GNU Bison Post-Release Reuse Vulnerability

GNU Bison is free software for the automatic generation of syntax parser programs. A post-release reuse vulnerability exists in GNU Bison 3.7. A local attacker can cause a system crash by exploiting this vulnerability via a specially crafted input file containing NULL bytes...

Huawei CampusInsight and ManageOne Double Release Vulnerability

Huawei ManageOne and CampusInsight are both products of Huawei, a Chinese company.ManageOne is a set of cloud data center management solutions. ManageOne is a cloud data center management solution that supports unified management of heterogeneous cloud resource pools and provides multi-level VDC...

Huawei NIP6800, Secospace USG6600 and USG9500 IPSec Module Repeated Memory Release Vulnerability

Huawei USG9500 and others are products of Huawei, China.USG9500 is a data center firewall product.NIP6800 is an intrusion prevention system.USG6600 is a data center firewall product. A security vulnerability exists in the IPSec module in the Huawei NIP6800, Secospace USG6600, and USG9500. An...

Fedora 31 : php (2019-a54a622670)

PHP version 7.3.13 18 Dec 2019 Bcmath: - Fixed bug php78878 Buffer underflow in bcshiftaddsub. CVE-2019-11046. cmb Core: - Fixed bug php78862 link silently truncates after a null byte on Windows. CVE-2019-11044. cmb - Fixed bug php78863 DirectoryIterator class silently truncates after a null byte...

GNU LibreDWG Double Release Vulnerability

GNU LibreDWG is a GNU Project C library for working with DWG files. A double release vulnerability exists in the 'dwgfree' function of the free.c file in GNU LibreDWG versions prior to 0.93. The vulnerability stems from mismanagement of system resources e.g., memory, disk space, files, etc. by a...

Linux kernel double release vulnerability (CNVD-2019-32351)

The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. A double release vulnerability exists in drivers/net/wireless/rsi/rsi91xusb.c in Linux kernel 5.2.9 and earlier. No...

Adobe Acrobat/Reader Double Release Vulnerability (CNVD-2019-30087)

Adobe Acrobat is a PDF editing software developed by Adobe.Adobe Reader also known as Acrobat Reader is a PDF file reader developed by Adobe. Adobe Acrobat/Reader has a double release vulnerability. An attacker can exploit this vulnerability to execute arbitrary code...

CVE-2019-10359

A cross-site request forgery vulnerability in Jenkins Maven Release Plugin 0.14.0 and earlier in the M2ReleaseActiondoSubmit method allowed attackers to perform releases with attacker-specified options...

The vulnerability of the Quagga software’s BGP protocol implementation, related to the repeated release of memory, allows a attacker to cause a service failure or execute arbitrary code.

The vulnerability of the Quagga software’s BGP protocol implementation lies in the repeated release of memory during the processing of certain types of update messages. Exploiting this vulnerability allows a remote attacker to cause service failures or execute arbitrary code...

Intel SGX SDK Double Release Vulnerability

Intel SGX SDK is a set of software development kits based on SGX Intel Software Security Extensions technology from the U.S. company Intel Intel. A double release vulnerability exists in Intel SGX SDK. An attacker could exploit this vulnerability to disclose information...

Wireshark Reuse After Release Vulnerability

Wireshark formerly known as Ethereal is a network packet analyzer software developed by the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis. A post-release reuse vulnerability exists in epan/dissectors/packet-enip.c in Wireshark...

Netwide Assembler (NASM) Post-Release Reuse Vulnerability (CNVD-2019-05122)

Netwide Assembler NASM is a portable, modular 80x86 and x86-64 assembler. A post-release reuse vulnerability in the ppgetline function in asm/preproc.c in Netwide Assembler NASM 2.14rc16 can be exploited by an attacker to cause a denial of service...

Libxls Double Release Vulnerability

libxls is a C library that can read Excel xls files. A double release vulnerability exists in the readMSAT function in ole.c in libxls 1.4.0. An attacker could cause a denial of service application crash by exploiting this vulnerability via a specially crafted file...

Google Android Double Release Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A double-release vulnerability exists in the MasteringMetadata::Parse of the mkvparser.cc file in Android, which can be exploited by remote attackers to execute code...

Google Chrome Networking Disk Cache Double Release Vulnerability

Google Chrome is a web browser developed by Google.Networking Disk Cache is one of the network disk cache components. A double release vulnerability exists in Networking Disk Cache in Google Chrome versions prior to 66.0.3359.106. A remote attacker can exploit this vulnerability to execute...

AdPlug Double Release Vulnerability

AdPlug is an AdLib sound player library written in C++. A double release vulnerability exists in the CEmuopl class of the emuopl.cpp file in AdPlug version 2.3.1. An attacker can exploit this vulnerability to cause a denial of service application crash...

Google Android WLAN Double Release Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, and WLAN is a wireless connection module used in it. A double release vulnerability exists in WLAN in Android. A local attacker could exploit this vulnerability to execute arbitra...

OpenSC Double Release Vulnerability

OpenSC is a set of software tools and libraries for smart cards, focusing on smart cards with cryptographic capabilities. A double-release vulnerability exists in scpkcs15emuschsminit in libopensc/pkcs15-sc-hsm.c in OpenSC prior to 0.19.0-rc1 when handling responses from HSM cards. An attacker...

Adobe Acrobat and Reader Double Release Vulnerability

Adobe Acrobat is a PDF editing software developed by Adobe.Adobe Reader also known as Acrobat Reader is a PDF file reader developed by Adobe. Adobe Acrobat and Reader have a double release vulnerability. An attacker can exploit this vulnerability to execute arbitrary code...

Simple DirectMedia Layer SDL2_image Double Release Vulnerability

Simple DirectMedia Layer is a multi-platform library for accessing low-level hardware and graphics and providing support for games, software, and emulators. sdl2image is a component used in it for parsing and displaying various image file formats. A double release vulnerability exists in the XCF...