kernel: gpiolib: fix memory leak in gpiochip_setup_dev()

In the Linux kernel, the following vulnerability has been resolved: gpiolib: fix memory leak in gpiochipsetupdev Here is a backtrace report about memory leak detected in gpiochipsetupdev: unreferenced object 0xffff88810b406400 size 512: comm "python3", pid 1682, jiffies 4295346908 age 24.090s...

kernel: net: wwan: iosm: fix NULL pointer dereference when removing device

In the Linux kernel, the following vulnerability has been resolved: net: wwan: iosm: fix NULL pointer dereference when removing device In suspend and resume cycle, the removal and rescan of device ends up in NULL pointer dereference. During driver initialization, if the ipcimemwwanchannelinit fai...

The vulnerability of the dcesrv_echo_TestSleep() RPC-server of the rpcecho package in the Samba networking communication library allows a attacker to cause a service failure.

The vulnerability of the dcesrvechoTestSleep RPC-server of the rpcecho network interaction software package in Samba is related to improper release of resources. Exploiting this vulnerability could allow a remote attacker to cause service failures...

The vulnerability of the RPC server of the Samba networking communication software allows a attacker to trigger a service failure.

The vulnerability of the Samba networking communication server RPC server is related to the improper release of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

OpenFGA DoS vulnerability

Overview OpenFGA is vulnerable to a DoS attack. When a number of ListObjects calls are executed, in some scenarios, those calls are not releasing resources even after a response has been sent, and the service as a whole becomes unresponsive. Fix Upgrade to v1.3.4. This upgrade is backwards...

Denial Of Service (DoS)

OpenFGA is vulnerable to Denial of service attacks. The vulnerability is due to an insufficient mechanism to release resources. When a number of Listobjects calls are executed, the resources are not released after the response is sent...

PT-2023-29700 · Openfga · Openfga

Name of the Vulnerable Software and Affected Versions: OpenFGA versions prior to 1.3.4 Description: OpenFGA is a flexible authorization/permission engine built for developers and inspired by Google Zanzibar. Affected versions of OpenFGA are vulnerable to a denial of service attack. When a number ...

CVE-2023-5255

An improper resource release vulnerability was found in puppet. For certificates that utilize the auto-renew feature in Puppet Server, a flaw exists which prevents the certificates from being revoked...

The vulnerability of the AireOS operating system, related to improper cleaning or release of resources, allows a perpetrator to trigger a system reboot.

The vulnerability of the AireOS operating system is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a remote attacker to trigger a system reboot...

The vulnerability of the Layer 2 Tunneling Protocol (L2TP) implementation in the Cisco IOS XE operating system allows a hacker to induce a service failure.

The vulnerability of the Layer 2 Tunneling Protocol L2TP implementation in the Cisco IOS XE operating system is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the IBM DB2 database management system and the IBM DB2 Connect Server automatic redirection server, related to improper cleaning or release of resources, allows a perpetrator to cause service failures.

The vulnerability of the IBM DB2 database management system and the IBM DB2 Connect Server automatic redirection server is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

The vulnerability of the golang.org/x/text/language component in the Go language text library, which allows attackers to trigger a denial-of-service attack.

The vulnerability of the golang.org/x/text/language component in the Go language programming library is related to deficiencies in resource release after the expiration of its useful period. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the SslConnections component in Eclipse Jetty servers allows a attacker to cause a service failure.

The vulnerability of the SslConnections component in Eclipse Jetty servers is related to resource release errors. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

ROS-20230907-02

Vulnerability in the Core component of Oracle VM VirtualBox virtual machine is related to resource release errors resources. Exploitation of the vulnerability could allow a remote attacker to execute arbitrary code or gain full control of an application using the RDP protocol. arbitrary code or...

PT-2023-8796

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the btrfs component of the Linux kernel, where a vulnerability in the btrfs insert delayed dir index function could lead to a denial of service. Instead of callin...

The vulnerability of the Cisco Umbrella cloud security service’s web interface allows attackers to circumvent existing security restrictions and gain unauthorized access to protected information.

The vulnerability of the Cisco Umbrella cloud security web interface is related to resource release errors. Exploiting this vulnerability can allow attackers to bypass existing security restrictions and gain unauthorized access to protected information...

The vulnerability of the /userRpm/NetworkCfgRpm component in the TP-Link TL-WR1041N router software allows a attacker to cause a service failure.

The vulnerability of the /userRpm/NetworkCfgRpm component in the TP-Link TL-WR1041N router microprogramming system is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

The vulnerability in the Firefox web browser, related to errors during resource release, allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability in the Firefox web browser is related to errors during resource release. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...

The vulnerability of the Windows Message Queuing system allows a perpetrator to cause a service failure.

The vulnerability of Windows’ Message Queuing system is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerabilities of the microprogrammed software in Honeywell Experion PKS programmable logic controllers, Honeywell Experion LX measurement and control controllers, and the Experion PlantCruise distribution control system allow a intruder to trigger malfunctions during maintenance operations.

The vulnerabilities of microprogrammed software in Honeywell Experion PKS programmable logic controllers, as well as in measurement and control controllers Experion LX, and the distribution control system Experion PlantCruise, are related to improper cleaning or release of resources. Exploitation...