DEBIAN-CVE-2022-1419

The root cause of this vulnerability is that the ioctl$DRMIOCTLMODEDESTROYDUMB can decrease refcount of drmvgemgemobject created in vgemgemdumbcreate concurrently, and vgemgemdumbcreate will access the freed drmvgemgemobject...

GHSA-64MC-2M9P-23C8 Jenkins allows remote authenticated users to bypass intended restrictions and create or destroy arbitrary jobs

Jenkins before 1.583 and LTS before 1.565.3 allows remote authenticated users with the Job/CONFIGURE permission to bypass intended restrictions and create or destroy arbitrary jobs via unspecified vectors...

Libcloud does not properly scrub data when destroying a DigitalOcean node

Libcloud 0.12.3 through 0.13.2 does not set the scrubdata parameter for the destroy DigitalOcean API, which allows local users to obtain sensitive information by leveraging a new VM...

Linux kernel 资源管理错误漏洞

The Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. The Linux kernel suffers from a security vulnerability that allows an attacker to force the reuse of memory areas freed by the Linux kernel via DRMIOCTLMODEDESTROYDUMB to...

CVE-2021-43429

A Denial of Service vulnerability exists in CORTX-S3 Server as of 11/7/2021 via the mempooldestroy method due to a failture to release locks pool-lock...

Double Free

Overview Affected versions of this package are vulnerable to Double Free via the component sixelchunkdestroy at /root/libsixel/src/chunk.c. Remediation There is no fixed version for libsixel. References - GitHub Issue...

PT-2022-8948 · Saitoha · Libsixel

Name of the Vulnerable Software and Affected Versions: saitoha libsixel version 1.8.6 Description: A double free issue was discovered in the sixel chunk destroy component at /root/libsixel/src/chunk.c. Recommendations: For saitoha libsixel version 1.8.6, at the moment, there is no information abo...

PT-2022-7625 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.16.10-1.32.fc32.qubes.x86 64+ 226 Description: The vulnerability is related to the xen/netfront component of the Linux kernel. It occurs because xennet destroy queues relies on info-netdev-real num tx queues t...

GPAC 代码问题漏洞

GPAC is an open source multimedia framework. GPAC suffers from a security vulnerability that stems from a null pointer dereference vulnerability in GPAC v1.1.0, which is implemented through the gf sg destroy routes function on scenegraph vrml route.c. An attacker could exploit this vulnerability ...

CVE-2021-46022

An Use-After-Free vulnerability in recmsetelemdestroy at rec-mset.c of GNU Recutils v1.8.90 can lead to a segmentation fault or application crash...

PT-2022-12508 · Gnu +3 · Gnu Recutils +3

Name of the Vulnerable Software and Affected Versions: GNU Recutils version 1.8.90 Description: The issue is related to an Use-After-Free vulnerability in the rec mset elem destroy function at rec-mset.c. This vulnerability can lead to a segmentation fault or application crash. Recommendations: F...

PT-2022-12507 · Gnu +3 · Gnu Recutils +3

Name of the Vulnerable Software and Affected Versions: GNU Recutils version 1.8.90 Description: The issue is related to an Use-After-Free vulnerability in the rec record destroy function at rec-record.c. This vulnerability can lead to a segmentation fault or application crash. Recommendations: Fo...

PT-2022-12505 · Gnu +3 · Gnu Recutils +3

Name of the Vulnerable Software and Affected Versions: GNU Recutils version 1.8.90 Description: The issue is related to an untrusted pointer dereference in the rec db destroy function at rec-db.c, which can cause a segmentation fault or application crash. Recommendations: For GNU Recutils version...

PT-2025-49697

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s RDMA/siw implementation related to the destruction of Queue Pairs QPs. The issue occurs because QP destruction completion is not delayed until all siw...

PT-2021-8077 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a use-after-free vulnerability in the sctp sock dump function. This vulnerability occurs when the asoc is peeled off and the old sk is freed after getting it by...

PT-2021-8133 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The vulnerability is related to a use-after-free issue in the netfilter component of the Linux kernel. This issue can be exploited to potentially elevate privileges in the system. The...

PT-2021-8160 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a NULL-pointer dereference in the hashtab compute size function of the selinux component in the Linux kernel. When the hash table slot array allocation fails in...

PT-2021-8152 · Linux +6 · Linux Kernel +6

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The vulnerability is related to the mlx5 component of the Linux kernel and is caused by incorrect error handling in the mlx5 internal err ret value function. This can lead to a denial ...

PT-2021-8171 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.15.0-rc5 for upstream min debug 2021 10 14 11 06 Description: The vulnerability is related to a null pointer dereference in the mlx5 debug cq remove function. If mlx5 core destroy cq fails, it proceeds with th...

UVI-2021-1001663 nvme-rdma: destroy cm id before destroy qp to avoid use after free

nvme-rdma: destroy cm id before destroy qp to avoid use after free This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.70 by commit...