Linux Distros Unpatched Vulnerability : CVE-2022-49665

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: platform/x86: thinkpadacpi: Fix a memory leak of EFCH MMIO resource Unlike releasememregion,...

CVE-2025-44003

Missing Release of Resource after Effective Lifetime CWE-772 in the Gallagher T-Series Reader allows an attacker with physical access to the reader to perform a limited denial of service when 125 kHz Card Technology is enabled. This issue affects T-Series Readers: 9.20 prior to vCR9.20.250213a...

SUSE CVE-2022-50110

In the Linux kernel, the following vulnerability has been resolved: watchdog: sp5100tco: Fix a memory leak of EFCH MMIO resource Unlike releasememregion, a call to releaseresource does not free the resource, so it has to be freed explicitly to avoid a memory leak...

UBUNTU-CVE-2022-50110

In the Linux kernel, the following vulnerability has been resolved: watchdog: sp5100tco: Fix a memory leak of EFCH MMIO resource Unlike releasememregion, a call to releaseresource does not free the resource, so it has to be freed explicitly to avoid a memory leak...

kernel: devres: Fix memory leakage caused by driver API devm_free_percpu()

In the Linux kernel, the following vulnerability has been resolved: devres: Fix memory leakage caused by driver API devmfreepercpu It will cause memory leakage when use driver API devmfreepercpu to free memory allocated by devmallocpercpu, fixed by using devresrelease instead of devresdestroy...

SUSE CVE-2019-12155

interfacereleaseresource in hw/display/qxl.c in QEMU 3.1.x through 4.0.0 has a NULL pointer dereference...

CVE-2019-20407

The ConfigureBambooRelease resource in Jira Software and Jira Software Data Center before version 8.6.1 allows authenticated remote attackers to view release version information in projects that they do not have access to through an missing authorisation check...

The vulnerability of the interface_release_resource function in the QEMU hardware emulation driver, located in hw/display/qxl.c, relates to the assignment of a null pointer. This allows an attacker to trigger a service failure.

The vulnerability of the interfacereleaseresource function in the QEMU hardware emulation driver hw/display/qxl.c is related to the assignment of a null pointer to the ext.info object. Exploiting this vulnerability allows an attacker to cause a service failure remotely...

QEMU: qxl: null pointer dereference while releasing spice resources

interfacereleaseresource in hw/display/qxl.c in QEMU 3.1.x through 4.0.0 has a NULL pointer dereference...

QEMU: qxl: null pointer dereference while releasing spice resources

interfacereleaseresource in hw/display/qxl.c in QEMU 3.1.x through 4.0.0 has a NULL pointer dereference...

QEMU: qxl: null pointer dereference while releasing spice resources

interfacereleaseresource in hw/display/qxl.c in QEMU 3.1.x through 4.0.0 has a NULL pointer dereference...

QEMU: qxl: null pointer dereference while releasing spice resources

interfacereleaseresource in hw/display/qxl.c in QEMU 3.1.x through 4.0.0 has a NULL pointer dereference...

QEMU: qxl: null pointer dereference while releasing spice resources

interfacereleaseresource in hw/display/qxl.c in QEMU 3.1.x through 4.0.0 has a NULL pointer dereference...

CVE-2019-12155

interfacereleaseresource in hw/display/qxl.c in QEMU 3.1.x through 4.0.0 has a NULL pointer dereference...

PHP Hash_Update_File释放资源访问代码执行漏洞

PHP是一款广泛使用的WEB开发脚本语言。 PHP hashupdatefile存在设计错误，远程攻击者可能利用此漏洞获得对释放内存的访问并使用恶意数据覆盖而执行任意代码。 问题存在于GD函数中，在通过资源识别器获得资源数据后，可能用usercode来中断PHP函数，usercode就会会破坏资源，并获取与其内存相同位置来分配PHP字符串相同大小的空间作为释放资源。这个字符串可以用于建立特定构建的资源，以允许利用内部PHP函数，当恶意中断终止函数时，会继续使用替代资源数据。导致任意代码执行。 要获得需要的函数中断，通常需要放置对象到函数的某个参数中，这会在转化一个超长值时触发PHP错误。...