Linux kernel 竞争条件问题漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel suffers from a Competitive Condition Issue vulnerability that stems from the sctpdestroysock function causing memory corruption, which triggers a denial of service...

Qualcomm Qualcomm Graphics Resource Management Error Vulnerability

Qualcomm Graphics is a Qualcomm graphics support firmware for use on processors. A resource management error vulnerability exists in Qualcomm Graphics, which arises from a contention between the command commit and destroy contexts that results in invalid contexts being added to the list, and...

Fedora Resource Management Error Vulnerability

Fedora is a set of Linux operating systems from the Fedora community. A security vulnerability exists in Fedora c-ares, which can be exploited by an attacker to force the use of a freed memory region via c-ares' ares destroy to trigger a denial of service and potentially run code...

kernel: use-after-free caused by a malicious USB device in the drivers/usb/class/cdc-acm.c driver

A use-after-free flaw was found in the acmprobe USB subsystem in the Linux kernel. A race condition occurs when a destroy procedure is initiated allowing the refcount to decrement on the interface so early that it is never under counted. A malicious USB device is required for exploit. System...

DEBIAN-CVE-2020-25601

An issue was discovered in Xen through 4.14.x. There is a lack of preemption in evtchnreset / evtchndestroy. In particular, the FIFO event channel model allows guests to have a large number of event channels active at a time. Closing all of these when resetting all event channels or when cleaning...

ALPINE-CVE-2020-25601

An issue was discovered in Xen through 4.14.x. There is a lack of preemption in evtchnreset / evtchndestroy. In particular, the FIFO event channel model allows guests to have a large number of event channels active at a time. Closing all of these when resetting all event channels or when cleaning...

UBUNTU-CVE-2020-25601

An issue was discovered in Xen through 4.14.x. There is a lack of preemption in evtchnreset / evtchndestroy. In particular, the FIFO event channel model allows guests to have a large number of event channels active at a time. Closing all of these when resetting all event channels or when cleaning...

Xen Information Disclosure Vulnerability (CNVD-2020-53818)

Xen is an open source virtual machine monitor product from the University of Cambridge, UK. The product enables different and incompatible operating systems to run on the same computer and supports runtime migration to ensure uptime and avoid downtime. Xen is vulnerable to a code issue. The...

PT-2020-4486 · Openjpeg +9 · Openjpeg +9

Name of the Vulnerable Software and Affected Versions: OpenJPEG versions through 2.3.1 Description: The issue is related to a use-after-free in the jp2/opj decompress.c component of the OpenJPEG library, which can be triggered by a mix of valid and invalid files in a directory operated on by the...

PT-2020-6395 · C-Ares +1 · C-Ares +1

Name of the Vulnerable Software and Affected Versions: c-ares lib version 1.16.0 Description: The issue is related to a possible use-after-free and double-free in the c-ares library. This occurs when ares destroy is called before ares getaddrinfo completes. The flaw could allow an attacker to cra...

ImageMagick: Use after free in ReadICCProfile function in coders/jpeg.c

ImageMagick before 7.0.8-55 has a use-after-free in DestroyStringInfo in MagickCore/string.c because the error manager is mishandled in coders/jpeg.c...

Mozilla: Use-after-free in cubeb during stream destruction

The Mozilla Foundation Security Advisory describes this flaw as: When a device was changed while a stream was about to be destroyed, the stream-reinit task may have been executed after the stream was destroyed, causing a use-after-free and a potentially exploitable crash...

The vulnerability of the i915_ppgtt_close function (drivers/gpu/drm/i915/i915_gem_gtt.c) in Linux kernel allows a hacker to trigger a service failure.

The vulnerability of the i915ppgttclose function drivers/gpu/drm/i915/i915gemgtt.c in Linux kernel systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure through the system call to the Intel i915...

UBUNTU-CVE-2020-7053

In the Linux kernel 4.14 longterm through 4.14.165 and 4.19 longterm through 4.19.96 and 5.x before 5.2, there is a use-after-free write in the i915ppgttclose function in drivers/gpu/drm/i915/i915gemgtt.c, aka CID-7dc40713618c. This is related to i915gemcontextdestroyioctl in...

GDAL Double Release Vulnerability

GDAL is an open source software library for manipulating various raster and vector geospatial data formats. A poolDestroy double-release vulnerability exists in OGRExpatRealloc in ogr/ogrexpat.cpp in GDAL 3.0.1 and earlier when the 10MB threshold is exceeded, and no detailed vulnerability details...

UBUNTU-CVE-2019-6455

An issue was discovered in GNU Recutils 1.8. There is a double-free problem in the function recmsetelemdestroy in the file rec-mset.c...

Possible use-after-free with `proplist::Iterator`

Affected versions contained a possible use-after-free issue with property list iteration due to a lack of a lifetime constraint tying the lifetime of a proplist::Iterator to the Proplist object for which it was created. This made it possible for users, without experiencing a compiler error/warnin...

UBUNTU-CVE-2018-17825

An issue was discovered in AdPlug 2.3.1. There are several double-free vulnerabilities in the CEmuopl class in emuopl.cpp because of a destructor's two OPLDestroy calls, each of which frees TLTABLE, SINTABLE, AMSTABLE, and VIBTABLE...

GHSA-7PHJ-GMGX-2R66 Moderate severity vulnerability that affects activerecord

Withdrawn, accidental duplicate publish. activerecord/lib/activerecord/nestedattributes.rb in Active Record in Ruby on Rails 3.1.x and 3.2.x before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 does not properly implement a certain destroy option,...

How to Use SR-IOV Feature in XenServer

This article describes following items. How to configure SR-IOV Network How to create SR-IOV VLAN network How to assign SR-IOV Network to a VM How to destroy SR-IOV Network Additional steps for NICs that use a legacy driver...