CVE-2024-20402: Access of Memory Location After End of Buffer

A vulnerability in the SSL VPN feature for Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly, resulting in a denial of service DoS condition. This...

PT-2024-7436 · Cisco · Cisco Ftd +1

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software affected versions not specified Cisco Firepower Threat Defense FTD Software affected versions not specified Description: The issue is related to a logic error in memory management when handling S...

Red Hat OpenShift 资源管理错误漏洞

Red Hat OpenShift is a Platform-as-a-Service PaaS cloud computing platform from Red Hat, Inc. that supports building, testing, deploying and running applications. Red Hat OpenShift suffers from a Resource Management Error vulnerability that stems from the presence of a Denial of Service DoS...

Linux kernel 资源管理错误漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that originates from a device accessing freed memory due to an injection error before stopping a queue...

Linux kernel 资源管理错误漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a post-release reuse issue in the efcnportvportdel function in the scsi:elx:libefc subsystem...

Linux kernel 资源管理错误漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A resource management error vulnerability exists in Linux kernel that stems from a potential post-release reuse issue with the bfqq-bic merge chain in the block, bfq subsystem...

Embedthis Software GoAhead 资源管理错误漏洞

Embedthis Software GoAhead is an open source, small embedded web server from Embedthis Software, USA. A resource management error vulnerability exists in Embedthis Software GoAhead versions 6.0.0 and earlier, which stems from failing to clear JST values when they are freed during the parsing of J...

Picotls 资源管理错误漏洞

picotls is an RFC 8446 protocol stack written in C that is open source by H2O. A resource management error vulnerability exists in Picotls that stems from the presence of a double release, which could lead to reuse after release and could also allow arbitrary code execution...

Adobe Animate 资源管理错误漏洞

Adobe Animate is a set of Flash animation software from the American company Audobee Adobe. Adobe Animate suffers from a memory misreference vulnerability that can be exploited by an attacker to execute arbitrary code in the context of the current user...

Adobe Animate 资源管理错误漏洞

Adobe Animate is a set of Flash animation software from the American company Audobee Adobe. Adobe Animate suffers from a memory misreference vulnerability that can be exploited by an attacker to execute arbitrary code in the context of the current user...

Adobe Animate 资源管理错误漏洞

Adobe Animate is a set of Flash animation software from the American company Audobee Adobe. A security vulnerability exists in Adobe Animate, which can be exploited by an attacker to execute arbitrary code in the context of the current user...

Adobe Substance 3D Stager 资源管理错误漏洞

Adobe Substance 3D Stager is a virtual 3D studio from Audobee Adobe USA. Adobe Substance 3D Stager suffers from a resource management error vulnerability that stems from memory reuse after release. An attacker could exploit the vulnerability to execute arbitrary code in the current user's...

Microsoft Simple Certificate Enrollment Protocol 资源管理错误漏洞

Microsoft Simple Certificate Enrollment Protocol is a Microsoft Corporation USA protocol for automating certificate enrollment that allows devices to request and receive certificates through a simple process. A resource management error vulnerability exists in Microsoft Simple Certificate...

Microsoft Windows Remote Desktop Protocol 资源管理错误漏洞

Microsoft Windows Remote Desktop Protocol RDP is a Microsoft application for connecting to remote Windows desktops. A resource management error vulnerability exists in Microsoft Windows Remote Desktop Protocol. An attacker exploiting this vulnerability could remotely execute code. The following...

Microsoft Graphics Component 资源管理错误漏洞

Microsoft Graphics Component is a graphics driver component from Microsoft Corporation USA. A resource management error vulnerability exists in Microsoft Graphics Component. An attacker could exploit this vulnerability to elevate privileges. The following products and editions are affected:Window...

Microsoft Excel 资源管理错误漏洞

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A remote code execution vulnerability exists in Microsoft Excel. An attacker can exploit this vulnerability to execute arbitrary code on the system...

Microsoft BranchCache 资源管理错误漏洞

Microsoft BranchCache is a wide area network WAN bandwidth optimization technology from Microsoft that replicates content from a headquarters or cloud content server and caches the content at a branch office location so that client computers at the branch office can access the content locally. A...

Microsoft Windows Kernel 资源管理错误漏洞

Microsoft Windows Kernel is the kernel of the Windows operating system from Microsoft Corporation USA. A resource management error vulnerability exists in Microsoft Windows Kernel. An attacker could exploit this vulnerability to elevate privileges. The following products and editions are...

Microsoft Remote Desktop Client 资源管理错误漏洞

Microsoft Remote Desktop Client is a remote desktop client from Microsoft Corporation USA. A resource management error vulnerability exists in Microsoft Remote Desktop Client. An attacker exploiting this vulnerability could remotely execute code. The following products and editions are...

Microsoft Internet Small Computer Systems Interface 资源管理错误漏洞

Microsoft Internet Small Computer Systems Interface is an IP network-based storage technology from Microsoft that allows computer systems to access remote SCSI storage devices over existing network infrastructures such as Ethernet. A resource management error vulnerability exists in Microsoft...