PT-2024-18754 · Unknown · Libsavsac.So

Name of the Vulnerable Software and Affected Versions: libsavsac.so versions prior to SMR Apr-2024 Release 1 Description: The issue is an out-of-bounds write vulnerability that occurs while releasing memory in libsavsac.so. This allows a local attacker to execute arbitrary code. Recommendations:...

ROS-20240402-11

A vulnerability in the Extractattributes component of mediatools/m3u8.c:329 of the GPAC multimedia platform is related to a with a lack of memory release after an effective lifetime. Exploitation of the vulnerability could Allow an attacker acting remotely to cause a denial of service A...

The vulnerability of the Golang programming language, related to errors in memory release during RSA encryption/decryption code, allows a hacker to cause a service failure.

The vulnerability of the Golang programming language is related to errors in memory release during RSA encryption/decryption code. Exploiting this vulnerability can allow a remote attacker to cause a service failure using specially created data...

The vulnerability of the drm_bridge_get_edid function in the Meson kernel of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the drmbridgegetedid function in the Meson component of the Linux operating system is related to memory release errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the `of_node_put` function in the rk817 component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the ofnodeput function in the rk817 component of the Linux operating system is related to memory release errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-2-490

2.490 Multiple vulnerabilities of libwebp 1. Vulnerability Description: CVE-2020-36332 A vulnerability in the libwebp library for encoding and decoding WebP images, is related to improper control of internal resource consumption. Exploitation of the vulnerability could allow an attacker acting...

The vulnerability of the Magick::Draw function in the console-based ImageMagick graphics editor allows a hacker to cause a service failure.

The vulnerability of the Magick::Draw function in the console-based image editing tool ImageMagick is related to memory release errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the ruby-magick interface between Ruby and the ImageMagick library, related to memory leak errors, allows attackers to trigger a denial-of-service attack.

The vulnerability of the ruby-magick interface between Ruby and the ImageMagick library is related to memory release errors. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

The vulnerability of the regmapdebugfs_exit() function in Linux operating systems allows a hacker to disclose sensitive information or cause system failures.

The vulnerability of the regmapdebugfsexit function in Linux operating systems is related to memory release errors. Exploiting this vulnerability can allow attackers to disclose sensitive information or cause service failures...

CVE-2023-50716

eProsima Fast DDS formerly Fast RTPS is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Prior to versions 2.13.0, 2.12.2, 2.11.3, 2.10.3, and 2.6.7, an invalid DATAFRAG Submessage causes a bad-free error, and the Fast-DDS process can be remotely...

CVE-2023-50716

eProsima Fast DDS formerly Fast RTPS is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Prior to versions 2.13.0, 2.12.2, 2.11.3, 2.10.3, and 2.6.7, an invalid DATAFRAG Submessage causes a bad-free error, and the Fast-DDS process can be remotely...

The vulnerability of the driver for the cryptographic hardware accelerator sun8i-ss (drivers/crypto/allwinner/sun8i-ss) in Linux operating systems allows a hacker to cause a service failure.

The vulnerability of the driver for the Crypto Hardware Accelerator sun8i-ss drivers/crypto/allwinner/sun8i-ss in Linux operating systems is related to improper memory release before deleting the last reference. Exploiting this vulnerability can allow a remote attacker to cause service...

CVE-2023-33086 Improper Release of Memory Before Removing Last Reference in Data Modem

Transient DOS while processing multiple IKEV2 Informational Request to device from IPSEC server with different identifiers...

CVE-2023-33084 Improper Release of Memory Before Removing Last Reference in Data Modem

Transient DOS while processing IE fragments from server during DTLS handshake...

CVE-2023-33084 Improper Release of Memory Before Removing Last Reference in Data Modem

Transient DOS while processing IE fragments from server during DTLS handshake...

The vulnerability of the `dc_link_construct()` function (drm/amd/display) in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the dclinkconstruct function drm/amd/display in the Linux operating system is related to improper memory release before deleting the last reference. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

The vulnerability of the dcn_create_resource_pool function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the dcncreateresourcepool function in the Linux operating system is related to memory release errors. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability in the /krb5/src/kdc/ndr.c component of the Kerberos network protocol implementation in the Debian GNU/Linux operating system, related to memory release errors, allows a attacker to cause a service failure.

The vulnerability in the /krb5/src/kdc/ndr.c component of the Kerberos network protocol implementation in the Debian GNU/Linux operating system is related to memory release errors. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

Advisory ROSA-SA-2024-2356

Software: libxml2 2.9.7 OS: ROSA Virtualization 2.1 packageevrstring: libxml2-2.9.7-16.rv3 CVE-ID: CVE-2016-3709 BDU-ID: 2023-07602 CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in the Libxml2 library is related to the failure to take measures to protect the structure of a web page. Exploitation of...

The vulnerability of the OpenSSL processor in real-time operating systems like Wind River VxWorks allows attackers to trigger a service failure.

The vulnerability of the OpenSSL processor in real-time operating systems from Wind River and VxWorks is related to memory release errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...