AZL-35371 CVE-2021-33461 affecting package yasm 1.3.0-17

An issue was discovered in yasm version 1.3.0. There is a use-after-free in yasmintnumdestroy in libyasm/intnum.c...

AZL-10331 CVE-2021-33461 affecting package yasm 1.3.0-17

An issue was discovered in yasm version 1.3.0. There is a use-after-free in yasmintnumdestroy in libyasm/intnum.c...

The vulnerability in the implementations of preparse_server_key(), free_preparse_server_key(), and destroy_server_key() functions of Linux operating systems allows a hacker to trigger a service failure.

The vulnerability of the preparseserverkey, freepreparseserverkey, and destroyserverkey functions in Linux kernel implementations is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause service failures...

GSD-2022-1003867 tty: goldfish: Use tty_port_destroy() to destroy port

tty: goldfish: Use ttyportdestroy to destroy port This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.247 by commit...

CVE-2022-1419

The root cause of this vulnerability is that the ioctl$DRMIOCTLMODEDESTROYDUMB can decrease refcount of drmvgemgemobject created in vgemgemdumbcreate concurrently, and vgemgemdumbcreate will access the freed drmvgemgemobject...

DEBIAN-CVE-2022-1419

The root cause of this vulnerability is that the ioctl$DRMIOCTLMODEDESTROYDUMB can decrease refcount of drmvgemgemobject created in vgemgemdumbcreate concurrently, and vgemgemdumbcreate will access the freed drmvgemgemobject...

GHSA-64MC-2M9P-23C8 Jenkins allows remote authenticated users to bypass intended restrictions and create or destroy arbitrary jobs

Jenkins before 1.583 and LTS before 1.565.3 allows remote authenticated users with the Job/CONFIGURE permission to bypass intended restrictions and create or destroy arbitrary jobs via unspecified vectors...

Libcloud does not properly scrub data when destroying a DigitalOcean node

Libcloud 0.12.3 through 0.13.2 does not set the scrubdata parameter for the destroy DigitalOcean API, which allows local users to obtain sensitive information by leveraging a new VM...

Linux kernel 资源管理错误漏洞

The Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. The Linux kernel suffers from a security vulnerability that allows an attacker to force the reuse of memory areas freed by the Linux kernel via DRMIOCTLMODEDESTROYDUMB to...

CVE-2021-43429

A Denial of Service vulnerability exists in CORTX-S3 Server as of 11/7/2021 via the mempooldestroy method due to a failture to release locks pool-lock...

Double Free

Overview Affected versions of this package are vulnerable to Double Free via the component sixelchunkdestroy at /root/libsixel/src/chunk.c. Remediation There is no fixed version for libsixel. References - GitHub Issue...

PT-2022-8948 · Saitoha · Libsixel

Name of the Vulnerable Software and Affected Versions: saitoha libsixel version 1.8.6 Description: A double free issue was discovered in the sixel chunk destroy component at /root/libsixel/src/chunk.c. Recommendations: For saitoha libsixel version 1.8.6, at the moment, there is no information abo...

PT-2022-7625 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.16.10-1.32.fc32.qubes.x86 64+ 226 Description: The vulnerability is related to the xen/netfront component of the Linux kernel. It occurs because xennet destroy queues relies on info-netdev-real num tx queues t...

GPAC 代码问题漏洞

GPAC is an open source multimedia framework. GPAC suffers from a security vulnerability that stems from a null pointer dereference vulnerability in GPAC v1.1.0, which is implemented through the gf sg destroy routes function on scenegraph vrml route.c. An attacker could exploit this vulnerability ...

CVE-2021-46022

An Use-After-Free vulnerability in recmsetelemdestroy at rec-mset.c of GNU Recutils v1.8.90 can lead to a segmentation fault or application crash...

PT-2022-12507 · Gnu +3 · Gnu Recutils +3

Name of the Vulnerable Software and Affected Versions: GNU Recutils version 1.8.90 Description: The issue is related to an Use-After-Free vulnerability in the rec record destroy function at rec-record.c. This vulnerability can lead to a segmentation fault or application crash. Recommendations: Fo...

PT-2022-12505 · Gnu +3 · Gnu Recutils +3

Name of the Vulnerable Software and Affected Versions: GNU Recutils version 1.8.90 Description: The issue is related to an untrusted pointer dereference in the rec db destroy function at rec-db.c, which can cause a segmentation fault or application crash. Recommendations: For GNU Recutils version...

PT-2022-12508 · Gnu +3 · Gnu Recutils +3

Name of the Vulnerable Software and Affected Versions: GNU Recutils version 1.8.90 Description: The issue is related to an Use-After-Free vulnerability in the rec mset elem destroy function at rec-mset.c. This vulnerability can lead to a segmentation fault or application crash. Recommendations: F...

PT-2025-49697

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s RDMA/siw implementation related to the destruction of Queue Pairs QPs. The issue occurs because QP destruction completion is not delayed until all siw...

PT-2021-8077 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a use-after-free vulnerability in the sctp sock dump function. This vulnerability occurs when the asoc is peeled off and the old sk is freed after getting it by...