ARM Mali GPU Kernel Driver Resource Management Error Vulnerability

The ARM Mali GPU Kernel Driver is a driver for a graphics processor unit from ARM UK. A security vulnerability exists in the ARM Mali GPU Kernel Driver that stems from the presence of post-release reuse, which allows a local, unprivileged user to perform incorrect memory handling operations by...

UBUNTU-CVE-2021-47050

In the Linux kernel, the following vulnerability has been resolved: memory: renesas-rpc-if: fix possible NULL pointer dereference of resource The platformgetresourcebyname can return NULL which would be immediately dereferenced by resourcesize. Instead dereference it after validating the resource...

Security Bulletin: IBM WebSphere Application Server Liberty could provide weaker than expected security (CVE-2023-46158)

Summary IBM WebSphere Application Server Liberty could provide weaker than expected security with the appSecurity-1.0, appSecurity-2.0, appSecurity-3.0, appSecurity-4.0 or appSecurity-5.0 feature enabled. Vulnerability Details CVEID:CVE-2023-46158 DESCRIPTION: IBM WebSphere Application Server...

PT-2023-6313 · Hewlett Packard · Hp Displays

Name of the Vulnerable Software and Affected Versions: HP Displays affected versions not specified Description: A potential security issue has been identified in certain HP Displays that support the Theft Deterrence feature. This issue may allow a monitor's Theft Deterrence to be deactivated. The...

PT-2023-5195 · Gnu +4 · Binutils +4

Name of the Vulnerable Software and Affected Versions: Binutils versions prior to 2.39.3 Description: The issue is related to the compare symbols function in objdump.c and is caused by incorrect clearing or release of resources. This can be exploited by an attacker to cause a denial of service or...

Cisco MDS 9000 Series Switches Denial of Service (CVE-2020-3175)

A vulnerability in the resource handling system of Cisco NX-OS Software for Cisco MDS 9000 Series Multilayer Switches could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to improper resource usage control. An...

CVE-2022-20920

A vulnerability in the SSH implementation of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause an affected device to reload. This vulnerability is due to improper handling of resources during an exceptional situation. An attacker could exploit thi...

UBUNTU-CVE-2022-41317

An issue was discovered in Squid 4.9 through 4.17 and 5.0.6 through 5.6. Due to inconsistent handling of internal URIs, there can be Exposure of Sensitive Information about clients using the proxy via an HTTPS request to an internal cache manager URL. This is fixed in 5.7...

[SECURITY] Fedora 36 Update: golang-github-geertjohan-rice-1.0.2-6.fc36

Go.rice is a Go package that makes working with resources such as html,js,css,images,templates, etc very easy...

[SECURITY] Fedora 35 Update: golang-github-geertjohan-rice-1.0.2-5.fc35

Go.rice is a Go package that makes working with resources such as html,js,css,images,templates, etc very easy...

[SECURITY] Fedora 36 Update: golang-github-geertjohan-rice-1.0.2-5.fc36

Go.rice is a Go package that makes working with resources such as html,js,css,images,templates, etc very easy...

Improper Limitation of a Pathname to a Restricted Directory in Spring Framework

Directory traversal vulnerability in Pivotal Spring Framework 3.0.4 through 3.2.x before 3.2.12, 4.0.x before 4.0.8, and 4.1.x before 4.1.2 allows remote attackers to read arbitrary files via unspecified vectors, related to static resource handling...

GHSA-HHM4-HWQ6-3C6W Improper Limitation of a Pathname to a Restricted Directory in Spring Framework

Directory traversal vulnerability in Pivotal Spring Framework 3.0.4 through 3.2.x before 3.2.12, 4.0.x before 4.0.8, and 4.1.x before 4.1.2 allows remote attackers to read arbitrary files via unspecified vectors, related to static resource handling...

PT-2021-8225 · Linux +6 · Linux Kernel +6

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to errors in resource management within the ovl component of the Linux kernel, specifically in the ovl create real and ovl mkdir real functions. This can potential...

Foxit PDF Reader 资源管理错误漏洞

Foxit PDF Reader formerly known as Foxit Reader is a set of software used to read PDF format files, developed by Foxit Software Fujian. The vulnerability stems from not verifying the existence of the object before performing operations on it. An attacker could exploit this vulnerability to execut...

Exim 资源管理错误漏洞

Exim is an open source messaging agent MTA running on Unix systems that routes, forwards and delivers mail. Exim suffers from a Resource Management Error vulnerability that stems from improper resource management within the application. An attacker could exploit this vulnerability to cause a deni...

The vulnerability of the supplement for handling resource division between Flask-CORS sources relates to the lack of mechanisms for controlling initialized resources. This allows attackers to gain access to confidential data.

The vulnerability of the CORS source handling mechanism for resource division involves incorrect checking of the path name. Exploiting this vulnerability could allow an attacker, operating remotely, to access confidential data...

USN-4668-4 python-apt vulnerability

USN-4668-1 fixed a vulnerability in python-apt. This update provides the corresponding update for Ubuntu 14.04 ESM. Original advisory details: Kevin Backhouse discovered that python-apt incorrectly handled resources. A local attacker could possibly use this issue to cause python-apt to consume...

USN-4668-3 python-apt regression

USN-4668-1 fixed vulnerabilities in python-apt. The update caused a regression when using certain APIs with a file handle. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Kevin Backhouse discovered that python-apt incorrectly handled resources. A loca...

Cisco Firepower Management Center Denial of Service Vulnerability

Cisco Firepower Management Center FMC is a new generation of firewall management center software from Cisco. A security vulnerability exists in Cisco Firepower Management Center FMC. The vulnerability is caused due to mishandling of system resource values on the affected system. An attacker could...