Huawei NIP6800, Secospace USG6600 and USG9500 IPSec Module Repeated Memory Release Vulnerability

Huawei USG9500 and others are products of Huawei, China.USG9500 is a data center firewall product.NIP6800 is an intrusion prevention system.USG6600 is a data center firewall product. A security vulnerability exists in the IPSec module in the Huawei NIP6800, Secospace USG6600, and USG9500. An...

CVE-2019-19076

A flaw was found in the way the NFP4000/NFP6000 Advanced buffer management NIC driver in the Linux kernel handled memory release on error handling. This flaw allows an attacker to cause a denial of service and crash the system. Mitigation To mitigate this issue, prevent module nfp from being...

The vulnerability of the ath10k_usb_hif_tx_sg function in the Linux kernel’s drivers/net/wireless/ath/ath10k/usb.c file is related to improper memory release before removing last references. This allows a malicious actor to trigger a service failure.

The vulnerability of the ath10kusbhiftxsg function in the Linux kernel’s drivers/net/wireless/ath/ath10k/usb.c file is related to a lack of a memory release mechanism before deleting the last pointer. Exploiting this vulnerability allows an attacker to cause service failure remotely...

PHP Memory Location Double Release Vulnerability

PHP PHP: Hypertext Preprocessor, PHP: Hypertext Preprocessor is an open source general-purpose computer scripting language jointly maintained by the PHPGroup and the open source community. The language is mainly used for Web development, supports a variety of databases and operating systems. A...

The vulnerability in the `png_create_info_struct` function of the PNG bitmap graphics library allows a attacker to cause a denial-of-service attack.

The vulnerability of the pngcreateinfostruct function in the library for working with PNG bitmap graphics in libpng is related to improper memory release before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause service interruptions through various network...

CVE-2019-19051

A flaw was found in the way the Linux kernel's WiMAX i2400 driver handled memory release in certain error codes path in the RF kill switch control function. A local attacker able to control the device could use this flaw to crash the system. Mitigation As the i2400m module will be auto-loaded whe...

The vulnerability of Blink’s web page display mechanism in the Google Chrome web browser allows attackers to compromise data integrity, gain unauthorized access to protected information, and cause service interruptions.

The vulnerability of Blink’s web page display mechanism in the Google Chrome browser is related to the use of pointers after memory release. Exploiting this vulnerability could allow an attacker to compromise data integrity, gain unauthorized access to protected information, and cause service...

CVE-2019-12975

It was discovered that ImageMagick does not properly release acquired memory when some error conditions occur in the WriteDPXImage function. Applications compiled against ImageMagick libraries that accept untrustworthy images may be exploited to use all available memory and make them crash. An...

The vulnerability in the implementation of the ems_pcmciaremove handler in Linux kernel allows a hacker to trigger a service failure.

The vulnerability of the emspcmciaremove handler in the loaded module drivers/net/can/sja1000/emspcmcia.ko of the Linux kernel is related to the assignment of a null pointer. Exploiting this vulnerability can allow an attacker to cause a system failure when connecting and disconnecting an EMS...

The vulnerability in the implementation of the udc_pci_probe handler in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the udcpciprobe handler in the Linux kernel’s drivers/usb/gadget/udc/amd5536udc.ko module is related to the repeated memory release mechanism. Exploiting this vulnerability can allow an attacker to cause a system failure by connecting an AMD5536 UDC device, which appears as a...

The vulnerability of the Linux operating system’s avma1cs_detach kernel driver allows a hacker to trigger a service failure.

The vulnerability of the driver/module in Linux operating systems, specifically the drivers/isdn/hisax/avma1cs.ko module, stems from memory release errors. Exploiting this vulnerability could allow an attacker to cause a system failure by disconnecting the PCMCIA device that emulates the AVM A1...

The vulnerability of the binder_alloc_free_page function (binder_alloc.c) in the Android operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the binderallocfreepage function binderalloc.c in the Android operating system is related to the repeated release of memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Quagga software’s BGP protocol implementation, related to the repeated release of memory, allows a attacker to cause a service failure or execute arbitrary code.

The vulnerability of the Quagga software’s BGP protocol implementation lies in the repeated release of memory during the processing of certain types of update messages. Exploiting this vulnerability allows a remote attacker to cause service failures or execute arbitrary code...

The vulnerability of the `gdImageBmpPtr` function in the GD Graphics Library allows a hacker to execute arbitrary code.

The vulnerability of the gdImageBmpPtr function in the GD Graphics Library involves the repeated release of memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code using specially created JPEG-formatted images...

pyOpenSSL: Failure to release memory before removing last reference in PKCS #12 Store

Python Cryptographic Authority pyopenssl version Before 17.5.0 contains a CWE - 401 : Failure to Release Memory Before Removing Last Reference vulnerability in PKCS 12 Store that can result in Denial of service if memory runs low or is exhausted. This attack appear to be exploitable via Depends...

CVE-2018-11918

In all android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, memory allocated is automatically released by the kernel if the 'probe' function fails with an error code...

The vulnerability of the copy_process function in the Android operating system’s kernel allows a hacker to increase their privileges.

The vulnerability of the copyprocess function in the Android operating system’s kernel is caused by repeated memory release. Exploiting this vulnerability can allow an attacker to increase their privileges...

Denial Of Service (DoS)

pyopenssl is vulnerable to denial of service DoS attacks. The vulnerability exists due to the lack of releasing the memory of the PKCS 12 Store where reloading certificates from the PKCS 12 store could cause a DoS attack...

Cisco Catalyst 3650 and 3850 Series Switches IOS XE Software Denial of Service Vulnerability

The Cisco Catalyst 3650 and 3850 Series Switches are switch products from Cisco, Inc.IOS XE Software is a set of operating systems developed by Cisco for its network devices that run on them. A denial of service vulnerability exists in the IOS XE Software in the Cisco Catalyst 3650 and 3850 Serie...

The vulnerability of the expand_smacro function in the Netwide Assembler of Linux operating systems allows a hacker to trigger a service failure.

The vulnerability of the expandsmacro function in preproc.c of the Netwide Assembler operating system in Linux is caused by memory release errors. Exploiting this vulnerability can allow an attacker to cause a service failure using a specially crafted file...