Exploit for CVE-2022-21449

CVE-2023-25136 Proof-of-Concept Overview This is a DoS P...

CVE-2023-25136

OpenSSH server sshd 9.1 introduced a double-free vulnerability during options.kexalgorithms handling. This is fixed in OpenSSH 9.2. The double free can be leveraged, by an unauthenticated remote attacker in the default configuration, to jump to any location in the sshd address space. One...

CVE-2023-25136

OpenSSH server sshd 9.1 introduced a double-free vulnerability during options.kexalgorithms handling. This is fixed in OpenSSH 9.2. The double free can be leveraged, by an unauthenticated remote attacker in the default configuration, to jump to any location in the sshd address space. One...

CVE-2023-25136

OpenSSH server sshd 9.1 introduced a double-free vulnerability during options.kexalgorithms handling. This is fixed in OpenSSH 9.2. The double free can be leveraged, by an unauthenticated remote attacker in the default configuration, to jump to any location in the sshd address space. One...

CVE-2023-25136

OpenSSH sshd 9.1 contains a pre-authentication double-free in the handling of options.kex_algorithms, fixed in 9.2. Public reports note a remote, unauthenticated attacker could potentially jump to arbitrary addresses in sshd’s address space, with one third-party saying remote code execution is th...

PT-2023-33469 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.19 Description: The issue is related to a double-free of the elf header buffer in the x86/kexec component. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kern...

CVE-2022-47975

The DUBAI module has a double free vulnerability. Successful exploitation of this vulnerability may affect system availability...

Double free

The DUBAI module has a double free vulnerability. Successful exploitation of this vulnerability may affect system availability...

PT-2023-15539 · Unknown · Dubai Module

Name of the Vulnerable Software and Affected Versions: DUBAI module affected versions not specified Description: The issue is related to a double free vulnerability in the DUBAI module. Successful exploitation of this vulnerability may affect system availability. Recommendations: At the moment,...

CVE-2022-47975

CVE-2022-47975 concerns a double free vulnerability in the DUBAI module. Reported impact is availability degradation with no confidentiality or integrity loss, exploitable over network without authentication and with low attack complexity. The issue is described across multiple sources as affecti...

CVE-2022-47975

The DUBAI module has a double free vulnerability. Successful exploitation of this vulnerability may affect system availability...

CVE-2022-47975

The DUBAI module has a double free vulnerability. Successful exploitation of this vulnerability may affect system availability...

Fedora 36 : woff (2022-706c76c4f0)

The remote Fedora 36 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-706c76c4f0 advisory. Fix a possible double free in woffEncode. - Update License to SPDX - improved summary and description - Add hand-written man pages - Install HTML format...

[SECURITY] [DLA 3232-1] virglrenderer security update

Debian LTS Advisory DLA-3232-1 [email protected] https://www.debian.org/lts/security/ Tobias Frost December 07, 2022 https://wiki.debian.org/LTS Package : virglrenderer Version : 0.7.0-2+deb10u1 CVE ID : CVE-2019-18388 CVE-2019-18389 CVE-2019-18390 CVE-2019-18391 CVE-2020-8002...

CVE-2022-3238

A double-free flaw was found in the Linux kernel’s NTFS3 subsystem in how a user triggers remount and umount simultaneously. This flaw allows a local user to crash or potentially escalate their privileges on the system...

PT-2022-5621

Name of the Vulnerable Software and Affected Versions Microsoft Excel versions prior to the fixed version Microsoft Office versions prior to the fixed version Microsoft 365 Apps for Enterprise versions prior to the fixed version Microsoft Office Excel 2019 x86 - version 2207, build 15427.20210...

CVE-2021-39432

diplib v3.0.0 is vulnerable to Double Free...

PT-2022-10916 · Diplib · Diplib

Name of the Vulnerable Software and Affected Versions: diplib version 3.0.0 Description: The issue is related to a Double Free vulnerability. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploite...

CVE-2022-42915

curl before 7.86.0 has a double free. If curl is told to use an HTTP proxy for a transfer with a non-HTTPS URL, it sets up the connection to the remote server by issuing a CONNECT request to the proxy, and then tunnels the rest of the protocol through. An HTTP proxy might refuse this request HTTP...

CVE-2022-32574

A double-free vulnerability exists in the web interface /action/ipcamSetParamPost functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9X and 6.9Z. A specially-crafted HTTP request can lead to memory corruption. An attacker can make an authenticated HTTP request to trigger this...