CVE-2022-47371

The CVE-2022-47371 issue affects the bt driver (kernel component). A thread competition causes resources to be released early, which can enable local denial of service in the kernel. Documents consistently describe the vulnerability and impact as local DoS but do not provide confirmed exploit det...

PT-2023-1440 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge affected versions not specified Description: The issue is related to incorrect resource release in Microsoft Edge, allowing a remote attacker to cause a denial of service. Recommendations: At the moment, there is no information...

SUSE-SU-2023:0134-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-3435: Fixed an out-of-bounds read in fibnhmatch of the file net/ipv4/fibsemantics.c bsc1204171. - CVE-2022-4662: Fixed a recursive locking violation in...

PT-2023-7594 · Oracle +4 · Mysql Server +3

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 5.7.40 and prior Description: The issue is related to errors in resource release, which can be exploited by a high-privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

CVE-2014-125042

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

The vulnerability of the protection mechanism for detecting and responding to security threats at FortiEDR endpoints arises from improper release of resources, allowing attackers to trigger service interruptions.

The vulnerability of the security protection mechanism, as well as its ability to detect and respond to security threats at end points of FortiEDR, is related to the improper release of resources. Exploiting this vulnerability can allow attackers to cause service failures...

The vulnerability of the tdpServer software service in TP-Link RE300 wireless signal amplifiers allows a hacker to cause a service failure.

The vulnerability of the tdpServer microprogramming system in TP-Link RE300 wireless signal amplifiers is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a hacker to cause malfunctions in the device’s functionality...

The vulnerability in the implementation of the Point to Point Tunneling Protocol (PPPT) for Windows operating systems allows a perpetrator to cause a service failure.

The vulnerability of the Point to Point Tunneling Protocol PPTP implementation in Windows operating systems is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the Linux operating system’s kernel, related to errors in resource release, allows a hacker to cause a service failure.

The vulnerability of the Linux operating system’s kernel is related to errors during resource release. Exploiting this vulnerability allows an attacker to cause service failures...

The vulnerability of the Hints::Hints function (poppler/Hints.cc) in the Poppler PDF rendering library allows a attacker to cause a service failure.

The vulnerability of the Hints::Hints function in the Poppler PDF rendering library is related to errors during resource release. Exploiting this vulnerability allows an attacker to cause service interruptions through a specially created PDF file...

PT-2022-5840 · Tp Link · Tp-Link Re300

Name of the Vulnerable Software and Affected Versions: TP-Link RE300 version V1 Description: The issue is related to the tdpServer of the TP-Link RE300 V1, which improperly processes its input. This may allow an attacker to cause a denial-of-service DoS condition of the product's OneMesh function...

Information disclosure

Premature release of resource during expected lifetime in the IntelR SGX SDK software may allow a privileged user to potentially enable information disclosure via local access...

CVE-2022-27499

Premature release of resource during expected lifetime in the IntelR SGX SDK software may allow a privileged user to potentially enable information disclosure via local access...

Intel SGX SDK 安全漏洞

Intel SGX SDK is a set of software development kits based on SGX Intel Software Security Extensions technology from Intel Corporation USA. A security vulnerability exists in the Intel SGX SDK software that stems from prematurely releasing resources, which could allow a privileged user to...

PT-2022-18457 · Intel · Intel Sgx Sdk

Name of the Vulnerable Software and Affected Versions: IntelR SGX SDK software affected versions not specified Description: The issue is related to the premature release of a resource during its expected lifetime, which may allow a privileged user to potentially enable information disclosure via...

Missing Release of Resource after Effective Lifetime

An attacker may cause a denial of service by crafting an Accept-Language header which ParseAcceptLanguage will take significant time to parse...

PT-2022-5622 · Microsoft · Windows Point-To-Point Tunneling Protocol +1

Name of the Vulnerable Software and Affected Versions: Windows Point-to-Point Tunneling Protocol affected versions not specified Description: The issue is related to the implementation of the Point to Point Tunneling Protocol PPTP in Windows operating systems, specifically concerning incorrect...

CVE-2022-32589

In Wi-Fi driver, there is a possible way to disconnect Wi-Fi due to an improper resource release. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07030600; Issue ID: ALPS07030600...

CVE-2022-32589

In Wi-Fi driver, there is a possible way to disconnect Wi-Fi due to an improper resource release. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07030600; Issue ID: ALPS07030600...

CVE-2022-32589

In Wi-Fi driver, there is a possible way to disconnect Wi-Fi due to an improper resource release. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07030600; Issue ID: ALPS07030600...