Linux kernel security vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a memory reuse after release issue in ksmbdtcpnewconnection...

PT-2023-7300 · Amd · Amd Radeon Graphics Display Driver

Name of the Vulnerable Software and Affected Versions: AMD RadeonTM Graphics display driver affected versions not specified Description: The issue is related to improper input validation in the AMD RadeonTM Graphics display driver, which may allow an attacker to corrupt the display, potentially...

PT-2023-29700 · Openfga · Openfga

Name of the Vulnerable Software and Affected Versions: OpenFGA versions prior to 1.3.4 Description: OpenFGA is a flexible authorization/permission engine built for developers and inspired by Google Zanzibar. Affected versions of OpenFGA are vulnerable to a denial of service attack. When a number ...

PT-2023-6303 · Juniper Networks · Junos

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions prior to 20.4R3-S7 Juniper Networks Junos OS version 21.1 versions prior to 21.1R3-S5 Juniper Networks Junos OS version 21.2 versions prior to 21.2R3-S4 Juniper Networks Junos OS version 21.3 versions prior ...

The vulnerability of the AireOS operating system, related to improper cleaning or release of resources, allows a perpetrator to trigger a system reboot.

The vulnerability of the AireOS operating system is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a remote attacker to trigger a system reboot...

The vulnerability of the Layer 2 Tunneling Protocol (L2TP) implementation in the Cisco IOS XE operating system allows a hacker to induce a service failure.

The vulnerability of the Layer 2 Tunneling Protocol L2TP implementation in the Cisco IOS XE operating system is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Missing Release of Memory after Effective Lifetime

Overview Affected versions of this package are vulnerable to Missing Release of Memory after Effective Lifetime through the /pdf/pdf-font-add.c component. An attacker can obtain sensitive information by exploiting a memory leak issue. Remediation Upgrade mupdf to version 1.18.0 or higher...

The vulnerability of the Windows Message Queuing system allows a perpetrator to cause a service failure.

The vulnerability of Windows’ Message Queuing system is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Qualcomm Chipsets 资源管理错误漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that stems from a double release issue when parsing PKCS15 sim files, resulting in memory corruption in the Modem...

SUSE-SU-2023:2765-1 Security update for libcap

This update for libcap fixes the following issues: - CVE-2023-2602: Fixed improper memory release in libcap/psx/psx.c:wrappthreadcreate bsc1211418. - CVE-2023-2603: Fixed an integer overflow or wraparound in libcap/capalloc.c:libcapstrdup bsc1211419...

Linux Kernel Denial of Service Vulnerability (CNVD-2023-54619)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A denial of service vulnerability exists in the Linux Kernel, which originates in the cpufreq subsystem in drivers/cpufreq/qcom-cpufreq-hw.c causes a double release issue durin...

The vulnerability of the ksmbd module in Linux operating systems allows a hacker to trigger a service failure.

The vulnerability of the ksmbd module in Linux operating systems is related to the improper release of resources. Exploiting this vulnerability allows a remote attacker to cause service failures using the SMB2SESSIONSETUP command...

PT-2023-2364 · Iobit · Iobit Malware Fighter

Name of the Vulnerable Software and Affected Versions: IObit Malware Fighter version 9.4.0.776 Description: A vulnerability in the ImfRegistryFilter.sys component of IObit Malware Fighter is related to incorrect clearing or release of resources. The manipulation of this issue can lead to denial o...

Google Pixel 资源管理错误漏洞

Google Pixel is a smartphone from the American company Google Google. Google Pixel has a security vulnerability that stems from the presence of a double-release issue that has the potential to corrupt memory...

CVE-2023-26257

An issue was discovered in the Connected Vehicle Systems Alliance COVESA; formerly GENIVI dlt-daemon through 2.18.8. Dynamic memory is not released after it is allocated in dlt-control-common.c...

CVE-2021-46868

The HWKEYMASTER module has a problem in releasing memory.Successful exploitation of this vulnerability may result in out-of-bounds memory access...

Out-of-bounds

The HWKEYMASTER module has a problem in releasing memory.Successful exploitation of this vulnerability may result in out-of-bounds memory access...

Linux kernel 资源管理错误漏洞

The Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. A security vulnerability exists in the Linux kernel, which stems from the fact that an attacker can force the Linux kernel to free up memory via split2MBgttentry resulting in a denial of service and...

The vulnerability of the tdpServer software service in TP-Link RE300 wireless signal amplifiers allows a hacker to cause a service failure.

The vulnerability of the tdpServer microprogramming system in TP-Link RE300 wireless signal amplifiers is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a hacker to cause malfunctions in the device’s functionality...

PT-2022-5840 · Tp Link · Tp-Link Re300

Name of the Vulnerable Software and Affected Versions: TP-Link RE300 version V1 Description: The issue is related to the tdpServer of the TP-Link RE300 V1, which improperly processes its input. This may allow an attacker to cause a denial-of-service DoS condition of the product's OneMesh function...