The vulnerability of the 389 Directory Server service, related to errors in resource release, allows a perpetrator to cause a service failure.

The vulnerability of the 389 Directory Server catalog service server is related to errors during resource release. Exploiting this vulnerability allows a malicious actor to cause service failures...

kernel: i2c: piix4: Fix a memory leak in the EFCH MMIO support

In the Linux kernel, the following vulnerability has been resolved: i2c: piix4: Fix a memory leak in the EFCH MMIO support The recently added support for EFCH MMIO regions introduced a memory leak in that code path. The leak is caused by the fact that releaseresource merely removes the resource...

The vulnerability of Netgear SRX5308 router microprogramming software, related to improper release of resources, allows a hacker to trigger a service failure.

The vulnerability of Netgear SRX5308 micro-programmed software routers is related to the improper release of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

PT-2023-2824 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux Kernel affected versions not specified Description: A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The issue results from the lack of control of resource consumption when handling SMB2 SESSION SET...

PT-2023-2611 · NetGear · Netgear Srx5308

Name of the Vulnerable Software and Affected Versions: Netgear SRX5308 versions up to 4.3.5-3 Description: A vulnerability was found in the Netgear SRX5308, which can be exploited to cause a denial of service. The issue is related to incorrect resource release. It is possible to launch the attack...

The vulnerability of the bridge2 component of the Bridge interface in the RouterOS operating system of MikroTik routers allows a hacker to cause a service failure.

The vulnerability of the bridge2 component in the Bridge interface of the RouterOS operating system for MikroTik relates to errors during resource release. Exploiting this vulnerability allows a malicious actor to cause service failure by sending specially crafted packets...

The vulnerability of the `derive_boundaryStrength` function in the deblock.cc component of the h.265 Libde265 video codec implementation, which allows a hacker to cause a service failure.

The vulnerability of the deriveboundaryStrength function in the deblock.cc component of the h.265 Libde265 video codec implementation is related to errors during resource release. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

PT-2023-2364 · Iobit · Iobit Malware Fighter

Name of the Vulnerable Software and Affected Versions: IObit Malware Fighter version 9.4.0.776 Description: A vulnerability in the ImfRegistryFilter.sys component of IObit Malware Fighter is related to incorrect clearing or release of resources. The manipulation of this issue can lead to denial o...

The vulnerability of the microprogramming software of the Intel(R) 82599 network adapter allows a hacker to cause a service failure.

The vulnerability of IntelR 82599 network adapters’ microprogramming software is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of Microsoft Edge browser, related to improper resource release, allows attackers to trigger a service failure.

The vulnerability of Microsoft Edge relates to the improper release of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the System Management Unit (SMU) subsystem in AMD microprogramming software allows a hacker to trigger a service failure.

The vulnerability of the System Management Unit SMU subsystem in AMD microprogramming systems is related to the improper release of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...

SUSE CVE-2017-17558

The usbdestroyconfiguration function in drivers/usb/core/config.c in the USB core subsystem in the Linux kernel through 4.14.5 does not consider the maximum number of configurations and interfaces before attempting to release resources, which allows local users to cause a denial of service...

CVE-2022-47371

In bt driver, there is a thread competition leads to early release of resources to be accessed. This could lead to local denial of service in kernel...

Code injection

In bt driver, there is a thread competition leads to early release of resources to be accessed. This could lead to local denial of service in kernel...

Qualcomm 芯片资源管理错误漏洞

A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way of miniaturizing circuits mainly semiconductor devices, but also passive components, etc., and is often fabricated on the surface of semiconductor wafers. A security vulnerability exists in the Qualcomm chip bt driver, which stems fr...

CVE-2022-47371

In bt driver, there is a thread competition leads to early release of resources to be accessed. This could lead to local denial of service in kernel...

CVE-2022-47371

The CVE-2022-47371 issue affects the bt driver (kernel component). A thread competition causes resources to be released early, which can enable local denial of service in the kernel. Documents consistently describe the vulnerability and impact as local DoS but do not provide confirmed exploit det...

PT-2023-1440 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge affected versions not specified Description: The issue is related to incorrect resource release in Microsoft Edge, allowing a remote attacker to cause a denial of service. Recommendations: At the moment, there is no information...

SUSE-SU-2023:0134-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-3435: Fixed an out-of-bounds read in fibnhmatch of the file net/ipv4/fibsemantics.c bsc1204171. - CVE-2022-4662: Fixed a recursive locking violation in...

PT-2023-7594 · Oracle +4 · Mysql Server +3

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 5.7.40 and prior Description: The issue is related to errors in resource release, which can be exploited by a high-privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...