CVE-2023-35767 Unauthenticated Remote Denial-of-Service via Shutdown Function in Helix Core

In Helix Core versions prior to 2023.2, an unauthenticated remote Denial of Service DoS via the shutdown function was identified. Reported by Jason Geffner...

PT-2023-25298 · Perforce · Helix Core

Name of the Vulnerable Software and Affected Versions: Helix Core versions prior to 2023.2 Description: An unauthenticated remote Denial of Service DoS via the shutdown function was identified. The issue was reported by Jason Geffner. Recommendations: For Helix Core versions prior to 2023.2, upda...

kernel: mptcp: fix UaF in listener shutdown

In the Linux kernel, the following vulnerability has been resolved: mptcp: fix UaF in listener shutdown As reported by Christoph after having refactored the passive socket initialization, the mptcp listener shutdown path is prone to an UaF issue. BUG: KASAN: use-after-free in...

kernel: drm/radeon: free iio for atombios when driver shutdown

In the Linux kernel, the following vulnerability has been resolved: drm/radeon: free iio for atombios when driver shutdown Fix below kmemleak when unload radeon driver: unreferenced object 0xffff9f8608ede200 size 512: comm "systemd-udevd", pid 326, jiffies 4294682822 age 716.338s hex dump first 3...

kernel: dmaengine: ptdma: check for null desc before calling pt_cmd_callback

AMD PTDMA Pass-Through DMA engine crashes the kernel when ptissuepending encounters empty descriptor queues. The function blindly invokes ptcmdcallback without verifying that a valid descriptor exists, triggering a NULL pointer dereference. This commonly surfaces during system shutdown on AMD...

PT-2025-18878 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A kernel crash can occur during reboot when an adapter is in recovery mode. This issue arises because the i40e init recovery mode function is called when the driver detects firmware in...

Understand Power Actions

When the user clicks on the Shutdown/Restart option within the VDI, you see error in VMware Console. Parameter: ShutdownDesktopsAfterUser $True Autoscale set to keep the machine on all the time i.e Autoscale set at 100%...

CVE-2023-5574 Xorg-x11-server: use-after-free bug in damagedestroy

A use-after-free flaw was found in xorg-x11-server-Xvfb. This issue occurs in Xvfb with a very specific and legacy configuration a multi-screen setup with multiple protocol screens, also known as Zaphod mode. If the pointer is warped from a screen 1 to a screen 0, a use-after-free issue may be...

UBUNTU-CVE-2023-5574

A use-after-free flaw was found in xorg-x11-server-Xvfb. This issue occurs in Xvfb with a very specific and legacy configuration a multi-screen setup with multiple protocol screens, also known as Zaphod mode. If the pointer is warped from a screen 1 to a screen 0, a use-after-free issue may be...

PT-2023-6641

Name of the Vulnerable Software and Affected Versions xorg-x11-server-Xvfb affected versions not specified Description A use-after-free flaw was found in xorg-x11-server-Xvfb, specifically in a multi-screen setup with multiple protocol screens, also known as Zaphod mode. If the pointer is warped...

The vulnerability of the `mm_answer_pam_free_ctx` function in the OpenSSH cryptographic protection mechanism allows a attacker to execute arbitrary code or halt the sshd service.

The vulnerability of the mmanswerpamfreectx function in the OpenSSH cryptographic security tool is related to privilege management errors. Exploiting this vulnerability could allow an attacker to execute arbitrary code or halt the sshd service...

CVE-2021-26737

The Zscaler Client Connector for macOS prior to 3.6 did not sufficiently validate RPC clients. A local adversary without sufficient privileges may be able to shutdown the Zscaler tunnel by exploiting a race condition...

CVE-2021-26737 Privilege Escalation Using PID Reuse in ZCC macOS

The Zscaler Client Connector for macOS prior to 3.6 did not sufficiently validate RPC clients. A local adversary without sufficient privileges may be able to shutdown the Zscaler tunnel by exploiting a race condition...

The vulnerability of the Shutdown_coreserver component in the D-View 8 network device management platform allows a intruder to trigger a service failure.

The vulnerability of the Shutdowncoreserver component in the D-View 8 network device management platform is related to the lack of authentication before granting access to functions. Exploiting this vulnerability could allow a intruder to cause a service failure...

Formbook Takes the Throne as Most Prevalent Malware

By Waqas September 2023’s Most Wanted Malware: Remcos Wreaks Havoc in Colombia and Formbook Takes Top Spot after Qbot Shutdown, reveals Check Point. This is a post from HackRead.com Read the original post: Formbook Takes the Throne as Most Prevalent Malware...

Mozilla Firefox ImageBitmap Post-Release Use Vulnerability

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A post-release use vulnerability exists in Mozilla Firefox ImageBitmap on process shutdown, which can be exploited by a remote attacker to submit a special Web request, tricking the user into parsing i...

PT-2023-5887 · D Link · D-Link D-View

Name of the Vulnerable Software and Affected Versions: D-Link D-View affected versions not specified Description: This issue allows remote attackers to create a denial-of-service condition on affected installations of D-Link D-View. The specific flaw exists within the shutdown coreserver action,...

A QUIC Shutdown: DoS Vulnerability in Windows Servers Running SMB over QUIC

...

CVE-2023-5175

During process shutdown, it was possible that an ImageBitmap was created that would later be used after being freed from a different codepath, leading to a potentially exploitable crash. This vulnerability affects Firefox 118...

UBUNTU-CVE-2023-5175

During process shutdown, it was possible that an ImageBitmap was created that would later be used after being freed from a different codepath, leading to a potentially exploitable crash. This vulnerability affects Firefox 118...