1606 matches found
The vulnerability of the sg_write function in Linux operating system kernels, allowing a hacker to execute arbitrary code
The vulnerability of the sgwrite function in Linux operating system kernels is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Fedora 31 : 1:dovecot (2020-b60344c987)
CVE-2020-10957: lmtp/submission: A client can crash the server by sending a NOOP command with an invalid string parameter. This occurs particularly for a parameter that doesn't start with a double quote. This applies to all SMTP services, including submission-login, which makes it possible to...
DEBIAN-CVE-2020-10690
There is a use-after-free in kernel versions before 5.5 due to a race condition between the release of ptpclock and cdev while resource deallocation. When a high privileged process allocates a ptp device file like /dev/ptpX and voluntarily goes to sleep. During this time if the underlying device ...
The vulnerability of the Firefox Web browser’s session object recompilation component, related to the access to freed memory segments, allows attackers to gain unauthorized access to confidential data, cause service failures, and compromise data integrity.
The vulnerability of the Firefox Web browser’s session object recompilation component relates to the access to freed memory resources. Exploiting this vulnerability can allow an attacker to gain unauthorized access to confidential data, cause service failures, and compromise data integrity...
The vulnerability of Google Chrome web browser’s download manager allows a hacker to compromise data integrity, cause service failures, or gain unauthorized access to confidential information.
The vulnerability of Google Chrome web browser’s download manager is related to the use of freed memory segments. Exploiting this vulnerability can allow an attacker to compromise data integrity, cause service failures, or gain unauthorized access to confidential information through a specially...
The vulnerability of the SMB2_read function in the Linux operating system’s kernel allows a hacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the SMB2read function fs/cifs/smb2pdu.c in the Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...
DEBIAN-CVE-2020-10575
An issue was discovered in Janus through 0.9.1. plugins/janusvideocall.c in the VideoCall plugin mishandles session management because a race condition causes some references to be freed too early or too many times...
CVE-2019-14072
CVE-2019-14072 describes a race condition in Qualcomm/Snapdragon kernel/JPU handling leading to an unhandled paging request by dereferencing a freed object due to concurrent sparse free and sparse bind ioctls. Affected are Snapdragon Auto/Compute/IoT/Wearables platforms across numerous SoCs (e.g....
The vulnerability in the hw/9pfs/cofile.c and hw/9pfs/9p.c components of the QEMU hardware emulation software allows a attacker to trigger a service failure by repeatedly accessing the freed memory area.
The vulnerability in the components hw/9pfs/cofile.c and hw/9pfs/9c.c of the QEMU hardware emulator involves repeated access to a freed memory area. Exploiting this vulnerability can allow an attacker to cause a system failure...
CVE-2019-20079
The autocmd feature in window.c in Vim before 8.1.2136 accesses freed memory...
CVE-2019-20079
The autocmd feature in window.c in Vim before 8.1.2136 accesses freed memory...
CVE-2019-20079
The autocmd feature in window.c in Vim before 8.1.2136 accesses freed memory...
CVE-2019-20079
The autocmd feature in window.c in Vim before 8.1.2136 accesses freed memory...
CVE-2019-20079
The autocmd feature in window.c in Vim before 8.1.2136 accesses freed memory...
CVE-2019-20079
The autocmd feature in window.c in Vim before 8.1.2136 accesses freed memory...
DEBIAN-CVE-2019-20006
An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxmlcharcontent puts a pointer to the internal address of a larger block as xml-txt. This is later deallocated using free, leading to a segmentation fault...
The vulnerability of the event handler in Firefox browsers, Firefox ESR, and the Thunderbird email client allows a hacker to trigger a service failure.
The vulnerability of the event handlers in Firefox browsers, Firefox ESR, and the email client Thunderbird is related to accessing freed memory cells. Exploiting this vulnerability can allow an attacker to cause service interruptions while working with APIs...
Mozilla: Use-after-free when creating index updates in IndexedDB
A use-after-free flaw was found in Mozilla Firefox and Thunderbird. When following a value's prototype chain, it was possible to retain a reference to a locale, delete it, and subsequently reference it. An attacker could use this flaw to execute code that was stored in the referenced memory or...