CVE-2024-53227 scsi: bfa: Fix use-after-free in bfad_im_module_exit()

In the Linux kernel, the following vulnerability has been resolved: scsi: bfa: Fix use-after-free in bfadimmoduleexit BUG: KASAN: slab-use-after-free in lockacquire+0x2aca/0x3a20 Read of size 8 at addr ffff8881082d80c8 by task modprobe/25303 Call Trace: dumpstacklvl+0x95/0xe0 printreport+0xcb/0x6...

Ubuntu: Security Advisory (USN-7174-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-7174-1: GStreamer vulnerability

Antonio Morales discovered that GStreamer incorrectly handled allocating memory for certain buffers. An attacker could use this issue to cause GStreamer to crash, resulting in a denial of service, or possibly execute arbitrary code...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-49973)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-49973 advisory. - In the Linux kernel, the following vulnerability has been resolved: r8169: add tally counter fields added wi...

CVE-2024-47539

GStreamer is a library for constructing graphs of media-handling components. An out-of-bounds write vulnerability was identified in the converttos3341a function in isomp4/qtdemux.c. The vulnerability arises due to a discrepancy between the size of memory allocated to the storage array and the loo...

CVE-2024-47539 GHSL-2024-195: GStreamer has an OOB-write in convert_to_s334_1a

GStreamer is a library for constructing graphs of media-handling components. An out-of-bounds write vulnerability was identified in the converttos3341a function in isomp4/qtdemux.c. The vulnerability arises due to a discrepancy between the size of memory allocated to the storage array and the loo...

Amazon Linux 2022 : freetype, freetype-demos, freetype-devel (ALAS2022-2022-033)

It is, therefore, affected by a vulnerability as referenced in the ALAS2022-2022-033 advisory. A heap buffer overflow leading to out-of-bounds write was found in freetype. Memory allocation based on truncated PNG width and height values allows for an out-of-bounds write to occur in application...

CVE-2024-37071

CVE-2024-37071 affects IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) on 10.5, 11.1, and 11.5. An authenticated user could cause a denial of service via a specially crafted query due to improper memory allocation (memory allocation flaw). Affected products include Db2/Db2 Conne...

The vulnerability of the CopyCoder component of the 7-Zip archive, which allows a hacker to trigger a service failure.

The vulnerability of the CopyCoder component in the 7-Zip compressor is related to insufficient memory allocation for operations. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

CVE-2024-52917

Bitcoin Core before 22.0 has a miniupnp infinite loop in which it allocates memory on the basis of random data received over the network, e.g., large M-SEARCH replies from a fake UPnP device...

Denial Of Service (DoS)

github.com/consensys/gnark is vulnerable to a Denial of Service DoS. The vulnerability is due to improper memory allocation handling during the deserialization of Groth16 verification keys, allowing attackers to trigger excessive memory allocation, leading to high memory consumption and potential...

RHEL 7 : qemu-kvm-rhev (RHSA-2016:1654)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2016:1654 advisory. KVM Kernel-based Virtual Machine is a full virtualization solution for Linux on AMD64 and Intel 64 systems. The qemu-kvm-rhev package provid...

PT-2024-6769 · Microsoft · Windows Standards-Based Storage Management Service +1

Name of the Vulnerable Software and Affected Versions: Windows Standards-Based Storage Management Service affected versions not specified Description: The issue is related to insufficient memory allocation for an operation, which can be exploited by a remote attacker to cause a denial of service...

PT-2024-9623 · Gstreamer +10 · Gstreamer +10

Name of the Vulnerable Software and Affected Versions: GStreamer versions prior to 1.24.10 Description: An out-of-bounds write issue was identified in the convert to s334 1a function in isomp4/qtdemux.c. This issue arises due to a discrepancy between the size of memory allocated to the storage...

Unspecified vulnerability in Linux kernel (CNVD-2024-39471)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a memory allocation problem in the nouveau/firmware component. No details of the vulnerability are provided ...

VerneMQ 安全漏洞

VerneMQ is a high-performance distributed MQTT agent from VerneMQ, Inc. A security vulnerability exists in VerneMQ version v2.0.1 that stems from a memory allocation issue allows an attacker to cause a denial of service DoS by over-consuming memory...

CVE-2024-44459

CVE-2024-44459 concerns VerneMQ 2.0.1 with a memory allocation issue that allows an attacker to cause a Denial of Service via excessive memory consumption. Connected sources (Red Hat, NVD, OSV, CNNVD, CVE records) consistently describe the same vulnerable version and impact, with no publicly docu...

IBM MQ Operator Denial of Service Vulnerability

IBM MQ Operator is a tool from International Business Machines IBM for managing the lifecycle of IBM MQ Queue Manager. A denial of service vulnerability exists in IBM MQ Operator versions 2.0.26 and 3.2.4, which stems from improper memory allocation and can be exploited by an attacker to cause a...

PT-2024-28982 · Ibm · Ibm Mq +1

Name of the Vulnerable Software and Affected Versions: IBM MQ versions 9.3 CD and 9.4 LTS/CD IBM MQ Operator versions 2.0.26 and 3.2.4 Description: The issue is related to improper memory allocation, which can cause a segmentation fault, allowing a local user to cause a denial of service...

CLSA-2024-1718898112 glibc: Fix of 3 CVEs

CVE-2024-33600: nscd: avoid null pointer crashes after notfound response - CVE-2024-33601: fix memory allocation issue in netgroup cache by replacing xmalloc and xrealloc functions to prevent denial of service - CVE-2024-33602: fix memory corruption in netgroup cache by ensuring all strings are...