Security Advisory - Resource Management Error Vulnerability in Huawei CloudEngine 1800V Product

CloudEngine 1800V product has a resource management error vulnerability. Remote unauthorized attackers could send specific types of messages to the device, resulting in the message received by the system can't be forwarded normally. Vulnerability ID: HWPSIRT-2020-86502 This vulnerability has been...

Gorilla Websocket Resource Management Error Vulnerability

Gorilla Websocket is a Go-based implementation of the Websocket codebase by the individual developers of Gorilla. A resource management error vulnerability exists in Gorilla WebSocket versions prior to 1.4.0, which stems from an integer overflow vulnerability in the length of a websocket frame...

WebKitGTK 资源管理错误漏洞

WebKitGTK is a full-featured port of the WebKit rendering engine.A post-release reuse vulnerability exists in the WebSocket functionality of WebKitGTK 2.30.0. An attacker could exploit the vulnerability to achieve remote code execution by tricking a user into visiting a specially crafted web page...

Linux kernel 资源管理错误漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A use-after-free vulnerability exists in versions of Linux kernel prior to 5.2.6, which stems from the fact that on NUMA systems, the Linux fair scheduler has a use-after-free ...

[SECURITY] Fedora 32 Update: pacemaker-2.0.5-0.7.rc3.fc32

Pacemaker is an advanced, scalable High-Availability cluster resource manager. It supports more than 16 node clusters with significant capabilities for managing resources and dependencies. It will run scripts at initialization, when machines go up or down, when related resources fail and can be...

Zetetic Sqlcipher Resource Management Error Vulnerability

Zetetic Sqlcipher is a SqlLite-based database from Zetetic USA. The database provides a SqlLite-like access API while adding numerous security elements. A resource management error vulnerability exists in Zetetic SQLCipher versions 4.x through 4.4.1, which stems from sqlciphercodecpragma and...

Mongodb Server Resource Management Error Vulnerability

Mongodb Server is the United States Mongodb company's set of open source NoSQL database . The database provides collection-oriented storage , dynamic query , data replication and automatic failover and other functions . A security vulnerability exists in MongoDB Server that originates from the...

Zetetic Sqlcipher 资源管理错误漏洞

Zetetic Sqlcipher is a SqlLite-based database from Zetetic USA. The database provides a SqlLite-like access API while adding numerous security elements. A resource management error vulnerability exists in Zetetic SQLCipher versions 4.x through 4.4.1, which stems from sqlciphercodecpragma and...

EDK II Resource Management Error Vulnerability

EDK II is a modern, feature-rich cross-platform firmware development environment for UEFI and the UEFI Platform Initialization PI specification. EDK II suffers from a resource management error vulnerability that can be exploited by an attacker to cause a denial of service...

Mozilla Firefox Resource Management Error Vulnerability (CNVD-2021-07320)

Mozilla Firefox and Mozilla Firefox ESR are both products of the Mozilla Foundation in the U.S. Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox web browser. The FireFox product suffers from a resource management error vulnerability that...

WebKitGTK Resource Management Error Vulnerability

WebKitGTK is a full-featured port of the WebKit rendering engine for projects that require any type of web integration, from hybrid HTML/CSS applications to full-fledged web browsers. It provides the full functionality of WebKit for a wide range of systems from desktop computers to embedded syste...

Xpdf Resource Management Error Vulnerability (CNVD-2021-02629)

Xpdf is a free PDF viewer and toolkit that includes a text extractor, image converter, HTML converter and more. Xpdf 4.02 has a resource management error vulnerability. The vulnerability stems from SplashOutputDev::endType3CharGfxState state SplashOutputDev.cc:3079 attempts to use the freed...

Xpdf 资源管理错误漏洞

Xpdf is a free PDF viewer and toolkit that includes a text extractor, image converter, HTML converter and more. Xpdf 4.02 has a resource management error vulnerability. The vulnerability stems from SplashOutputDev::endType3CharGfxState state SplashOutputDev.cc:3079 attempts to use the freed...

GaussDB Kernel: Resource Labels

You can add a resource label to a group of database resources to control them, improving resource management efficiency. Therefore, you are advised to enable enablesecuritypolicy. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are...

Mitsubishi Electric MELSEC iQ-R series Resource Management Error Vulnerability

The Mitsubishi Electric MELSEC iQ-R series is a programmable logic controller from Mitsubishi Electric Japan. The MELSEC iQ-R series suffers from a resource management error vulnerability that originates when the module receives a specially crafted SLMP packet from a malicious attacker, which may...

OpenWrt Resource Management Error Vulnerability

OpenWrt is a Linux operating system for embedded devices. A security vulnerability exists in libuci in OpenWrt versions prior to 18.06.9 and 19.x series versions prior to 19.07.5, which stems from the possibility of encountering the use of a malware package name after using free. This is related ...

Mozilla Firefox 资源管理错误漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. FireFox suffers from a post-release reuse vulnerability that originates from a reference reduction that may occur on a previously released object during a browser shutdown, leading to post-release use,...

Mozilla Firefox 安全漏洞

Mozilla Firefox and Mozilla Firefox ESR are both products of the Mozilla Foundation in the U.S. Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox web browser. The FireFox product suffers from a resource management error vulnerability that...

Oracle GraalVM Resource Management Error Vulnerability

Oracle GraalVM is the United States Oracle Oracle company's set of instant compilers written in the Java language. The product supports multiple programming languages and execution modes. A resource management error vulnerability exists in Oracle GraalVM Enterprise Edition of Oracle GraalVM, whic...

PostgreSQL Resource Management Error Vulnerability

PostgreSQL is a free object-relational database management system from the PostgreSQL organization. A resource management error vulnerability exists in the PostgreSQL product that stems from if security-related parameters are dropped, an attacker could use this vulnerability to complete a MITM...