1397 matches found
The vulnerability of the curl_url_get() function in the command-line utility cURL allows a attacker to cause a service failure.
The vulnerability of the curlurlget function in the command-line utility cURL is related to the release of previously unallocated memory due to the use of the Punycode method for converting IDN domains. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
The vulnerability of the vf.c and vf_vo.c files of the Mplayer media player allows a hacker to cause a service failure.
The vulnerability of the vf.c and vfvo.c files in the Mplayer media player is related to the lack of memory release after the effective lifespan of these files has ended. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the HTTP client in Apache CXF web services allows attackers to trigger a service failure.
The vulnerability of the HTTP client component in Apache CXF web services is related to memory release errors. Exploiting this vulnerability can allow an attacker to cause service failures remotely...
ROS-20210716-02
A vulnerability in the DICOM DCMTK library is related to pointer dereferencing errors. Exploitation of the vulnerability allows an attacker to cause a denial of service Vulnerability of the library for working with DICOM DCMTK format is related to allocation of heap memory for parsing the data, b...
Vulnerability of QTS and QuTS operating systems, as well as Qnap network devices, related to the re-release of memory allows attackers to execute arbitrary code.
The vulnerability of QTS and QuTS operating systems, as well as Qnap network devices, is related to the re-release of memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending specially crafted data...
CVE-2024-39549
CVE-2024-39549 affects Junos OS and Junos OS Evolved. A crafted BGP Path attribute update can trigger a Missing Release of Memory after Effective Lifetime in the routing process daemon (rpd), causing memory to be allocated but not freed in all paths and leading to a DoS. Impact is memory exhausti...
Juniper Networks Junos OS and Juniper Networks Junos OS Evolved Security Vulnerabilities
Juniper Networks Junos OS and Juniper Networks Junos OS Evolved are both products of Juniper Networks, Inc.Juniper Networks Junos OS is a network operating system dedicated to the company's hardware devices. The operating system provides a secure programming interface and the Junos SDK. Juniper...
Juniper Networks Junos OS and Juniper Networks Junos OS Evolved Security Vulnerabilities
Juniper Networks Junos OS and Juniper Networks Junos OS Evolved are both products of Juniper Networks, Inc.Juniper Networks Junos OS is a network operating system dedicated to the company's hardware devices. The operating system provides a secure programming interface and the Junos SDK. Juniper...
PT-2024-28521 · Juniper Networks · Junos
Name of the Vulnerable Software and Affected Versions: Junos OS on MX Series versions prior to 21.2R3-S6 Junos OS on MX Series version 21.4 prior to 21.4R3-S6 Junos OS on MX Series version 22.1 prior to 22.1R3-S5 Junos OS on MX Series version 22.2 prior to 22.2R3-S3 Junos OS on MX Series version...
Juniper Junos OS Vulnerability (JSA83011)
The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA83011 advisory. - An Improper Handling of Exceptional Conditions vulnerability in the routing protocol daemon RPD of Juniper Networks Junos OS and Junos OS Evolved allows a network based,...
Juniper Junos OS Vulnerability (JSA82999)
The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA82999 advisory. - A Missing Release of Memory after Effective Lifetime vulnerability in Juniper Networks Junos OS on MX Series allows an unauthenticated adjacent attacker to cause a...
Undertow Missing Release of Memory after Effective Lifetime vulnerability
A vulnerability was found in Undertow. This issue requires enabling the learning-push handler in the server's config, which is disabled by default, leaving the maxAge config in the handler unconfigured. The default is -1, which makes the handler vulnerable. If someone overwrites that config, the...
ROS-20240708-01
Vulnerability in the HTTP/2 network protocol implementation of the cURL command line utility is related to memory release errors. memory freeing errors. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service Vulnerability in the cURL command line...
ROS-20240708-21
Vulnerability in cURL command line utility is due to bugs in protocol removal logic. Exploitation The exploitation of the vulnerability may allow a remote intruder to gain access to protected information Vulnerability in the HTTP/2 network protocol implementation of the cURL command line utility ...
Astra Linux – Vulnerability in Parsec
The vulnerability of the pdp-id utility in the PARSEC security subsystem is related to improper memory release after its use. Exploiting this vulnerability allows an attacker to cause a service failure...
CVE-2021-47615
In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix releasing unallocated memory in dereg MR flow For the case of IBMRTYPEDM the mr does doesn't have a umem, even though it is a user MR. This causes function mlx5freeprivdescs to think that it is a kernel MR, leading...
CVE-2021-47615
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
CLSA-2024-1718794440 bind: Fix of CVE-2022-3094
CVE-2022-3094: Fix issue causing resources exhaustion in named when processing dynamic DNS updates from trusted clients by releasing memory allocated to unpermitted clients immediately upon rejection...