Adobe Photoshop Multiple Vulnerabilities (APSB22-35) - Mac OS X

Adobe Photoshop is prone to multiple vulnerabilities. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

PT-2022-7559

Name of the Vulnerable Software and Affected Versions GnuTLS affected versions not specified Description A security flaw occurs due to a double free error during verification of pkcs7 signatures in the gnutls pkcs7 verify function. This issue allows a remote attacker to cause a denial of service...

PT-2022-5386 · Libxml2 +12 · Libxml2 +12

Name of the Vulnerable Software and Affected Versions: libxml2 versions prior to 2.10.3 Description: An issue was discovered in libxml2 where certain invalid XML entity definitions can corrupt a hash table key, potentially leading to subsequent logic errors. In one case, a double-free can be...

JerryScript 资源管理错误漏洞

JerryScript is a lightweight JavaScript engine from the Jerryscript project. version 2.4.0 of JerryScript is vulnerable to a memory misquoting vulnerability that originates in ecma-helpers- in ecmacompareecmanondirectstrings. string.c:1940, which is responsible for freeing memory, is garbled. An...

MGASA-2022-0154 Updated kernel packages fix security vulnerabilities

This kernel update is based on upstream 5.15.35 and fixes at least the following security issues: A denial of service DOS issue was found in the Linux kernel smb2ioctlqueryinfo function in the fs/cifs/smb2ops.c Common Internet File System CIFS due to an incorrect return from the memdupuser...

CLSA-2022-1649869212 Fix CVE(s): CVE-2022-28388

CVE-2022-28388 - ELSCVE-3855 can: usb8dev: usb8devstartxmit: fix double devkfreeskb in error path...

PT-2025-8015 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to the fixed version Description: A race condition exists in the Linux kernel, specifically in the rxrpc exit net function. This issue can lead to a use-after-free error when the peer keepalive timer is still armed...

Adobe Acrobat Classic 2020 Security Update (APSB21-29) - Windows

Adobe Acrobat Classic 2020 is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Security Bulletin: Multiple vulnerabilities in the IBM GSKit component of IBM Spectrum Protect Snapshot (formerly Tivoli Storage FlashCopy Manager) for Unix

Summary There are multiple vulnerabilities in the IBM GSKit component of IBM Spectrum Protect Snapshot formerly Tivoli Storage FlashCopy Manager for Unix. IBM Spectrum Protect Snapshot for Unix has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2016-0702 DESCRIPTION: OpenSSL coul...

CVE-2022-24122

kernel/ucount.c in the Linux kernel 5.14 through 5.16.4, when unprivileged user namespaces are enabled, allows a use-after-free and privilege escalation because a ucounts object can outlive its namespace...

Mageia: Security Advisory (MGASA-2013-0167)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

NVIDIA SHIELD Experience Resource Management Error Vulnerability

NVIDIA Shield Experience is a streaming media player from Nvidia, USA. NVIDIA SHIELD Experience suffers from a resource management error vulnerability that exists as a result of a use-after-free error in nvmap ioctl. An attacker could exploit this vulnerability to execute arbitrary code...

Google Chrome resource management error vulnerability

Google Chrome is a Web browser from Google, Inc. A resource management error vulnerability exists in Google Chrome, which stems from the product's screen capture component referencing freed memory. A remote attacker could use this vulnerability to create a specially crafted web page, trick a vict...

Google Chrome Resource Management Error Vulnerability (CNVD-2022-14876)

Google Chrome is a Web browser from Google, Inc. A resource management error vulnerability exists in Google Chrome, which stems from repeated calls to freed resources by the product's login component. A remote attacker could use this vulnerability to create a specially crafted web page, trick a...

PT-2021-6077

Name of the Vulnerable Software and Affected Versions Mbed TLS versions prior to 3.0.1 Description The issue is related to a double free error in certain out-of-memory conditions, as demonstrated by a failure of the mbedtls ssl set session function. This error can potentially allow a remote...

Security Bulletin: Vulnerabilities in Open SSL affect Power Hardware Management Console (CVE-2014-8176,CVE-2015-1788,CVE-2015-1789,CVE-2015-1790,CVE-2015-1791,CVE-2015-1792,CVE-2015-3216)

Summary Open SSL is used by Power Hardware Management Console HMC. HMC has addressed the applicable CVEs Vulnerability Details CVEID: CVE-2014-8176 DESCRIPTION: OpenSSL could allow a remote authenticated attacker to execute arbitrary code on the system, caused by an invalid free error when...

Security Bulletin: Vulnerability in SSLv3 Affects Power Hardware Management Console (CVE-2014-3513, CVE-2014-3566, CVE-2014-3567, CVE-2014-3568, CVE-2014-3505, CVE-2014-3506, CVE-2014-3507, CVE-2014-3508, CVE-2014-3509, CVE-2014-3510, CVE-2014-3511, CVE-

Summary OpenSSL included in Power Hardware Management Console contains multiple vulnerabilities including POODLE Padding Oracle On Downgraded Legacy Encryption. Vulnerability Details CVE-ID: CVE-2014-3513 Description: OpenSSL is vulnerable to a denial of service, caused by a memory leak in the DT...

Ulfius Web Framework Remote Memory Corruption

!/usr/bin/python3 guul.py Ulfius Web Framework Remote Memory Corruption Vulnerability Jeremy Brown Sept 2021 Intro Ulfius Web Framework is used by a number of different projects to build web services. Some of the projects tested and confirmed vulnerable are Glewlwyd SSO Server, Taliesin Audio...

openSUSE 15 Security Update : xerces-c (openSUSE-SU-2021:1231-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2021:1231-1 advisory. - The Apache Xerces-C 3.0.0 to 3.2.3 XML parser contains a use-after-free error triggered during the scanning of external DTDs. This flaw has not be...

SUSE SLES15 Security Update : xerces-c (SUSE-SU-2021:2920-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2021:2920-1 advisory. - CVE-2018-1311: Fixed use-after-free inside XML parser during the scanning of external DTDs bsc1159552. Tenable has extracted the preceding...