Apple macOS Ventura 资源管理错误漏洞

Apple macOS Ventura is a desktop operating system from Apple, Inc. Apple macOS Ventura version 13.4 suffers from a resource management error vulnerability that originates from a remote attacker who may be able to cause an application to terminate unexpectedly or arbitrary code execution...

Apple macOS Ventura 资源管理错误漏洞

Apple macOS Ventura is a desktop operating system from Apple, Inc. Apple macOS Ventura version 13.4 suffers from a resource management error vulnerability that originates from a remote attacker who may be able to cause an application to terminate unexpectedly or arbitrary code execution...

Apple Safari 资源管理错误漏洞

Apple Safari is a web browser from Apple Inc. and is the default browser that comes with the Mac OS X and iOS operating systems. Apple Safari 16.5 suffers from a resource management error vulnerability that stems from the fact that processing maliciously crafted web content may result in arbitrar...

PoDoFo Resource Management Error Vulnerability

PoDoFo is a free portable C++ library open-sourced by PoDoFo. A resource management error vulnerability exists in PoDoFo version 0.10.0, which stems from the function PoDoFo::PdfEncrypt::IsMetadataEncrypted containing heap reuse after release. A remote attacker can exploit this vulnerability to...

Apple macOS Ventura 资源管理错误漏洞

Apple macOS Ventura is a desktop operating system by Apple Inc. A resource management error vulnerability exists in Apple macOS Ventura version 13.4, which originates from an application that may be able to execute arbitrary code using kernel privileges...

Facebook Hermes 资源管理错误漏洞

Facebook Hermes is a JavaScript engine from Facebook Inc. in the United States. The engine is targeted at React Native applications to improve the performance of mobile client application apps, but not for server-side infrastructures such as browsers & Node.js. Facebook Hermes has a security...

yasm 资源管理错误漏洞

yasm is a completely rewritten Netwide assembler from the yasm open source. A security vulnerability exists in yasm version 1.3.0.55.g101bc, which originates from reuse after heap release via the function expandmmacparams in yasm/modules/preprocs/nasm/nasm-pp.c contains...

libcurl 资源管理错误漏洞

libcurl is a tool for transferring data from or to a server. A security vulnerability exists in libcurl that stems from allowing name resolution to timeout operations using alarm and siglongjmp, causing the application to crash...

openssl: use-after-free following BIO_new_NDEF

A use-after-free vulnerability was found in OpenSSL's BIOnewNDEF function. The public API function BIOnewNDEF is a helper function used for streaming ASN.1 data via a BIO. It is primarily used internally by OpenSSL to support the SMIME, CMS, and PKCS7 streaming capabilities, but it may also be...

Google Android 资源管理错误漏洞

Google Android is a Linux-based open source operating system from Google. An elevation of privilege vulnerability exists in Google Android, which stems from uncontrolled resource consumption in several functions of the SnoozeHelper.java file, and can be exploited by an attacker to elevate...

Froxlor 安全漏洞

Froxlor is a set of lightweight server management software from the Froxlor team. A resource management error vulnerability exists in versions of Froxlor prior to 2.0.16 that stems from a failure to properly allocate resources. An attacker can exploit this vulnerability to cause a denial of servi...

Intel Unite 资源管理错误漏洞

Intel Unite is a suite of enterprise meeting collaboration solutions from Intel Corporation USA. A security vulnerability exists in Intel Unite prior to version 17 that stems from uncontrolled resource consumption, which can lead to a denial of service...

Octopus Deploy 资源管理错误漏洞

Octopus Deploy is an automation tool for .NET, Java and other application development and deployment from Octopus Deploy Australia. Octopus Deploy suffers from a security vulnerability that stems from the possibility of uploading zipbomb files as a task that leads to a denial of service...

yasm 资源管理错误漏洞

yasm is a completely rewritten Netwide assembler from the yasm open source. A resource management error vulnerability exists in yasm version v1.3.0, which stems from a post-release reuse issue in /nasm/nasm-pp.c. The vulnerability is caused by an error in /nasm/nasm-pp.c, which is not supported...

F5 BIG-IP Resource Management Error Vulnerability

F5 BIG-IP is an application delivery platform from F5 USA that integrates network traffic management, application security management, load balancing and other functions. F5 BIG-IP suffers from a resource management error vulnerability that originates from uncontrolled resource consumption by an...

Linux kernel 资源管理错误漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A resource management error vulnerability exists in versions of Linux kernel prior to 6.1.11, which stems from a confusion in the instructions responsible for freeing memory in...

Libreswan 资源管理错误漏洞

Libreswan is an IPsec implementation similar to Openswan, which is mainly used to ensure security, integrity issues in data transmission. Libreswan has a security vulnerability. Attackers use the vulnerability to build secure tunnels through untrusted networks such as virtual private networks VPN...

F5 BIG-IP 资源管理错误漏洞

F5 BIG-IP is an application delivery platform from F5 USA that integrates network traffic management, application security management, load balancing and other functions. F5 BIG-IP suffers from a resource management error vulnerability that originates from uncontrolled resource consumption by an...

Avahi 资源管理错误漏洞

Avahi is a suite of native service discovery tools for Linux. A security vulnerability exists in Avahi that stems from the avahi-daemon process potentially crashing on the DBus message bus...

libwebp 资源管理错误漏洞

libwebp is a library for encoding and decoding the WebP image format. A resource management error vulnerability exists in libwebp that stems from a lack of memory in the VP8 encoder, which can lead to memory reuse after release...