callback returned a non-zero value. This wil...

DEBIAN-CVE-2023-52457

In the Linux kernel, the following vulnerability has been resolved: serial: 8250: omap: Don't skip resource freeing if pmruntimeresumeandget failed Returning an error code from .remove makes the driver core emit the little helpful error message: remove callback returned a non-zero value. This wil...

PT-2024-7568 · Unknown · Libiec61850

Name of the Vulnerable Software and Affected Versions: libiec61850 versions 1.5.3 and earlier Description: The issue is related to the mmsServer handleDeleteNamedVariableListRequest function in the libIEC61850 library, which is associated with incorrect resource cleanup or deallocation. This can ...

The vulnerability of the SEV-SNP secure nested paging implementation for virtual machines running on AMD processor-based servers allows a attacker to compromise the integrity of the protected information.

The vulnerability of the SEV-SNP secure nested paging implementation for virtual machines running on AMD processor-based servers is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor to compromise the integrity of the protected...

The vulnerability of the protect_dir function (pam_namespace.so) in the Linux-PAM authentication module allows a attacker to cause a service failure.

The vulnerability of the protectdir function in the Linux-PAM authentication module pamnamespace.so is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...