PT-2021-2220

Name of the Vulnerable Software and Affected Versions ConnMan versions prior to 1.39 Description The issue is related to a memory release error in the gdhcp component of ConnMan, which could be exploited by network-adjacent attackers to leak sensitive stack information. This leak could potentiall...

The vulnerability of the IPv4 traffic processing service of the StarOS operating system, which allows a hacker to cause a service failure.

The vulnerability of the IPv4 traffic processing service of the StarOS operating system is related to a memory release error. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

CVE-2021-21723

Some ZTE products have a DoS vulnerability. Due to the improper handling of memory release in some specific scenarios, a remote attacker can trigger the vulnerability by performing a series of operations, resulting in memory leak, which may eventually lead to device denial of service. This affect...

Input validation

Some ZTE products have a DoS vulnerability. Due to the improper handling of memory release in some specific scenarios, a remote attacker can trigger the vulnerability by performing a series of operations, resulting in memory leak, which may eventually lead to device denial of service. This affect...

CVE-2021-21723

Some ZTE products have a DoS vulnerability. Due to the improper handling of memory release in some specific scenarios, a remote attacker can trigger the vulnerability by performing a series of operations, resulting in memory leak, which may eventually lead to device denial of service. This affect...

CVE-2021-21723

Some ZTE products have a DoS vulnerability. Due to the improper handling of memory release in some specific scenarios, a remote attacker can trigger the vulnerability by performing a series of operations, resulting in memory leak, which may eventually lead to device denial of service. This affect...

CVE-2021-21723

CVE-2021-21723 affects several ZXR10 models (9904, 9908, 9916, 9904-S, 9908-S). The vulnerability stems from improper handling of memory release in certain scenarios, allowing a remote attacker to trigger a memory leak that may lead to device denial of service. Affected versions are all up to V1....

The vulnerability of the zrle_compress_data function in the software for emulating hardware on various QEMU platforms arises from improper memory release before deleting the last reference. This allows a malicious actor to trigger a service failure.

The vulnerability of the zrlecompressdata function in the software for emulating hardware on various QEMU platforms is related to improper memory release before deleting the last pointer. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its...

Multiple Huawei products security vulnerabilities

Huawei CloudEngine 12800 and others are products of Huawei, China.Huawei CloudEngine 12800 is a 12800 series data center switch.Huawei Cloudengine 5800 is a 5800 series data center switch.Huawei Cloudengine 6800 is a 6800 series data center switch. A security vulnerability exists in multiple Huaw...

The vulnerability of the Junos operating system’s kernel allows a attacker to trigger an emergency shutdown of the application.

The vulnerability of the Junos operating system’s kernel is related to the improper release of memory before deleting the last reference. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause an unexpected termination of the application...

PT-2020-22911

Уязвимость функции pdpml get from user модуля ядра linux-astra-modules связана с некорректным освобождением памяти после завершения её использования. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

The vulnerability of the Fly print manager involves improper release of memory before deleting last-level links. This allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Print Manager Fly is related to the improper release of memory before deleting the last references. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

PT-2020-22875

Уязвимость менеджера окон fly-wm связана с неправильным освобождением памяти после переноса иконки в новое место. Эксплуатация уязвимости может позволить нарушителю получить доступ к конфиденциальным данным...

The vulnerability of the ntpd implementation of the Network Time Synchronization Protocol allows a attacker to cause a service failure.

The vulnerability of the ntpd implementation of the NTP synchronization protocol is related to a memory release error. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

The vulnerability of the exit_notify function in the Linux operating system’s kernel allows a hacker to execute arbitrary code.

The vulnerability of the exitnotify function in the Linux operating system’s kernel is related to a memory release error. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

RUSTSEC-2020-0017 Use after free in ArcIntern::drop

ArcIntern::drop has a race condition where it can release memory which is about to get another user. The new user will get a reference to freed memory. This was fixed by serializing access to an interned object while it is being deallocated. Versions prior to 0.3.12 used stronger locking which...

Use after free in ArcIntern::drop

ArcIntern::drop has a race condition where it can release memory which is about to get another user. The new user will get a reference to freed memory. This was fixed by serializing access to an interned object while it is being deallocated. Versions prior to 0.3.12 used stronger locking which...

The vulnerability of Huawei’s microprogrammed router software, related to the re-release of memory, allows a hacker to trigger a service failure.

The vulnerability of Huawei’s microprogrammed router software is related to the repeated release of memory. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

PT-2020-2652

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a memory release error in the exit notify function of the Linux kernel. Exploitation of this issue may allow an attacker to execute arbitrary code. Recommendation...

EulerOS 2.0 SP5 : pyOpenSSL (EulerOS-SA-2020-1320)

According to the versions of the pyOpenSSL package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Python Cryptographic Authority pyopenssl version Before 17.5.0 contains a CWE - 401 : Failure to Release Memory Before Removing Last Reference...