CVE-2023-45584

A double free vulnerability CWE-415 vulnerability in Fortinet FortiOS 7.4.0, FortiOS 7.2.0 through 7.2.5, FortiOS 7.0.0 through 7.0.12, FortiOS 6.4 all versions, FortiPAM 1.1 all versions, FortiPAM 1.0 all versions, FortiProxy 7.4.0 through 7.4.1, FortiProxy 7.2.0 through 7.2.7, FortiProxy 7.0.0...

CVE-2023-45584

CVE-2023-45584 is a double free vulnerability (CWE-415) in multiple Fortinet products: FortiOS (versions 6.4; 7.0.0–7.0.12; 7.2.0–7.2.5; 7.4.0), FortiPAM (1.0–1.1.x), and FortiProxy (7.0.0–7.0.13; 7.2.0–7.2.7; 7.4.0–7.4.1) that allows a privileged attacker to execute code via crafted HTTP/HTTPS r...

AZL-66246 CVE-2025-38500 affecting package kernel for versions less than 6.6.104.2-1

In the Linux kernel, the following vulnerability has been resolved: xfrm: interface: fix use-after-free after changing collectmd xfrm interface collectmd property on xfrm interfaces can only be set on device creation, thus xfrmichangelink should fail when called on such interfaces. The check to...

CVE-2025-38500

In the Linux kernel, the following vulnerability has been resolved: xfrm: interface: fix use-after-free after changing collectmd xfrm interface collectmd property on xfrm interfaces can only be set on device creation, thus xfrmichangelink should fail when called on such interfaces. The check to...

CVE-2025-38500

In the Linux kernel, the following vulnerability has been resolved: xfrm: interface: fix use-after-free after changing collectmd xfrm interface collectmd property on xfrm interfaces can only be set on device creation, thus xfrmichangelink should fail when called on such interfaces. The check to...

CVE-2025-38500 xfrm: interface: fix use-after-free after changing collect_md xfrm interface

In the Linux kernel, the following vulnerability has been resolved: xfrm: interface: fix use-after-free after changing collectmd xfrm interface collectmd property on xfrm interfaces can only be set on device creation, thus xfrmichangelink should fail when called on such interfaces. The check to...

CVE-2025-38500

CVE-2025-38500 : In the Linux kernel, a use-after-free could occur when changing xfrm interface collect_md state via xfrmi_changelink(), because the collect_md interface could be placed in both xfrmi_net and collect_md_xfrmi structures. The fix uses the xi from netdev_priv earlier in the path to ...

CLSA-2025-1755007232 glibc: Fix of CVE-2025-8058

CVE-2025-8058: fix double-free after allocation failure in regcomp...

CLSA-2025-1755005189 glibc: Fix of CVE-2025-8058

CVE-2025-8058: fix double-free after allocation failure in regcomp...

Fedora 43 : libvpx (2025-8d38482143)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-8d38482143 advisory. Automatic update for libvpx-1.15.0-3.fc43. Changelog Tue Jun 3 2025 Wim Taymans - 1.15.0-3 - Add patch for double free Resolves: rhbz2368931 Tenable has...

Linux Distros Unpatched Vulnerability : CVE-2024-26694

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: fix double-free bug The storage for the TLV PC register data wasn't done like...

Hypervisor-Based Double Extortion Ransomware Detection Method Using Kitsune Network Features

Double extortion ransomware attacks have become mainstream since many organizations adopt more robust and resilient data backup strategies against conventional crypto-ransomware. This paper presents detailed attack stages, tactics, procedures, and tools used in the double extortion ransomware...

Linux Distros Unpatched Vulnerability : CVE-2021-46938

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: dm rq: fix double free of blkmqtagset in dev remove after table load fails When loading a...

RHEL 9 : kernel (RHSA-2025:13602)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:13602 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: crypto: algifhash - fix doubl...

Fortinet Fortigate Double free in automation-stitch (FG-IR-23-209)

The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-23-209 advisory. - A double free vulnerability CWE-415 in Fortinet FortiOS version 7.4.0, version 7.2.0 through 7.2.5 and before 7.0.12,...

Linux Distros Unpatched Vulnerability : CVE-2025-5914

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability has been identified in the libarchive library, specifically within the archivereadformatrarseekdata function. This flaw involves an integer...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the reuse of the xfrm interface after release, which could lead to a double release...

Linux Distros Unpatched Vulnerability : CVE-2022-29156

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drivers/infiniband/ulp/rtrs/rtrs-clt.c in the Linux kernel before 5.16.12 has a double free related to rtrscltdevrelease. CVE-2022-29156 Note that Nessus relies...

PT-2025-32869 · Fortinet · Fortipam +2

Name of the Vulnerable Software and Affected Versions: Fortinet FortiOS versions 7.2.0 through 7.2.5 and prior to 7.0.12 Fortinet FortiProxy versions 7.2.0 through 7.2.7 and prior to 7.0.13 Fortinet FortiPAM versions 1.1.0 through 1.1.2 and prior to 1.0.3 Fortinet FortiOS version 7.4.0 Fortinet...

Linux Distros Unpatched Vulnerability : CVE-2024-26748

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: usb: cdns3: fix memory double free when handle zero packet 829 if request-complete 830...