AZL-41338 CVE-2021-33450 affecting package nasm 2.16.01-2

An issue was discovered in NASM version 2.16rc0. There are memory leaks in nasmcalloc in nasmlib/alloc.c...

UBUNTU-CVE-2021-33450

An issue was discovered in NASM version 2.16rc0. There are memory leaks in nasmcalloc in nasmlib/alloc.c...

UBUNTU-CVE-2021-33452

An issue was discovered in NASM version 2.16rc0. There are memory leaks in nasmmalloc in nasmlib/alloc.c...

Nasm 安全漏洞

Nasm is an open source programming tool software by The Nasm Development Team team. A security vulnerability exists in Nasm version 2.16rc0, which stems from a memory leak in its nasmlib/alloc.c component...

A memory leak vulnerability was found in the Linux kernel's eBPF for the Simulated networking device driver in the way user uses BPF for the device such that function nsim_map_alloc_elem being called. A local user could use this flaw to get unauthorized access to some data.

...

GSD-2022-1003377 drm/amdgpu/psp: move PSP memory alloc from hw_init to sw_init

drm/amdgpu/psp: move PSP memory alloc from hwinit to swinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.46 by commit...

A crafted NTFS image can cause a heap-based buffer overflow in ntfs_mft_rec_alloc in NTFS-3G through 2021.8.22.

...

Tuxera NTFS-3G Buffer Overflow Vulnerability (CNVD-2022-82646)

Tuxera NTFS-3G is an open source, cross-platform set of drivers from Tuxera Finland for reading and writing to NTFS partitions. tuxera NTFS-3G is vulnerable to a buffer overflow vulnerability that originates from a boundary error in ntfsmftrecalloc when handling untrusted input, which can be...

CVE-2022-30788

A crafted NTFS image can cause a heap-based buffer overflow in ntfsmftrecalloc in NTFS-3G through 2021.8.22...

PT-2022-5910 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions through 5.16-rc6 Description: An issue in the Linux kernel is related to the function rtw init xmit priv in the drivers/staging/r8188eu/core/rtw xmit.c module, which lacks a check of the return value of rtw alloc hwxmits...

CVE-2021-27439

TencentOS-tiny version 3.1.0 is vulnerable to integer wrap-around in function 'tosmmheapalloc incorrect calculation of effective memory allocation size. This improper memory assignment can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash or a remote code...

The vulnerability of the _zend_shared_memdup function in the PHP programming language allows a attacker to cause a service failure or exert other effects.

The vulnerability of the zendsharedmemdup function zendsharedalloc.c in the PHP programming language is related to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to cause service failures or have other adverse effects...

GSD-2022-1001466 media: staging: media: zoran: move videodev alloc

media: staging: media: zoran: move videodev alloc This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.19 by commit...

GSD-2022-1000663 IB/hfi1: Fix alloc failure with larger txqueuelen

IB/hfi1: Fix alloc failure with larger txqueuelen This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.8 by commit...

UBUNTU-CVE-2022-24683

HashiCorp Nomad and Nomad Enterprise 0.9.2 through 1.0.17, 1.1.11, and 1.2.5 allow operators with read-fs and alloc-exec or job-submit capabilities to read arbitrary files on the host filesystem as root...

PT-2022-2376 · Nginx · Nginx Njs

Name of the Vulnerable Software and Affected Versions: nginx njs version 0.7.2 Description: The issue is related to a Use-after-free in the njs function frame alloc function when it tries to invoke from a restored frame saved with njs function frame save. This can allow a remote attacker to impac...

CVE-2021-46239

The binary MP4Box in GPAC v1.1.0 was discovered to contain an invalid free vulnerability via the function gffree at utils/alloc.c. This vulnerability can lead to a Denial of Service DoS...

DEBIAN-CVE-2021-46239

The binary MP4Box in GPAC v1.1.0 was discovered to contain an invalid free vulnerability via the function gffree at utils/alloc.c. This vulnerability can lead to a Denial of Service DoS...

nf_tables_newset in net/netfilter/nf_tables_api.c in the Linux kernel before 5.12.13 allows local users to cause a denial of service (NULL pointer dereference and general protection fault) because of the missing initialization for nft_set_elem_expr_alloc. A local user can set a netfilter table expression in their own namespace.

...

GPAC 资源管理错误漏洞

GPAC is an open source multimedia framework. GPAC in version v1.1.0 there is a denial of service vulnerability , the vulnerability stems from the function gffree in utils/alloc.c through the existence of an invalid release , an attacker can exploit the vulnerability to perform a denial of service...