PT-2024-2771 · Unknown +4 · Openvswitch +4

Name of the Vulnerable Software and Affected Versions: openvswitch version 2.17.8 Description: The issue is related to a memory leak in the xmalloc function in openvswitch-2.17.8/lib/util.c. This memory leak is associated with errors in memory release. Exploitation of this issue may allow a remot...

Advisory ROSA-SA-2023-2319

software: libxml2 2.9.14 OS: ROSA-CHROME packageevrstring: libxml2-2.9.14-4.src.rpm CVE-ID: CVE-2023-28484 BDU-ID: 2023-03298 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the xmlSchemaFixupComplexType xmlschemas.c function of the Libxml2 library is related to null pointer dereferencing...

The vulnerability in the net/netfilter/nf_tables_api.c component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the net/netfilter/nftablesapi.c component in the Linux operating system is related to errors during resource release. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2023-7615 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a denial-of-service vulnerability in the Internet Connection Sharing ICS function of the Windows operating system. This vulnerability is caused by incorrect clearing...

The vulnerability of the fftools/cmdutils.c component in the FFmpeg multimedia library allows a hacker to cause a service failure.

The vulnerability in the fftools/cmdutils.c component of the FFmpeg multimedia library is related to improper memory release before deleting the last reference. Exploiting this vulnerability allows an attacker to cause service failures remotely...

The vulnerability of the microblaze-dis.c component of the GNU Binutils development environment allows a hacker to trigger a system failure.

The vulnerability of the microblaze-dis.c component of the GNU Binutils development environment is related to improper memory release before deleting the last reference. Exploiting this vulnerability allows an attacker to cause a service failure...

The vulnerability of the `find_abstract_instance` function in the GNU Binutils development environment, which allows a hacker to cause a service failure.

The vulnerability of the findabstractinstance function in the GNU Binutils development environment is related to memory release errors. Exploiting this vulnerability could allow an attacker to cause a system failure...

PT-2023-6400 · F5 · Big-Ip

Name of the Vulnerable Software and Affected Versions: BIG-IP versions prior to the fixed version Description: The issue is related to errors in memory release, which can be exploited by a remote attacker to cause a denial of service. When a client-side HTTP/2 profile and the HTTP MRF Router opti...

MediaTek Chip Resource Management Error Vulnerability

MediaTek chips are a variety of chips from MediaTek, a company owned by MediaTek of China. A resource management error vulnerability exists in the MediaTek chips, which stems from an improper locking of the rpmb module, which may result in a double release...

The vulnerability of the `parse_stab_struct_fields` function in the GNU Binutils development environment, related to a memory leak, allows an attacker to cause a service failure.

The vulnerability of the parsestabstructfields function in the GNU development environment is related to a memory release error. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the Wireshark traffic analyzer, related to a memory release error, allows a hacker to cause a service failure.

The vulnerability of the Wireshark traffic analyzer is related to a memory release error. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

The vulnerability of the ProFTPD FTP server, related to a memory release error, allows attackers to gain unauthorized access to protected information.

The vulnerability of the ProFTPD FTP server is related to a memory release error. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the components colord/src/cd-device-db.c and colord/src/cd-profile-db.c of the Linux operating system’s kernel, which allows a malicious individual to gain unauthorized access to protected information.

The vulnerability of the components colord/src/cd-device-db.c and colord/src/cd-profile-db.c in the Linux operating system’s system daemon colord is related to a memory release error. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

The vulnerabilities of the microprogrammed software of TP-Link routers such as TL-WR940N V2/V4/V6, TL-WR841N V8/V10, and TL-WR941ND V5 allow attackers to cause service failures.

The vulnerability of the microprogrammed software of TP-Link routers such as TL-WR940N V2/V4/V6, TL-WR841N V8/V10, and TL-WR941ND V5 is related to errors in resource release. Exploiting this vulnerability allows a malicious actor to trigger a service failure using a specially created GET request...

The vulnerability of the ROS2 operating system, related to errors in resource release, allows a intruder to trigger a service failure.

The vulnerability of the ROS2 operating system is related to errors during resource release. Exploiting this vulnerability can allow a remote attacker to cause service failures...

PT-2023-3702 · Oracle +8 · Mysql Server +7

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 8.0.33 and prior Description: The issue is related to errors in resource release in the InnoDB component of the MySQL Server. Exploitation of this issue can allow a remote attacker to cause a hang or frequently repeatabl...

The vulnerability of microprogramming software in Siemens SIMATIC and SINAMICS products, related to a memory release error, allows attackers to trigger malfunctions during maintenance operations.

The vulnerability of microprogrammed software in Siemens SIMATIC and SINAMICS products is related to a memory release error. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service failures...

Linux kernel 资源管理错误漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel suffers from a double-release vulnerability that stems from a double-release flaw in the TUN/TAP device driver, which can be exploited by an attacker to crash a...

Advisory ROSA-SA-2023-2127

Software: openssh 7.4 OS: rosa-server79 packageevrstring: openssh-7.4p1-21 CVE-ID: CVE-2023-25136 BDU-ID: 2023-00711 CVE-Crit: CRITICAL CVE-DESC: A vulnerability in the options.kexalgorithms component of the OpenSSH cryptographic security tool server is associated with a memory re-release error...

The vulnerability of the SIP ALG application-level gateway on Junos OS MX Series routers allows a attacker to cause a service failure.

The vulnerability of the SIP application-level gateway implemented on Junos OS MX Series routers involves a memory release error. Exploiting this vulnerability allows an attacker to cause service failure by sending specially crafted SIP packets remotely...