The vulnerability of the hci_dev_do_open() function in the Linux kernel’s device initialization subsystem, related to the repeated memory release, allows a attacker to trigger a service failure.

The vulnerability of the hcidevdoopen function in the Linux kernel’s device initialization subsystem is related to the repeated release of memory. Exploiting this vulnerability allows an attacker to cause a service failure using the malicious HCI TTY Bluetooth device...

The vulnerability of the copy_from_user() function in the file system of the shiftfs filesystem in Linux’s operating system, which is related to the repeated release of memory, allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the copyfromuser function in the file system of the shiftfs filesystem in Linux’s operating system is related to the repeated release of memory. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service...

The vulnerability of the show-status function of the CGI proxy HTTP Privoxy handler, related to improper memory release before deleting last links, allows a hacker to trigger a service failure.

The vulnerability of the show-status function in the CGI proxy HTTP Privoxy handler is related to improper memory release before deleting last links. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the kernel of the Junos operating system’s CLI component, which allows a attacker to trigger an emergency shutdown of the application

The vulnerability of the kernel of the Junos operating system’s CLI component is related to memory release errors. Exploiting this vulnerability can allow an attacker to cause the application to terminate abnormally...

The vulnerability of the Webmail component of the FortiMail email protection system allows a hacker to cause a service failure.

The vulnerability of the Webmail component of the FortiMail email protection system is related to a memory release error. Exploiting this vulnerability could allow an attacker to cause service interruptions by sending specially crafted login requests to the system...

ROS-2-538

2.538 Multiple vulnerabilities in libwebp 1. Vulnerability description: CVE-2020-36332 A vulnerability in the libwebp library for encoding and decoding WebP images, is related to improper control of internal resource consumption. Exploitation of the vulnerability could allow an attacker acting...

GHSA-5RWJ-J5M3-3CHJ Missing Release of Memory after Effective Lifetime in detect-character-encoding

Impact In detect-character-encoding v0.3.0 and earlier, allocated memory is not released. Patches The problem has been patched in detect-character-encoding v0.3.1. CVSS score CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/RL:O/RC:C Base Score: 7.5 High Temporal Score: 7.2 High Since...

Missing Release of Memory after Effective Lifetime in detect-character-encoding

Impact In detect-character-encoding v0.3.0 and earlier, allocated memory is not released. Patches The problem has been patched in detect-character-encoding v0.3.1. CVSS score CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/RL:O/RC:C Base Score: 7.5 High Temporal Score: 7.2 High Since...

CVE-2021-39176 Missing Release of Memory after Effective Lifetime in detect-character-encoding

detect-character-encoding is a package for detecting character encoding using ICU. In detect-character-encoding v0.3.0 and earlier, allocated memory is not released. The problem has been patched in detect-character-encoding v0.3.1...

Use after free in internment

ArcIntern::drop has a race condition where it can release memory which is about to get another user. The new user will get a reference to freed memory. This was fixed by serializing access to an interned object while it is being deallocated. Versions prior to 0.3.12 used stronger locking which...

GHSA-RFGG-VCCR-M46M Missing release of memory in sized-chunks

An issue was discovered in the sized-chunks crate through 0.6.2 for Rust. In the Chunk implementation, clone can have a memory-safety issue upon a panic...

GHSA-X54V-QXXR-93QC Missing release of memory in sized-chunks

Chunk: Array size is not checked when constructed with unit and pair. Array size is not checked when constructed with From. Clone and insertfrom are not panic-safe; A panicking iterator causes memory safety issues with them. InlineArray: Generates unaligned references for types with a large...

Missing release of memory in sized-chunks

Chunk: Array size is not checked when constructed with unit and pair. Array size is not checked when constructed with From. Clone and insertfrom are not panic-safe; A panicking iterator causes memory safety issues with them. InlineArray: Generates unaligned references for types with a large...

The vulnerability of the WriteEPTImage function in the coders/ept.c component of the console image editing tool ImageMagick allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures. This vulnerability is related to the repeated release of the memory area, enabling a hacker to access sensitive information.

The vulnerability of the WriteEPTImage function in the coders/ept.c component of the console-based image editing tool ImageMagick is related to the repeated release of a memory area. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, an...

The vulnerability of the gatttool disconnect_cb() subroutine in the shared/att.c component of the Bluetooth technology stack for Linux BlueZ allows a intruder to access confidential data, compromise its integrity, and cause a service failure.

The vulnerability of the gatttool disconnectcb subroutine in the shared/att.c component of the Bluetooth technology stack for Linux BlueZ is related to the repeated release of a memory area due to an excessive disconnection event from MGMT. Exploiting this vulnerability allows an attacker to gain...

The vulnerability of the `inotify_update_existing_watch()` function in the Linux kernel’s `fs/notify/inotify/inotify_user.c` file, related to a lack of memory release mechanism, allows a malicious actor to trigger a service failure.

The vulnerability of the inotifyupdateexistingwatch function in the fs/notify/inotify/inotifyuser.c file of the Linux operating system’s kernel is related to a lack of memory release mechanism. Exploiting this vulnerability allows an attacker to trigger a service failure...

Advisory ROSA-SA-2021-1803

Software: bind 9.11.4 OS: Cobalt 7.9 CVE-ID: CVE-2018-5744 CVE-Crit: HIGH CVE-DESC: Memory release failure may occur when processing messages with a specific combination of EDNS parameters. Affected versions are BIND 9.10.7 - 9.10.8-P1, 9.11.3 - 9.11.5-P1, 9.12.0 - 9.12.3-P1 and versions 9.10.7-S...

The vulnerability of Xen hypervisors, related to memory release errors, allows a hacker to cause a service failure.

The vulnerability of the Xen hypervisor implementation is related to memory release errors. Exploiting this vulnerability can allow an attacker to cause a service failure by using the XSRESETWATCHES request...

CVE-2021-3544

Several memory leaks were found in the virtio vhost-user GPU device vhost-user-gpu of QEMU in versions up to and including 6.0. They exist in contrib/vhost-user-gpu/vhost-user-gpu.c and contrib/vhost-user-gpu/virgl.c due to improper release of memory i.e., free after effective lifetime...

DEBIAN-CVE-2021-3544

Several memory leaks were found in the virtio vhost-user GPU device vhost-user-gpu of QEMU in versions up to and including 6.0. They exist in contrib/vhost-user-gpu/vhost-user-gpu.c and contrib/vhost-user-gpu/virgl.c due to improper release of memory i.e., free after effective lifetime...