1474 matches found
ALPINE-CVE-2020-25601
An issue was discovered in Xen through 4.14.x. There is a lack of preemption in evtchnreset / evtchndestroy. In particular, the FIFO event channel model allows guests to have a large number of event channels active at a time. Closing all of these when resetting all event channels or when cleaning...
UBUNTU-CVE-2020-25601
An issue was discovered in Xen through 4.14.x. There is a lack of preemption in evtchnreset / evtchndestroy. In particular, the FIFO event channel model allows guests to have a large number of event channels active at a time. Closing all of these when resetting all event channels or when cleaning...
Xen Information Disclosure Vulnerability (CNVD-2020-53818)
Xen is an open source virtual machine monitor product from the University of Cambridge, UK. The product enables different and incompatible operating systems to run on the same computer and supports runtime migration to ensure uptime and avoid downtime. Xen is vulnerable to a code issue. The...
PT-2020-4486 · Openjpeg +9 · Openjpeg +9
Name of the Vulnerable Software and Affected Versions: OpenJPEG versions through 2.3.1 Description: The issue is related to a use-after-free in the jp2/opj decompress.c component of the OpenJPEG library, which can be triggered by a mix of valid and invalid files in a directory operated on by the...
PT-2020-6395 · C-Ares +1 · C-Ares +1
Name of the Vulnerable Software and Affected Versions: c-ares lib version 1.16.0 Description: The issue is related to a possible use-after-free and double-free in the c-ares library. This occurs when ares destroy is called before ares getaddrinfo completes. The flaw could allow an attacker to cra...
ImageMagick: Use after free in ReadICCProfile function in coders/jpeg.c
ImageMagick before 7.0.8-55 has a use-after-free in DestroyStringInfo in MagickCore/string.c because the error manager is mishandled in coders/jpeg.c...
Mozilla: Use-after-free in cubeb during stream destruction
The Mozilla Foundation Security Advisory describes this flaw as: When a device was changed while a stream was about to be destroyed, the stream-reinit task may have been executed after the stream was destroyed, causing a use-after-free and a potentially exploitable crash...
The vulnerability of the i915_ppgtt_close function (drivers/gpu/drm/i915/i915_gem_gtt.c) in Linux kernel allows a hacker to trigger a service failure.
The vulnerability of the i915ppgttclose function drivers/gpu/drm/i915/i915gemgtt.c in Linux kernel systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure through the system call to the Intel i915...
UBUNTU-CVE-2020-7053
In the Linux kernel 4.14 longterm through 4.14.165 and 4.19 longterm through 4.19.96 and 5.x before 5.2, there is a use-after-free write in the i915ppgttclose function in drivers/gpu/drm/i915/i915gemgtt.c, aka CID-7dc40713618c. This is related to i915gemcontextdestroyioctl in...
Splunk Attack Range - A Tool That Allows You To Create Vulnerable Instrumented Local Or Cloud Environments To Simulate Attacks Against And Collect The Data Into Splunk
The Attack Range solves two main challenges in development of detections. First, it allows the user to quickly build a small lab infrastructure as close as possible to your production environment. This lab infrastructure contains a Windows Domain Controller, Windows Workstation and Linux server,...
GDAL Double Release Vulnerability
GDAL is an open source software library for manipulating various raster and vector geospatial data formats. A poolDestroy double-release vulnerability exists in OGRExpatRealloc in ogr/ogrexpat.cpp in GDAL 3.0.1 and earlier when the 10MB threshold is exceeded, and no detailed vulnerability details...
UBUNTU-CVE-2019-6455
An issue was discovered in GNU Recutils 1.8. There is a double-free problem in the function recmsetelemdestroy in the file rec-mset.c...
Possible use-after-free with `proplist::Iterator`
Affected versions contained a possible use-after-free issue with property list iteration due to a lack of a lifetime constraint tying the lifetime of a proplist::Iterator to the Proplist object for which it was created. This made it possible for users, without experiencing a compiler error/warnin...
UBUNTU-CVE-2018-17825
An issue was discovered in AdPlug 2.3.1. There are several double-free vulnerabilities in the CEmuopl class in emuopl.cpp because of a destructor's two OPLDestroy calls, each of which frees TLTABLE, SINTABLE, AMSTABLE, and VIBTABLE...
GHSA-7PHJ-GMGX-2R66 Moderate severity vulnerability that affects activerecord
Withdrawn, accidental duplicate publish. activerecord/lib/activerecord/nestedattributes.rb in Active Record in Ruby on Rails 3.1.x and 3.2.x before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 does not properly implement a certain destroy option,...
How to Use SR-IOV Feature in XenServer
This article describes following items. How to configure SR-IOV Network How to create SR-IOV VLAN network How to assign SR-IOV Network to a VM How to destroy SR-IOV Network Additional steps for NICs that use a legacy driver...
php: Use after free in wddx_deserialize
Use-after-free vulnerability in the wddxstackdestroy function in ext/wddx/wddx.c in PHP before 5.6.26 and 7.x before 7.0.11 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a wddxPacket XML document that lacks an end-tag for a recordset field...
DEBIAN-CVE-2017-18203
The dmgetfromkobject function in drivers/md/dm.c in the Linux kernel before 4.14.3 allow local users to cause a denial of service BUG by leveraging a race condition with dmdestroy during creation and removal of DM devices...
UBUNTU-CVE-2017-18203
The dmgetfromkobject function in drivers/md/dm.c in the Linux kernel before 4.14.3 allow local users to cause a denial of service BUG by leveraging a race condition with dmdestroy during creation and removal of DM devices...