CVE-2024-39721: Improper Resource Shutdown or Release

An issue was discovered in Ollama before 0.1.34. The CreateModelHandler function uses os.Open to read a file until completion. The req.Path parameter is user-controlled and can be set to /dev/random, which is blocking, causing the goroutine to run infinitely even after the HTTP request is aborted...

CVE-2024-31152

The LevelOne WBR-6012 router with firmware R0.40e6 is vulnerable to improper resource allocation within its web application, where a series of crafted HTTP requests can cause a reboot. This could lead to network service interruptions...

CVE-2024-31152

The LevelOne WBR-6012 router with firmware R0.40e6 is vulnerable to improper resource allocation within its web application, where a series of crafted HTTP requests can cause a reboot. This could lead to network service interruptions...

CVE-2024-31152

The CVE-2024-31152 issue affects LevelOne WBR-6012 routers (firmware R0.40e6). The root cause is improper resource allocation in the router’s web application, causing a flood of crafted HTTP requests to crash/reboot the device. Specifically, a flood of valid HTTP POSTs to /cgi-bin/logi can trigge...

LevelOne WBR-6012 Web Application improper resource allocation vulnerability

Talos Vulnerability Report TALOS-2024-1982 LevelOne WBR-6012 Web Application improper resource allocation vulnerability October 30, 2024 CVE Number CVE-2024-31152 SUMMARY The LevelOne WBR-6012 router with firmware R0.40e6 is vulnerable to improper resource allocation within its web application,...

PT-2024-23797

Name of the Vulnerable Software and Affected Versions LevelOne WBR-6012 router version R0.40e6 Description The issue is related to improper resource allocation within the web application of the router. It can be triggered by a series of crafted HTTP requests, leading to a reboot of the device. Th...

The vulnerability of the Bluetooth smart watch technology from Fire-Boltt: an artillery smart watch that allows a violator to disconnect the user from the application or expose protected information.

The vulnerability of the Bluetooth smart watch technology Fire-Boltt Artillery Smart Watch lies in improper cleaning or release of resources. Exploiting this vulnerability could allow a malicious actor to disconnect the user from the application or expose the protected information...

The vulnerability of the rt5645 component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the rt5645 component in the Linux operating system is related to incorrect resource locking. Exploiting this vulnerability can allow an attacker to cause a service failure...

Adobe Creative Cloud < 4.0.0.185 Multiple Vulnerabilities (APSB17-13)

The version of Adobe Creative Cloud installed on the remote Windows host is prior to 4.0.0.185. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB17-13 advisory. - Adobe Thor versions 3.9.5.353 and earlier have a vulnerability related to the use of improper resource...

CVE-2024-21253: Improper Resource Shutdown or Release

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 7.0.22. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise...

CVE-2024-47968

Improper resource shutdown in middle of certain operations on some Solidigm DC Products may allow an attacker to potentially enable denial of service...

CVE-2024-47968

Improper resource shutdown in middle of certain operations on some Solidigm DC Products may allow an attacker to potentially enable denial of service...

CVE-2024-47967

Improper resource initialization handling in firmware of some Solidigm DC Products may allow an attacker to potentially enable denial of service...

CVE-2024-47967

Improper resource initialization handling in firmware of some Solidigm DC Products may allow an attacker to potentially enable denial of service...

CVE-2024-47967

CVE-2024-47967 affects Solidigm DC Products firmware, where improper resource initialization handling may permit a local attacker to trigger denial of service. The description in the available documents attributes the issue to faulty initialization in the firmware, but does not specify exact affe...

PT-2024-32918

Name of the Vulnerable Software and Affected Versions Solidigm DC Products affected versions not specified Description The issue is related to improper resource shutdown during certain operations on Solidigm DC Products, which may allow an attacker to potentially cause a denial of service...

CVE-2024-47967: Allocation of Resources Without Limits or Throttling

Improper resource initialization handling in firmware of some Solidigm DC Products may allow an attacker to potentially enable denial of service...

Solidigm DC Products 安全漏洞

Solidigm DC Products is a line of solid state drives from Solidigm. A security vulnerability exists in Solidigm DC Products that stems from improper resource management...

PT-2024-41581

Уязвимость функции fnic probe модуля drivers/scsi/fnic/fnic main.c - драйвера поддержки устройств SCSI ядра операционной системы Linux связана с некорректной инициализацией ресурса. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

PT-2024-41549

Уязвимость функции ice sriov set msix vec count модуля drivers/net/ethernet/intel/ice/ice sriov.c драйвера поддержки сетевых адаптеров Ethernet Intel ядра операционной системы Linux связана с некорректным управлением ресурсом. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в...