Mozilla Firefox Resource Closing or Releasing Improperly Vulnerability

Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox the web browser.Mozilla Thunderbird is a suite of email client software separate from the Mozilla Application Suite. Mozilla Firefox suffers from a resource shutdown or release improper...

Advisory ROSA-SA-2024-2481

Software: java-11-openjdk 11.0.23.0.9 OS: rosa-server79 packageevrstring: java-11-openjdk-11.0.23.0.9-2.res7 CVE-ID: CVE-2024-20918 BDU-ID: 2024-00485 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the Hotspot component of Oracle GraalVM Enterprise Edition virtual machines, Oracle GraalVM for JDK,...

WPE WebKit XSS

The vulnerability of the WPE WebKit and WebKitGTK page rendering modules is related to errors during resource release. Exploiting this vulnerability allows a remote attacker to compromise data integrity...

HDF5 Resource Leak DoS

The vulnerability of the HDF5 library is related to the improper shutdown or release of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

lib/xarray.c Linux DoS

The vulnerability of the lib/xarray.c library in the Linux operating system’s kernel is related to a memory leak caused by the incorrect use of a function for releasing resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

DEBIAN-CVE-2024-46698

In the Linux kernel, the following vulnerability has been resolved: video/aperture: optionally match the device in sysfbdisable In apertureremoveconflictingpcidevices, we currently only call sysfbdisable on vga class devices. This leads to the following problem when the pimary device is not VGA...

Tianocore edk2 Heap Buffer Overflow DoS

The vulnerability of the Tianocore edk2 library is related to errors during resource release. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

FRRouting OSPF Daemon Heap Buffer Overflow DoS

The vulnerability of the getedge function in the ospfte.c file of the OSPF Daemon component, a networking routing implementation software for Unix-like systems, is related to resource release errors. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

crypto: hisilicon/sec - Fix memory leak for sec resource release

...

PT-2024-7324 · Intel · Intel Uefi Firmware

Name of the Vulnerable Software and Affected Versions: Intel UEFI Firmware affected versions not specified Description: The issue is related to improper input validation in UEFI firmware for some Intel processors, which may allow a privileged user to enable information disclosure or denial of...

PT-2024-41799

Уязвимость функции smb2 rename path модуля fs/smb/client/smb2inode.c поддержки клиента SMB ядра операционной системы Linux связана с неправильным отключением или освобождением ресурса. Эксплуатация уязвимости может позволить нарушителю оказать воздействие на конфиденциальность, целостность и...

Oracle VM VirtualBox DoS

The vulnerability of the Core component of the Oracle VM VirtualBox software is related to resource release errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20240829-01

A vulnerability in the Core component of the Oracle VM VirtualBox virtualization software tool is related to resource release errors. resource release errors. Exploitation of the vulnerability could allow an attacker to cause a denial of service Vulnerability in the Core component of the Oracle V...

PT-2024-7294 · Fireboltt · Fire-Boltt Artillery Smart Watch

Name of the Vulnerable Software and Affected Versions: Fire-Boltt Artillery Smart Watch NJ-R6E-10.3 Description: The issue is related to insecure permissions in the Bluetooth Low Energy BLE component, which can be exploited to cause a Denial of Service DoS. This may allow an attacker to disconnec...

UBUNTU-CVE-2022-48888

In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: Fix memory leak in msmmdssparsedatabusiccpath oficcget alloc resources for path1, we should release it when not need anymore. Early return when ISERRORNULLpath0 may leak path1. Defer getting path1 to fix this...

GO-2023-1590 GoPistolet vulnerable to Improper Resource Shutdown or Release in github.com/gopistolet/gopistolet

GoPistolet vulnerable to Improper Resource Shutdown or Release in github.com/gopistolet/gopistolet...

ROS-20240816-06

The vulnerability in OpenVPN software is related to the lack of resource release after the resource expires. the resource's expiration date. Exploitation of the vulnerability could allow an attacker to "save a session" even if the the server has been ordered to disconnect that client...

Premature Release of Resource During Expected Lifetime

Overview magento/community-edition is a modern cloud eCommerce platform. Affected versions of this package are vulnerable to Premature Release of Resource During Expected Lifetime via the authorization process. A low-privileged attacker can bypass security restrictions and modify limited...

Premature Release of Resource During Expected Lifetime

Overview magento/community-edition is a modern cloud eCommerce platform. Affected versions of this package are vulnerable to Premature Release of Resource During Expected Lifetime via the authorization process. A low-privileged attacker can bypass security restrictions and modify limited...

Premature Release of Resource During Expected Lifetime

Overview magento/community-edition is a modern cloud eCommerce platform. Affected versions of this package are vulnerable to Premature Release of Resource During Expected Lifetime via the authorization process. A low-privileged attacker can bypass security restrictions and modify limited...