UBUNTU-CVE-2015-0808

The webrtc::VPMContentAnalysis::Release function in the WebRTC implementation in Mozilla Firefox before 37.0 uses incompatible approaches to the deallocation of memory for simple-type arrays, which might allow remote attackers to cause a denial of service memory corruption via unspecified vectors...

Microsoft Browser Embedded Media Player Memory Corruption (MS10-082) - Ver2 (CVE-2010-2745)

Windows Media Player is a feature of the Windows operating system for personal computers. It is used for playing audio and video. A remote code execution vulnerability has been reported in Windows Media Player. The vulnerability is due to an error in the Windows Media Player that improperly...

CVE-2014-0701

Cisco Wireless LAN Controller WLC devices 7.0 before 7.0.250.0, 7.2, 7.3, and 7.4 before 7.4.110.0 do not properly deallocate memory, which allows remote attackers to cause a denial of service reboot by sending WebAuth login requests at a high rate, aka Bug ID CSCuf52361...

CVE-2014-0701

Cisco Wireless LAN Controller WLC devices 7.0 before 7.0.250.0, 7.2, 7.3, and 7.4 before 7.4.110.0 do not properly deallocate memory, which allows remote attackers to cause a denial of service reboot by sending WebAuth login requests at a high rate, aka Bug ID CSCuf52361...

Scientific Linux Security Update : rsync on SL5.x i386/x86_64

This updated rsync package fixes the following bug : - The previous rsync security errata update, which was applied with the rsync tool update to version 3.0.6-4, introduced a patch which fixed the issue with missing memory deallocation. Due to an error in that patch, the following new issue...

Debian DSA-2381-1 : squid3 - invalid memory deallocation

It was discovered that the IPv6 support code in Squid does not properly handle certain DNS responses, resulting in deallocation of an invalid pointer and a daemon crash. The squid package and the version of Squid 3 shipped in lenny lack IPv6 support and are not affected by this issue. %NASLMINLEV...

[SECURITY] [DSA 2381-1] squid3 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2381-1 [email protected] http://www.debian.org/security/ Florian Weimer January 06, 2012 http://www.debian.org/security/faq -...

DSA-2381-1 squid3 - invalid memory deallocation

Bulletin has no description...

Moderate: Red Hat Security Advisory: rsync security, bug fix, and enhancement update

An updated rsync package that fixes one security issue, several bugs, and adds enhancements is now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which...

MDVA-2008:171 : gdm

An incorrect memory deallocation was causing a crash when the GNOME display manager was exiting. This package update fixes this issue and includes additional bug fixes and translation updates. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currentl...

Mandriva Update for gdm MDVA-2008:171 (gdm)

Check for the Version of gdm OpenVAS Vulnerability Test Mandriva Update for gdm MDVA-2008:171 gdm Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

Mandriva Update for gdm MDVA-2008:171 (gdm)

Check for the Version of gdm OpenVAS Vulnerability Test Mandriva Update for gdm MDVA-2008:171 gdm Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

GLSA-200502-24 : Midnight Commander: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200502-24 Midnight Commander: Multiple vulnerabilities Midnight Commander contains several format string vulnerabilities CAN-2004-1004, buffer overflows CAN-2004-1005, a memory deallocation error CAN-2004-1092 and a buffer underfl...

Midnight Commander: Multiple vulnerabilities

Background Midnight Commander is a visual console file manager. Description Midnight Commander contains several format string vulnerabilities CAN-2004-1004, buffer overflows CAN-2004-1005, a memory deallocation error CAN-2004-1092 and a buffer underflow CAN-2004-1176. Impact An attacker could...

MIT Kerberos 5 ASN.1 decoding functions insecurely deallocate memory (double-free)

Overview The MIT Kerberos 5 library does not securely deallocate heap memory when decoding ASN.1 structures, resulting in double-free vulnerabilities. An unauthenticated, remote attacker could execute arbitrary code on a KDC server, which could compromise an entire Kerberos realm. An attacker may...

ircd-hybrid 7.0.1 ircd-ratbox 1.5.12.0 - Socket Dequeuing Denial of Service

ircd-hybrid 7.0.1 ircd-ratbox 1.5.12.0 - Socket Dequeuing Denial of Service // source: https://www.securityfocus.com/bid/10572/info A denial of service vulnerability exists in multiple ircd implementations. This exists because of an issue with the deallocation of buffers used by rate limiting...

ircd-hybrid 7.0.1 / ircd-ratbox 1.5.1/2.0 - Socket Dequeuing Denial of Service

// source: https://www.securityfocus.com/bid/10572/info A denial of service vulnerability exists in multiple ircd implementations. This exists because of an issue with the deallocation of buffers used by rate limiting mecahnisms in the ircd. This could result in exhaustion of memory resources on...

OpenSSL ASN.1 parser insecure memory deallocation

Overview A vulnerability in the way OpenSSL deallocates memory used to store ASN.1 structures could allow a remote attacker to execute arbitrary code with the privileges of the process using the OpenSSL library. Description OpenSSL implements the Secure Sockets Layer SSL and Transport Layer...

CVE-2024-32503

An issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 850, Exynos 1080, Exynos 2100, Exynos 1280, Exynos 1380, Exynos 1330, Exynos W920, Exynos W930. The mobile processor lacks proper memory deallocation checking, which can result in a UAF Use-After-Free vulnerability...