1412 matches found
CVE-2022-4450 Double free after calling PEM_read_bio_ex
The function PEMreadbioex reads a PEM file from a BIO and parses and decodes the "name" e.g. "CERTIFICATE", any header data and the payload data. If the function succeeds then the "nameout", "header" and "data" arguments are populated with pointers to buffers containing the relevant decoded data...
CVE-2022-4450
A double-free vulnerability was found in OpenSSL's PEMreadbioex function. The function PEMreadbioex reads a PEM file from a BIO and parses and decodes the "name" for example, "CERTIFICATE", any header data, and the payload data. If the function succeeds, then the "nameout," "header," and "data"...
Exploit for CVE-2022-21449
CVE-2023-25136 Proof-of-Concept Overview This is a DoS P...
CVE-2023-25136
OpenSSH server sshd 9.1 introduced a double-free vulnerability during options.kexalgorithms handling. This is fixed in OpenSSH 9.2. The double free can be leveraged, by an unauthenticated remote attacker in the default configuration, to jump to any location in the sshd address space. One...
CVE-2023-25136
OpenSSH server sshd 9.1 introduced a double-free vulnerability during options.kexalgorithms handling. This is fixed in OpenSSH 9.2. The double free can be leveraged, by an unauthenticated remote attacker in the default configuration, to jump to any location in the sshd address space. One...
CVE-2023-25136
OpenSSH sshd 9.1 contains a pre-authentication double-free in the handling of options.kex_algorithms, fixed in 9.2. Public reports note a remote, unauthenticated attacker could potentially jump to arbitrary addresses in sshd’s address space, with one third-party saying remote code execution is th...
CVE-2023-25136
OpenSSH server sshd 9.1 introduced a double-free vulnerability during options.kexalgorithms handling. This is fixed in OpenSSH 9.2. The double free can be leveraged, by an unauthenticated remote attacker in the default configuration, to jump to any location in the sshd address space. One...
PT-2023-33469 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.19 Description: The issue is related to a double-free of the elf header buffer in the x86/kexec component. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kern...
CVE-2022-47975
The DUBAI module has a double free vulnerability. Successful exploitation of this vulnerability may affect system availability...
Double free
The DUBAI module has a double free vulnerability. Successful exploitation of this vulnerability may affect system availability...
CVE-2022-47975
The DUBAI module has a double free vulnerability. Successful exploitation of this vulnerability may affect system availability...
CVE-2022-47975
The DUBAI module has a double free vulnerability. Successful exploitation of this vulnerability may affect system availability...
CVE-2022-47975
CVE-2022-47975 concerns a double free vulnerability in the DUBAI module. Reported impact is availability degradation with no confidentiality or integrity loss, exploitable over network without authentication and with low attack complexity. The issue is described across multiple sources as affecti...
PT-2023-15539 · Unknown · Dubai Module
Name of the Vulnerable Software and Affected Versions: DUBAI module affected versions not specified Description: The issue is related to a double free vulnerability in the DUBAI module. Successful exploitation of this vulnerability may affect system availability. Recommendations: At the moment,...
Fedora 36 : woff (2022-706c76c4f0)
The remote Fedora 36 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-706c76c4f0 advisory. Fix a possible double free in woffEncode. - Update License to SPDX - improved summary and description - Add hand-written man pages - Install HTML format...
[SECURITY] [DLA 3232-1] virglrenderer security update
Debian LTS Advisory DLA-3232-1 [email protected] https://www.debian.org/lts/security/ Tobias Frost December 07, 2022 https://wiki.debian.org/LTS Package : virglrenderer Version : 0.7.0-2+deb10u1 CVE ID : CVE-2019-18388 CVE-2019-18389 CVE-2019-18390 CVE-2019-18391 CVE-2020-8002...
CVE-2022-3238
A double-free flaw was found in the Linux kernel’s NTFS3 subsystem in how a user triggers remount and umount simultaneously. This flaw allows a local user to crash or potentially escalate their privileges on the system...
PT-2022-5621
Name of the Vulnerable Software and Affected Versions Microsoft Excel versions prior to the fixed version Microsoft Office versions prior to the fixed version Microsoft 365 Apps for Enterprise versions prior to the fixed version Microsoft Office Excel 2019 x86 - version 2207, build 15427.20210...
PT-2022-10916 · Diplib · Diplib
Name of the Vulnerable Software and Affected Versions: diplib version 3.0.0 Description: The issue is related to a Double Free vulnerability. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploite...