UBUNTU-CVE-2021-3544

Several memory leaks were found in the virtio vhost-user GPU device vhost-user-gpu of QEMU in versions up to and including 6.0. They exist in contrib/vhost-user-gpu/vhost-user-gpu.c and contrib/vhost-user-gpu/virgl.c due to improper release of memory i.e., free after effective lifetime...

The vulnerability of the PostgreSQL database management system’s INSERT...ON_CONFLICT...DOUPDATE implementation allows a perpetrator to gain unauthorized access to protected information.

The vulnerability in the implementation of INSERT commands with ON CONFLICT...DO UPDATE in the PostgreSQL database management system is related to memory release errors. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the UPDATE command implementation in the PostgreSQL database management system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the UPDATE command implementation in the PostgreSQL database management system is related to memory release errors. Exploiting this vulnerability allows an attacker, operating remotely, to gain unauthorized access to protected information...

Design/Logic Flaw

A missing release of memory after effective lifetime vulnerability in FortiSwitch 6.4.0 to 6.4.6, 6.2.0 to 6.2.6, 6.0.0 to 6.0.6, 3.6.11 and below may allow an attacker on an adjacent network to exhaust available memory by sending specifically crafted LLDP/CDP/EDP packets to the device...

CVE-2021-26111

CVE-2021-26111 affects FortiSwitch memory management: versions 6.4.0–6.4.6, 6.2.0–6.2.6, 6.0.0–6.0.6, 3.6.11 and earlier are vulnerable. A missing release of memory after effective lifetime can allow an attacker on an adjacent network to exhaust available memory by sending specially crafted LLDP/...

CVE-2021-26111

A missing release of memory after effective lifetime vulnerability in FortiSwitch 6.4.0 to 6.4.6, 6.2.0 to 6.2.6, 6.0.0 to 6.0.6, 3.6.11 and below may allow an attacker on an adjacent network to exhaust available memory by sending specifically crafted LLDP/CDP/EDP packets to the device...

CVE-2021-26111

A missing release of memory after effective lifetime vulnerability in FortiSwitch 6.4.0 to 6.4.6, 6.2.0 to 6.2.6, 6.0.0 to 6.0.6, 3.6.11 and below may allow an attacker on an adjacent network to exhaust available memory by sending specifically crafted LLDP/CDP/EDP packets to the device...

The vulnerability of the Cache Manager API of the Squid proxy server allows a hacker to induce a service failure.

The vulnerability of the Squid proxy server’s Cache Manager API component is related to memory release errors. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

PT-2021-3092

Name of the Vulnerable Software and Affected Versions Microsoft HTTP Protocol Stack versions prior to the fixed version Description The issue is related to a memory usage problem after memory release in the HTTP Protocol Stack of Microsoft Windows operating systems. This can be exploited by a...

GHSA-4PV3-63JW-4JW2 Missing Release of Memory after Effective Lifetime in Apache Tika

A carefully crafted or corrupt file may trigger a System.exit in Tika's OneNote Parser. Crafted or corrupted files can also cause out of memory errors and/or infinite loops in Tika's ICNSParser, MP3Parser, MP4Parser, SAS7BDATParser, OneNoteParser and ImageParser. Apache Tika users should upgrade ...

Missing Release of Memory after Effective Lifetime in Apache Tika

A carefully crafted or corrupt file may trigger a System.exit in Tika's OneNote Parser. Crafted or corrupted files can also cause out of memory errors and/or infinite loops in Tika's ICNSParser, MP3Parser, MP4Parser, SAS7BDATParser, OneNoteParser and ImageParser. Apache Tika users should upgrade ...

The vulnerability of the User Mode Driver (UMD) of the Linux kernel, which allows a hacker to trigger a service failure

The vulnerability of the User Mode Driver UMD of the Linux operating system is related to memory release errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the IPv4 tunneling implementation in the Trace TCP/IP protocol stack, related to the repeated memory release, allows a attacker to cause a service failure.

The vulnerability of the IPv4 tunneling implementation in the Trace TCP/IP protocol stack is related to the reallocation of memory. Exploiting this vulnerability can allow a malicious actor to cause service interruptions from a remote location...

The vulnerability of the Link Layer Discovery Protocol implementation in Cisco Small Business RV series routers’ software allows a attacker to cause service failure.

The vulnerability of the Link Layer Discovery Protocol LLDP implementation in Cisco Small Business RV series routers involves improper memory release before deleting last-hop links. Exploiting this vulnerability allows a malicious actor to cause service failures remotely...

The vulnerability in the `default_add_message` function of the `read-catalog.c` file in the GNU project’s library, related to the internationalization of Gettext, allows a hacker to repeatedly release a memory area, enabling them to access confidential data, compromise its integrity, and cause service failures.

The vulnerability in the defaultaddmessage function of the read-catalog.c file in the GNU project’s library is related to the repeated release of a memory area. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity, and even cause...

The vulnerability in the `pp_tokline` function of the `asm/preproc.c` file of the NASM assembler for the x86 processor architecture allows a attacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the pptokline function in the asm/preproc.c file of the x86 architecture NASM assembler is related to the repeated release of a memory area. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity, and even cause...

The vulnerability of Internet Explorer and Microsoft Edge browsers, related to the repeated release of memory, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of Internet Explorer and Microsoft Edge relates to the repeated release of memory. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information...

The vulnerability of the gdhcp component of the Connman connection controller allows a hacker to exploit it to disclose protected information.

The vulnerability of the gdhcp component in the Connman connection controller is related to a memory release error. Exploiting this vulnerability could allow a remote attacker to disclose sensitive information that is protected by this security mechanism...

The vulnerability of the SetImageExtent() function in the ImageMagick console graphics editor allows a hacker to cause a service failure.

The vulnerability of the SetImageExtent function /MagickCore/image.c in the console-based graphic editor ImageMagick is related to memory release errors. Exploiting this vulnerability could allow a remote attacker to trigger a service failure by using a specially created file...

The vulnerability of the usm_free_usmStateReference function in the software for deploying and using the SNMP protocol Net-SNMP allows a attacker to trigger a service failure.

The vulnerability of the usmfreeusmStateReference function in the software for deploying and using the SNMP protocol Net-SNMP is due to repeated memory release. Exploiting this vulnerability can allow a malicious actor to cause service failures through specially crafted GetBulk requests...