PT-2022-7437 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the request threaded irq function in the gpiolib component of the Linux kernel, which can cause a repeated release of memory, potentially leading to a denial of...

The vulnerability of the netgroupcache.c component of the server caching daemon nscd in the GNU C Library allows a attacker to cause a service failure.

The vulnerability of the netgroupcache.c component, a caching daemon for system name services in the GNU C Library, is related to the repeated release of memory. Exploiting this vulnerability allows an attacker to cause service failures...

The vulnerability of the gd_gd2.c component of the LibGD graphics library allows a hacker to cause a service failure.

The vulnerability of the gdgd2.c component of the LibGD graphics library is related to the repeated release of memory. Exploiting this vulnerability allows a remote attacker to cause a service failure...

CVE-2022-2979

Opening a specially crafted file could cause the affected product to fail to release its memory reference potentially resulting in arbitrary code execution...

Linux kernel 代码问题漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A code issue vulnerability exists in Linux kernel version 5.16-rc6, which stems from a lack of checking after a call to vzalloc in the...

The vulnerability of the Application Quality of Experience component of the Packet Forwarding Engine (PFE) module in Juniper Networks’ Junos OS, related to a memory release error, allows a attacker to trigger a service failure.

The vulnerability of the Application Quality of Experience component of the Packet Forwarding Engine PFE module in Juniper Networks’ Junos OS is related to a memory release error. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2022-22204

An Improper Release of Memory Before Removing Last Reference vulnerability in the Session Initiation Protocol SIP Application Layer Gateway ALG of Juniper Networks Junos OS allows unauthenticated network-based attacker to cause a partial Denial of Service DoS. On all MX and SRX platforms, if the...

ROS-20220701-03

Vulnerability in Mozilla Thunderbird email client is related to improper handling of sandbox header CSP without the "allow scripts" parameter. Exploitation of the vulnerability could allow an attacker acting remotely to use an iframe to bypass an implemented restriction. remotely, use an iframe t...

The vulnerability of the `rpmsg_virtio_add_ctrl_dev` function (drivers/rpmsg/virtio_rpmsg_bus.c) in the Linux kernel allows a hacker to trigger a service failure.

The vulnerability of the rpmsgvirtioaddctrldev function drivers/rpmsg/virtiorpmsgbus.c in the Linux kernel is related to the repeated release of memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the rpmsg_probe function (drivers/rpmsg/virtio_rpmsg_bus.c) in the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the rpmsgprobe function drivers/rpmsg/virtiorpmsgbus.c in the Linux kernel is related to the repeated release of memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability in the implementation of the acrn_dev_ioctl() function of the ACRN hypervisor service module in Linux kernels allows a attacker to disclose sensitive information or cause service failures.

The vulnerability of the acrndevioctl function implementation in the ACRN HSM service module of Linux operating systems is related to memory release errors. Exploiting this vulnerability can allow an attacker to disclose sensitive information or cause service failures...

Missing Release of Memory after Effective Lifetime

DCMTK through 3.6.6 does not handle memory free properly. The program malloc a heap memory for parsing data, but does not free it when error in parsing. Sending specific requests to the dcmqrdb program incur the memory leak. An attacker can use it to launch a DoS attack...

The vulnerability of the ClamAV antivirus software, related to the repeated release of memory, allows a hacker to execute arbitrary code.

The vulnerability of the ClamAV antivirus software is related to repeated memory release. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending a specially created file...

Adobe Illustrator 资源管理错误漏洞

Adobe Illustrator is a set of vector-based image creation software from the American company Audobee Adobe. A resource management error vulnerability exists in Adobe Illustrator. The vulnerability stems from a mix-up in the program's instructions responsible for freeing memory. An attacker could...

The vulnerability of the llcp_sock_connect() function in the NFC protocol of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the llcpsockconnect function in the NFC protocol of the Linux operating system’s kernel is related to improper memory release before deleting the last references. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Juniper Junos OS FPC Crash (JSA11229)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11229 advisory. A Missing Release of Memory after Effective Lifetime vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS on PTX Series allows an adjacent attacker...

The vulnerability of the ClamAV antivirus software library and the Cisco AMP security tool for end devices allows a perpetrator to trigger a service failure.

The vulnerability of the ClamAV antivirus software library and the Cisco AMP security tool for end devices is related to memory release errors during HTML file syntax analysis. Exploiting this vulnerability can allow an attacker to cause service interruptions...

The vulnerability of the rtrs_clt_dev_release function (drivers/infiniband/ulp/rtrs/rtrs-clt.c) in the Linux kernel allows a hacker to trigger a service failure.

The vulnerability of the rtrscltdevrelease function drivers/infiniband/ulp/rtrs/rtrs-clt.c in the Linux kernel is related to the repeated release of memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20220516-06

A vulnerability in the high-level Ruby programming language is related to a type conversion bug in the some conversion methods, such as KernelFloat and Stringtof. Exploitation of the vulnerability could allow an attacker acting remotely to pass specially crafted data to a vulnerable application,...

PT-2022-7668 · Realtek · Realtek Rtsuer Driver For Usb Card Reader +1

Name of the Vulnerable Software and Affected Versions: Realtek RtsPer driver for PCIe Card Reader versions prior to 10.0.22000.21355 Realtek RtsUer driver for USB Card Reader versions prior to 10.0.22000.31274 Description: The issue is related to memory release errors in the Realtek SD card reade...