UBUNTU-CVE-2019-10082

In Apache HTTP Server 2.4.18-2.4.39, using fuzzed network input, the http/2 session handling could be made to read memory after being freed, during connection shutdown...

The vulnerability of Google Chrome browser’s Blink rendering module allows a hacker to execute arbitrary code.

The vulnerability of the Blink rendering module in Google Chrome browsers relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the PDFium browser’s PDF-content processor in Google Chrome allows a hacker to execute arbitrary code.

The vulnerability of the PDFium browser for processing PDF content in Google Chrome is related to the use of memory after deallocation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code through a specially crafted web page...

The vulnerability of the IRC client Irssi for Debian GNU/Linux and Ubuntu systems, related to the use of memory after it is freed, allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the IRC client Irssi for Debian GNU/Linux and Ubuntu stems from the use of memory after it is freed during the disconnection of a node from the previously created network or between two nodes. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of the Advanced Linux Sound Architecture component in VMware Workstation allows a hacker to execute arbitrary code.

The vulnerability of the Advanced Linux Sound Architecture ALSA component in VMware Workstation hypervisors is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

PT-2019-5050 · Info Zip +4 · Info-Zip Unzip +4

Name of the Vulnerable Software and Affected Versions: Info-ZIP UnZip version 6.0 Description: The issue is related to the mishandling of overlapping files inside a ZIP container, which can lead to denial of service due to resource consumption, also known as a "better zip bomb" issue. Additionall...

PT-2019-4484

Name of the Vulnerable Software and Affected Versions Linux kernel versions 5.0.21 and 5.3.11 Description The issue is related to the use of memory after it has been freed in the try merge free space function of the Linux kernel, specifically in the fs/btrfs/free-space-cache.c file. This can be...

PT-2019-6076 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.2 Description: The issue is related to the use of memory after it has been freed in the block subsystem of the Linux kernel, specifically involving the blk mq free rqs and blk cleanup queue functions. This can...

The vulnerability of the Flash Player software platform, related to the use of memory after it is freed, allows a hacker to execute arbitrary code.

The vulnerability of the Flash Player software is related to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability in web browsers Firefox, Firefox ESR, and the email client Thunderbird, related to memory usage after deallocation, allows an attacker to execute arbitrary code or cause a service failure.

The vulnerability in web browsers Firefox, Firefox ESR, and the email client Thunderbird relates to the use of memory after deallocation. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause a service failure...

The vulnerability of the MPM module in the Apache HTTP server lies in the use of memory after it is released. This allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the MPM module in the Apache HTTP Server is related to deficiencies in access control. Exploiting this vulnerability allows an attacker to execute arbitrary code with root privileges using a specially created script...

The vulnerability of the interface driver for IPMI kernel-based operating system Linux allows a perpetrator to cause maintenance failures.

The vulnerability of the driver for the IPMI platform’s management interface driver/char/ipmi/ipmimsghandler.c code in Linux operating systems is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to trigger a service failure through the IP...

The vulnerability of Linux operating system kernel NFS servers, which allows a hacker to trigger a service failure

The vulnerability of the NFS NFS41+ server kernel in Linux operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the KVM virtualization subsystem in Linux operating systems allows a attacker to trigger a service failure or execute arbitrary code.

The vulnerability of the KVM virtualization subsystem in Linux operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code...

The vulnerability in the elfcomm.c file of the GNU Binutils, related to memory access after its release, allows a hacker to cause a service failure.

The vulnerability in the elfcomm.c file of the GNU Binutils relates to memory access after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability in the implementation of the SCTP protocol in Linux kernel allows a attacker to cause a service failure or increase their privileges.

The vulnerability of the SCTP protocol implementation in Linux operating systems relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure or increase their privileges...

The vulnerability of the SwiftShader library in the Google Chrome web browser allows a hacker to execute arbitrary code.

The vulnerability of the SwiftShader library in the Google Chrome web browser relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

PT-2019-4507 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.1.6 Description: The issue is related to the use of memory after it has been freed in the cpia2 exit function, located in drivers/media/usb/cpia2/cpia2 v4l.c. This can lead to a denial of service...

A vulnerability in the Linux kernel’s drivers/infiniband/core/ucma.c file, which allows a hacker to trigger a service failure.

The vulnerability in the Linux kernel’s drivers/infiniband/core/ucma.c file is related to the use of memory after it has been freed. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the LibVNC library, related to the use of memory after it is freed, allows a hacker to execute arbitrary code.

The vulnerability of the LibVNC library lies in the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...