jetty: double release of resource can lead to information disclosure

In Eclipse Jetty, versions 9.4.27.v20200227 to 9.4.29.v20200521, in case of too large response headers, Jetty throws an exception to produce an HTTP 431 error. When this happens, the ByteBuffer containing the HTTP response headers is released back to the ByteBufferPool twice. Because of this doub...

jetty: double release of resource can lead to information disclosure

In Eclipse Jetty, versions 9.4.27.v20200227 to 9.4.29.v20200521, in case of too large response headers, Jetty throws an exception to produce an HTTP 431 error. When this happens, the ByteBuffer containing the HTTP response headers is released back to the ByteBufferPool twice. Because of this doub...

Adobe Animate Double Release Vulnerability

Adobe Animate is a multimedia authoring and computer animation program. A double release vulnerability exists in Adobe Animate 20.5 and earlier versions. An attacker can exploit this vulnerability to achieve arbitrary code execution...

Eclipse Jetty Vulnerability (CVE-2019-17638) - Windows

Eclipse Jetty is prone to a vulnerability where sensitive information about clients could be obtained. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Information Disclosure

jetty-server is vulnerable to information disclosure. An HTTP 431 error occurs when large response headers are received, causing the HTTP response headers to be released to ByteBufferPool twice. This results in a double release and memory corruption and causes confidential information to be...

UBUNTU-CVE-2019-17638

In Eclipse Jetty, versions 9.4.27.v20200227 to 9.4.29.v20200521, in case of too large response headers, Jetty throws an exception to produce an HTTP 431 error. When this happens, the ByteBuffer containing the HTTP response headers is released back to the ByteBufferPool twice. Because of this doub...

Treck IPv4 stack double release vulnerability

Treck TCP/IP is a suite of TCP Transmission Control Protocol/IP Internet Interconnection Protocol from Treck, Inc. dedicated to embedded systems. A double release vulnerability exists in the Treck IPv4 stack. The vulnerability arises from mismanagement of system resources e.g., memory, disk space...

Huawei CampusInsight and ManageOne Double Release Vulnerability

Huawei ManageOne and CampusInsight are both products of Huawei, a Chinese company.ManageOne is a set of cloud data center management solutions. ManageOne is a cloud data center management solution that supports unified management of heterogeneous cloud resource pools and provides multi-level VDC...

GNU LibreDWG Double Release Vulnerability

GNU LibreDWG is a GNU Project C library for working with DWG files. A double release vulnerability exists in the 'dwgfree' function of the free.c file in GNU LibreDWG versions prior to 0.93. The vulnerability stems from mismanagement of system resources e.g., memory, disk space, files, etc. by a...

PHP Memory Location Double Release Vulnerability

PHP PHP: Hypertext Preprocessor, PHP: Hypertext Preprocessor is an open source general-purpose computer scripting language jointly maintained by the PHPGroup and the open source community. The language is mainly used for Web development, supports a variety of databases and operating systems. A...

Haxx libcurl Double Release Vulnerability

Haxx libcurl is an open source client-side URL transport library from the Swedish company Haxx. It supports protocols such as FTP, SFTP, TFTP and HTTP. A double-release vulnerability exists in Haxx libcurl versions 7.52.0 through 7.65.3, which can be exploited by an attacker to cause a denial of...

Linux kernel double release vulnerability (CNVD-2019-32351)

The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. A double release vulnerability exists in drivers/net/wireless/rsi/rsi91xusb.c in Linux kernel 5.2.9 and earlier. No...

Adobe Acrobat/Reader Double Release Vulnerability (CNVD-2019-30087)

Adobe Acrobat is a PDF editing software developed by Adobe.Adobe Reader also known as Acrobat Reader is a PDF file reader developed by Adobe. Adobe Acrobat/Reader has a double release vulnerability. An attacker can exploit this vulnerability to execute arbitrary code...

gnutls double release vulnerability

GnuTLS is a free software implementation of the TLS, SSL and DTLS protocols. A double release vulnerability exists in the certificate validation API of gnutls. No detailed vulnerability details are provided at this time...

Intel Graphics Driver for Windows Kernel Mode Driver Double Release Vulnerability

Intel Graphics Driver for Windows is an Intel graphics driver for the Windows platform.Kernel Mode Driver is one of the kernel mode drivers. A double release vulnerability exists in the Kernel Mode Driver of the Intel Graphics Driver for Windows. A local attacker could exploit this vulnerability ...

Intel SGX SDK Double Release Vulnerability

Intel SGX SDK is a set of software development kits based on SGX Intel Software Security Extensions technology from the U.S. company Intel Intel. A double release vulnerability exists in Intel SGX SDK. An attacker could exploit this vulnerability to disclose information...

Adobe Acrobat/Reader Double Release Vulnerability (CNVD-2019-31024)

Adobe Acrobat is a PDF editing software developed by Adobe.Adobe Reader also known as Acrobat Reader is a PDF file reader developed by Adobe. Adobe Acrobat/Reader has a double release vulnerability. An attacker can exploit this vulnerability to execute arbitrary code...

GNU Recutils rec-mset.c File Double Release Vulnerability

GNU Recutils is a set of plain text databases from the GNU Project. A double release vulnerability exists in the 'recmesetelemdestroy' function in the rec-mset.c file in GNU Recutils version 1.8. No details of the vulnerability are provided at this time...

Libxls Double Release Vulnerability

libxls is a C library that can read Excel xls files. A double release vulnerability exists in the readMSAT function in ole.c in libxls 1.4.0. An attacker could cause a denial of service application crash by exploiting this vulnerability via a specially crafted file...

Libarchive Double Release Vulnerability

libarchive is a multi-format archive and compression library. libarchive commit 416694915449219d505531b1096384f3237dd6cc or later 3.1.0 or later of the libarchive/archivereadsupportformatrar.c file RAR decoder A double-release vulnerability in the 'reallocrar-lzss.window, newsize' function of the...