CVE-2023-3317

A use-after-free flaw was found in mt7921checkoffloadcapability in drivers/net/wireless/mediatek/mt76/mt7921/init.c in wifi mt76/mt7921 sub-component in the Linux Kernel. This flaw could allow an attacker to crash the system after 'features' memory release. This vulnerability could even lead to a...

CVE-2023-3317

A use-after-free flaw was found in mt7921checkoffloadcapability in drivers/net/wireless/mediatek/mt76/mt7921/init.c in the wifi mt76/mt7921 sub-component of the Linux Kernel. This issue could allow an attacker to crash the system after the 'features' memory releases which could lead to a kernel...

The vulnerability of the BGP routing protocol on Juniper Networks’ Junos OS and Junos OS Evolved systems allows a attacker to cause a service failure.

The vulnerability of the BGP routing protocol in Juniper Networks’ Junos OS and Junos OS Evolved operating systems is related to memory release errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the Flexible PIC Concentrator module’s operating system, Juniper Networks Junos OS, allows a hacker to trigger a maintenance failure.

The vulnerability of the Flexible PIC Concentrator FPC module of Juniper Networks’ Junos OS is related to memory release errors. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability of theEncodeAlphaInternal() function in the libwebp library allows for manipulation of image encoding and decoding processes in the WebP format by browsers such as Mozilla Firefox, Firefox ESR, and the email client Thunderbird. This vulnerability enables a malicious actor to cause service interruptions.

The vulnerability of theEncodeAlphaInternal function in the libwebp library, which is used for encoding and decoding images in the WebP format for browsers such as Mozilla Firefox, Firefox ESR, and the Thunderbird email client, is related to a repeated memory release mechanism. Exploiting this...

Linux Kernel ksmbd Memory Exhaustion Denial-of-Service Vulnerability

This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of the Linux Kernel. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of new TCP connections. The issue results from the lack of...

Intel Server Board 资源管理错误漏洞

Intel Server Board is a server motherboard from Intel Corporation USA. A security vulnerability exists in Intel Server Board versions prior to 2.90, which originates from a double memory release. An attacker exploited the vulnerability to cause information disclosure...

kernel: RDMA/qedr: Fix potential memory leak in __qedr_alloc_mr()

A flaw was found in the qedr module in the Linux kernel. A missing release of allocated memory when an error occurs will cause a memory leak, potentially impacting system performance and resulting in a denial of service...

Linux kernel 资源管理错误漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A resource management error vulnerability exists in versions of Linux kernel prior to 6.1.11, which stems from a confusion in the instructions responsible for freeing memory in...

Qualcomm 芯片安全漏洞

A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way to miniaturize circuitry mainly semiconductor devices, but also passive components, etc. and is manufactured from time to time on the surface of semiconductor wafers. A security vulnerability exists in some Qualcomm products that ste...

The vulnerability of the PEMReadBioEx() function in the OpenSSL cryptographic library, which allows a hacker to trigger a denial-of-service attack

The vulnerability of the PEMReadbioex function in the OpenSSL cryptographic library is related to the repeated memory release during the processing of PEM files. Exploiting this vulnerability could allow a malicious actor to cause service interruptions using a specially created PEM file...

Design/Logic Flaw

A Missing Release of Memory after Effective Lifetime vulnerability in the routing protocol daemon of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network based attacker to cause a Denial of Service DoS. In a BGP rib sharding scenario, when an attribute of an active BG...

Juniper Networks Junos OS 安全漏洞

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The operating system provides a secure programming interface and the Junos SDK. Juniper Networks Junos OS has a security vulnerability that originates from a missing memory release...

The vulnerability of the tun_free_netdev() function in Linux kernel-based TUN/TAP virtual network drivers allows a attacker to cause service failure or gain increased privileges.

The vulnerability of the tunfreenetdev function in Linux’s TUN/TAP virtual network drivers is related to the repeated release of previously released memory. Exploiting this vulnerability can allow an attacker to cause service failures or increase their privileges...

The vulnerability of the Link Layer Discovery Protocol (LLDP) implementation in the Cisco NX-OS operating system of Cisco Nexus 9000 Series Fabric Switches in ACI mode allows a attacker to cause a service failure.

The vulnerability of the Link Layer Discovery Protocol LLDP implementation in the Cisco NX-OS operating system of Cisco Nexus 9000 Series Fabric Switches in ACI mode is related to memory release errors. Exploiting this vulnerability could allow a malicious actor to cause service failure by sendin...

The vulnerability of the another_hunk() function in the pch.c component of the Patch program allows a hacker to trigger a service failure.

The vulnerability of the anotherhunk function in the pch.c component of the Patch program is related to the repeated release of memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

EulerOS 2.0 SP11 : libtar (EulerOS-SA-2023-1575)

According to the versions of the libtar package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - After tarclose, libtar.c releases the memory pointed to by pointer t. After tarclose is called in the list function, it continues to use pointer ...

The vulnerability of the __sys_socket_file() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the syssocketfile function in the Linux operating system’s kernel is related to the repeated release of memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the set_cmnd_path() function in the Sudo system administration program, which allows a hacker to cause a service failure.

The vulnerability of the setcmndpath function in the Sudo system administration program is related to the repeated release of memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the vrend_renderer.c component of the virtual OpenGL renderer Virglrenderer, which allows a hacker to cause a service failure.

The vulnerability of the vrendrenderer.c component of the virtual OpenGL renderer Virglrenderer is related to the repeated release of memory. Exploiting this vulnerability could allow an attacker to cause a service failure...