CVE-2022-23159

Technical details about CVE-2022-23159 are not publicly provided in the supplied documents; monitor for updates from Dell and CVE sources.

CVE-2022-23159

Dell PowerScale OneFS, 8.2.2 - 9.3.0.x, contain a missing release of memory after effective lifetime vulnerability. An authenticated user with ISIPRIVLOGINSSH and/or ISIPRIVLOGINCONSOLE and ISIPRIVAUTHPROVIDERS privileges could exploit this vulnerability, leading to a Denial-Of-Service. This can...

Huawei HarmonyOS DFX module post-release reuse vulnerability

Huawei HarmonyOS is an operating system from Huawei China. A post-release reuse vulnerability exists in the Huawei HarmonyOS DFX module, which provides a microkernel-based, full-scenario distributed operating system. The vulnerability stems from a confusion in the DFX module's instructions for...

HUAWEI HarmonyOS 资源管理错误漏洞

Huawei HarmonyOS is an operating system from Huawei China. A post-release reuse vulnerability exists in the Huawei HarmonyOS DFX module, which provides a microkernel-based, full-scenario distributed operating system. The vulnerability stems from a confusion in the DFX module's instructions for...

The vulnerability of the gf_isom_oinf_read_entry function in the MP4Box component of the GPAC multimedia platform allows a hacker to gain access to confidential data.

The vulnerability of the gfisomoinfreadEntry function in the MP4Box component of the GPAC multimedia platform is related to improper memory release before deleting the last reference. Exploiting this vulnerability allows a remote attacker to gain access to confidential data through a specially...

The vulnerability of the Mosquitto messaging broker lies in the improper release of memory before deleting last-level links, allowing attackers to trigger a service failure.

The vulnerability of the Mosquitto messaging broker is related to incorrect processing of the CONNECT packet when there are no will topics, no will messages, and no will flags, nor any will properties. Exploiting this vulnerability allows a remote attacker to cause service failures...

The vulnerability of the def_parent_box_new function in the MP4Box component of the GPAC multimedia platform allows a perpetrator to gain access to confidential data.

The vulnerability of the defparentboxnew function in the MP4Box component of the GPAC multimedia platform is related to improper memory release before deleting the last references. Exploiting this vulnerability allows an attacker who operates remotely to gain access to confidential data through a...

The vulnerability of the realpath() function in the glibc system library, which allows a hacker to access confidential information

The vulnerability of the realpath function in the glibc system library is related to memory release errors. Exploiting this vulnerability can allow a remote attacker to gain access to confidential information...

Siemens SIMATIC Industrial Products Missing Release of Memory After Effective Lifetime (CVE-2021-37205)

A vulnerability has been identified in SIMATIC Drive Controller family All versions = V2.9.2 = V21.9 = V4.5.0 = V2.9.2 = V21.9 = V4.0 V4.0 SP1, SIPLUS TIM 1531 IRC All versions V2.3.6, TIM 1531 IRC All versions V2.3.6. An unauthenticated attacker could cause a denial- of-service condition in a PL...

CVE-2021-40047

The CVE-2021-40047 entry relates to Huawei EMUI and Magic UI Bastet modules, where a memory is not released after its effective lifetime. The vulnerability affects the Bastet component and may impact integrity if exploited. Exploitation details, affected versions, and a remediation/patch are not ...

CVE-2022-23159

Dell PowerScale OneFS, 8.2.2 - 9.3.0.x, contain a missing release of memory after effective lifetime vulnerability. An authenticated user with ISIPRIVLOGINSSH and/or ISIPRIVLOGINCONSOLE and ISIPRIVAUTHPROVIDERS privileges could exploit this vulnerability, leading to a Denial-Of-Service. This can...

The vulnerability in the `drivers/usb/gadget/legacy/inode.c` component of Linux kernel allows a hacker to cause a service failure.

The vulnerability in the drivers/usb/gadget/legacy/inode.c component of Linux operating systems is related to a memory release error. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Thumbnail Tab Strip component of the Google Chrome browser, which allows a hacker to circumvent existing security restrictions

The vulnerability of the Thumbnail Tab Strip component in Google Chrome browser relates to the use of memory after it is released. Exploiting this vulnerability could allow a malicious actor to bypass existing security restrictions remotely...

CVE-2022-24958

drivers/usb/gadget/legacy/inode.c in the Linux kernel through 5.16.8 mishandles dev-buf release...

The vulnerability of Juniper Networks Junos OS, an open-source infrastructure demon, allows a attacker to cause a service failure.

The vulnerability of Juniper Networks Junos OS operating systems’ open-source infrastructure components relates to a memory release error. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

The vulnerability of the kernel of Juniper Networks Junos OS routers vMX and MX150 allows a hacker to cause a service failure.

The vulnerability of Juniper Networks Junos OS routers vMX and MX150 lies in memory release errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the Moxa EN50155 TN-5900 series router’s microprogramming software, related to a memory release error, allows a intruder to trigger a service failure.

The vulnerability of the Moxa EN50155 TN-5900 series router’s microprogramming software is related to a memory release error. Exploiting this vulnerability can allow an attacker to cause service failure remotely...

The vulnerability of Juniper Networks Junos OS routers in the QFX5000 and EX4600 series, related to a memory release error, allows a hacker to trigger a service failure.

The vulnerability of Juniper Networks Junos OS routers in the QFX5000 and EX4600 series is related to a memory release error during the processing of incoming IPv6 packets. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...

The vulnerability of the microprogrammed industrial Ethernet switches Moxa MGate 5109 and Moxa MGate 5101-PBM-MN lies in a memory release error, which allows a hacker to trigger a service failure.

The vulnerability of the microprogrammed industrial Ethernet switches Moxa MGate 5109 and Moxa MGate 5101-PBM-MN lies in a memory release error. Exploiting this vulnerability can allow an attacker to cause service failure remotely...

ROS-20220125-09

A vulnerability in the nghttp2 library is related to a memory release error. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service on the target system...