GitLab 13.9 < 17.4.6 / 17.5 < 17.5.4 / 17.6 < 17.6.2 (CVE-2024-9367)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - Allocation of Resources Without Limits or Throttling in GitLab CVE-2024-9367 Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version numbe...

CVE-2024-47539

GStreamer is a library for constructing graphs of media-handling components. An out-of-bounds write vulnerability was identified in the converttos3341a function in isomp4/qtdemux.c. The vulnerability arises due to a discrepancy between the size of memory allocated to the storage array and the loo...

CVE-2024-47539 GHSL-2024-195: GStreamer has an OOB-write in convert_to_s334_1a

GStreamer is a library for constructing graphs of media-handling components. An out-of-bounds write vulnerability was identified in the converttos3341a function in isomp4/qtdemux.c. The vulnerability arises due to a discrepancy between the size of memory allocated to the storage array and the loo...

Amazon Linux 2022 : freetype, freetype-demos, freetype-devel (ALAS2022-2022-033)

It is, therefore, affected by a vulnerability as referenced in the ALAS2022-2022-033 advisory. A heap buffer overflow leading to out-of-bounds write was found in freetype. Memory allocation based on truncated PNG width and height values allows for an out-of-bounds write to occur in application...

CVE-2024-37071

CVE-2024-37071 affects IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) on 10.5, 11.1, and 11.5. An authenticated user could cause a denial of service via a specially crafted query due to improper memory allocation (memory allocation flaw). Affected products include Db2/Db2 Conne...

The vulnerability of the CopyCoder component of the 7-Zip archive, which allows a hacker to trigger a service failure.

The vulnerability of the CopyCoder component in the 7-Zip compressor is related to insufficient memory allocation for operations. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

CVE-2024-52917

Bitcoin Core before 22.0 has a miniupnp infinite loop in which it allocates memory on the basis of random data received over the network, e.g., large M-SEARCH replies from a fake UPnP device...

Denial Of Service (DoS)

github.com/consensys/gnark is vulnerable to a Denial of Service DoS. The vulnerability is due to improper memory allocation handling during the deserialization of Groth16 verification keys, allowing attackers to trigger excessive memory allocation, leading to high memory consumption and potential...

RHEL 7 : qemu-kvm-rhev (RHSA-2016:1654)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2016:1654 advisory. KVM Kernel-based Virtual Machine is a full virtualization solution for Linux on AMD64 and Intel 64 systems. The qemu-kvm-rhev package provid...

PT-2024-6769 · Microsoft · Windows Standards-Based Storage Management Service +1

Name of the Vulnerable Software and Affected Versions: Windows Standards-Based Storage Management Service affected versions not specified Description: The issue is related to insufficient memory allocation for an operation, which can be exploited by a remote attacker to cause a denial of service...

PT-2024-9623 · Gstreamer +10 · Gstreamer +10

Name of the Vulnerable Software and Affected Versions: GStreamer versions prior to 1.24.10 Description: An out-of-bounds write issue was identified in the convert to s334 1a function in isomp4/qtdemux.c. This issue arises due to a discrepancy between the size of memory allocated to the storage...

Unspecified vulnerability in Linux kernel (CNVD-2024-39471)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a memory allocation problem in the nouveau/firmware component. No details of the vulnerability are provided ...

VerneMQ 安全漏洞

VerneMQ is a high-performance distributed MQTT agent from VerneMQ, Inc. A security vulnerability exists in VerneMQ version v2.0.1 that stems from a memory allocation issue allows an attacker to cause a denial of service DoS by over-consuming memory...

CVE-2024-44459

CVE-2024-44459 concerns VerneMQ 2.0.1 with a memory allocation issue that allows an attacker to cause a Denial of Service via excessive memory consumption. Connected sources (Red Hat, NVD, OSV, CNNVD, CVE records) consistently describe the same vulnerable version and impact, with no publicly docu...

CVE-2024-45027

In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Check for xhci-interrupters being allocated in xhcimemclearup If xhcimeminit fails, it calls into xhcimemcleanup to mop up the damage. If it fails early enough, before xhci-interrupters is allocated but after...

IBM MQ Operator Denial of Service Vulnerability

IBM MQ Operator is a tool from International Business Machines IBM for managing the lifecycle of IBM MQ Queue Manager. A denial of service vulnerability exists in IBM MQ Operator versions 2.0.26 and 3.2.4, which stems from improper memory allocation and can be exploited by an attacker to cause a...

PT-2024-28982 · Ibm · Ibm Mq +1

Name of the Vulnerable Software and Affected Versions: IBM MQ versions 9.3 CD and 9.4 LTS/CD IBM MQ Operator versions 2.0.26 and 3.2.4 Description: The issue is related to improper memory allocation, which can cause a segmentation fault, allowing a local user to cause a denial of service...

CVE-2024-41031 mm/filemap: skip to create PMD-sized page cache if needed

In the Linux kernel, the following vulnerability has been resolved: mm/filemap: skip to create PMD-sized page cache if needed On ARM64, HPAGEPMDORDER is 13 when the base page size is 64KB. The PMD-sized page cache can't be supported by xarray as the following error messages indicate. ------------...

CLSA-2024-1718898112 glibc: Fix of 3 CVEs

CVE-2024-33600: nscd: avoid null pointer crashes after notfound response - CVE-2024-33601: fix memory allocation issue in netgroup cache by replacing xmalloc and xrealloc functions to prevent denial of service - CVE-2024-33602: fix memory corruption in netgroup cache by ensuring all strings are...

CLSA-2024-1718897210 glibc: Fix of 3 CVEs

CVE-2024-33600: nscd: avoid null pointer crashes after notfound response - CVE-2024-33601: fix memory allocation issue in netgroup cache by replacing xmalloc and xrealloc functions to prevent denial of service - CVE-2024-33602: fix memory corruption in netgroup cache by ensuring all strings are...