ROS-20240708-21

Vulnerability in cURL command line utility is due to bugs in protocol removal logic. Exploitation The exploitation of the vulnerability may allow a remote intruder to gain access to protected information Vulnerability in the HTTP/2 network protocol implementation of the cURL command line utility ...

ROS-20240708-01

Vulnerability in the HTTP/2 network protocol implementation of the cURL command line utility is related to memory release errors. memory freeing errors. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service Vulnerability in the cURL command line...

ROS-20240627-03

A vulnerability in the QEMU hardware emulator is related to a memory re-release error. Exploitation of the vulnerability could allow an attacker to execute arbitrary code by performing a DMA re-entry...

Network routing Memory Release DoS

The vulnerability of the FRRouting software for implementing network routing on Unix-like systems is related to improper processing of the BGP UPDATE message sent with EOR. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Xenstore DoS

The vulnerability of Xenstore information storage in Xen hypervisors stems from memory release errors that can occur due to the creation of an arbitrary number of nodes through transactions. Exploiting this vulnerability can allow a attacker to cause service failures...

PT-2024-10325 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to errors in resource release, which can lead to a denial of service DoS if exploited. In the Linux kernel, a vulnerability has been resolved where the worker...

UBUNTU-CVE-2022-48670

In the Linux kernel, the following vulnerability has been resolved: peci: cpu: Fix use-after-free in adevrelease When auxiliarydeviceadd returns an error, auxiliarydeviceuninit is called, which causes refcount for device to be decremented and .release callback will be triggered. Because adevrelea...

Linux PCI Disable Device DoS

The vulnerability of the pcidisabledevice function in the ixgbe component of Linux operating systems is related to resource release errors. Exploiting this vulnerability can allow an attacker to cause service failures...

Libvirt Heap Buffer Overflow DoS

The vulnerability of the virPCIVirtualFunctionList function in the virtualization management library Libvirt is related to improper memory release before deleting the last reference. Exploiting this vulnerability could allow an attacker to cause a service failure...

Kerberos Network Protocol DoS

The vulnerability in the /krb5/src/lib/rpc/pmaprmt.c component of the Kerberos network protocol is related to memory release errors. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

libLAS Heap Buffer Overflow DoS

The vulnerability in the /libLAS/apps/ts2las.cpp component of the libLAS library for reading and writing geospatial data is related to memory release errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

Kerberos Network Protocol DoS

The vulnerability of the /krb5/src/lib/gssapi/krb5/k5sealv3.c component, which implements the Kerberos network protocol, is related to memory release errors. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Golang RSA Memory Leak DoS

The vulnerability of the Golang programming language is related to errors in memory release during RSA encryption/decryption code. Exploiting this vulnerability can allow a remote attacker to cause a service failure using specially created data...

ROS-2-490

2.490 Multiple vulnerabilities of libwebp 1. Vulnerability Description: CVE-2020-36332 A vulnerability in the libwebp library for encoding and decoding WebP images, is related to improper control of internal resource consumption. Exploitation of the vulnerability could allow an attacker acting...

Debian GNU/Linux Kerberos Memory Release DoS

The vulnerability in the /krb5/src/kdc/ndr.c component of the Kerberos network protocol implementation in the Debian GNU/Linux operating system is related to memory release errors. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

PT-2024-2771 · Unknown +4 · Openvswitch +4

Name of the Vulnerable Software and Affected Versions: openvswitch version 2.17.8 Description: The issue is related to a memory leak in the xmalloc function in openvswitch-2.17.8/lib/util.c. This memory leak is associated with errors in memory release. Exploitation of this issue may allow a remot...

Advisory ROSA-SA-2023-2319

software: libxml2 2.9.14 OS: ROSA-CHROME packageevrstring: libxml2-2.9.14-4.src.rpm CVE-ID: CVE-2023-28484 BDU-ID: 2023-03298 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the xmlSchemaFixupComplexType xmlschemas.c function of the Libxml2 library is related to null pointer dereferencing...

Linux netfilter API DoS

The vulnerability of the net/netfilter/nftablesapi.c component in the Linux operating system is related to errors during resource release. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2023-7615 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a denial-of-service vulnerability in the Internet Connection Sharing ICS function of the Windows operating system. This vulnerability is caused by incorrect clearing...

FFmpeg FFTools Component DoS

The vulnerability in the fftools/cmdutils.c component of the FFmpeg multimedia library is related to improper memory release before deleting the last reference. Exploiting this vulnerability allows an attacker to cause service failures remotely...