aper GetBitString DoS

The vulnerability of the aper.GetBitString function in the NGAP Message Handler component of the 5G mobile communication network management software free5GC is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause service failures...

kernel: bpf: Fix wrong reg type conversion in release_reference()

A flaw was found in the eBPF subsystem in the Linux kernel. When a resource is released, the pointer registers related to the resource are incorrectly converted to the wrong type, allowing kernel pointers to be exposed to unprivileged users...

kernel: gpiolib: fix memory leak in gpiochip_setup_dev()

A flaw was found in the Linux kernel's General Purpose Input/Output GPIO library gpiolib. This vulnerability, located in the gpiochipsetupdev function, results from resources not being properly released during error handling after a device is added. This oversight can lead to a gradual waste of...

kernel: net: wwan: iosm: fix NULL pointer dereference when removing device

In the Linux kernel, the following vulnerability has been resolved: net: wwan: iosm: fix NULL pointer dereference when removing device In suspend and resume cycle, the removal and rescan of device ends up in NULL pointer dereference. During driver initialization, if the ipcimemwwanchannelinit fai...

rpcecho Samba RPC Server DoS

The vulnerability of the dcesrvechoTestSleep RPC-server of the rpcecho network interaction software package in Samba is related to improper release of resources. Exploiting this vulnerability could allow a remote attacker to cause service failures...

Samba RPC DoS

The vulnerability of the Samba networking communication server RPC server is related to the improper release of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

OpenFGA DoS vulnerability

Overview OpenFGA is vulnerable to a DoS attack. When a number of ListObjects calls are executed, in some scenarios, those calls are not releasing resources even after a response has been sent, and the service as a whole becomes unresponsive. Fix Upgrade to v1.3.4. This upgrade is backwards...

Denial Of Service (DoS)

OpenFGA is vulnerable to Denial of service attacks. The vulnerability is due to an insufficient mechanism to release resources. When a number of Listobjects calls are executed, the resources are not released after the response is sent...

PT-2023-29700 · Openfga · Openfga

Name of the Vulnerable Software and Affected Versions: OpenFGA versions prior to 1.3.4 Description: OpenFGA is a flexible authorization/permission engine built for developers and inspired by Google Zanzibar. Affected versions of OpenFGA are vulnerable to a denial of service attack. When a number ...

CVE-2023-5255

An improper resource release vulnerability was found in puppet. For certificates that utilize the auto-renew feature in Puppet Server, a flaw exists which prevents the certificates from being revoked...

Cisco IOS XE L2TP DoS

The vulnerability of the Layer 2 Tunneling Protocol L2TP implementation in the Cisco IOS XE operating system is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

AireOS Resource Leak System Reboot

The vulnerability of the AireOS operating system is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a remote attacker to trigger a system reboot...

IBM DB2 Resource Leak DoS

The vulnerability of the IBM DB2 database management system and the IBM DB2 Connect Server automatic redirection server is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

golang.org/x/text/language Component Failure

The vulnerability of the golang.org/x/text/language component in the Go language programming library is related to deficiencies in resource release after the expiration of its useful period. Exploiting this vulnerability could allow an attacker to cause service failures...

SslConnections Component DoS

The vulnerability of the SslConnections component in Eclipse Jetty servers is related to resource release errors. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

ROS-20230907-02

Vulnerability in the Core component of Oracle VM VirtualBox virtual machine is related to resource release errors resources. Exploitation of the vulnerability could allow a remote attacker to execute arbitrary code or gain full control of an application using the RDP protocol. arbitrary code or...

PT-2023-8796

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the btrfs component of the Linux kernel, where a vulnerability in the btrfs insert delayed dir index function could lead to a denial of service. Instead of callin...

Cisco Umbrella Cloud Security Web Interface Unauthorized Access

The vulnerability of the Cisco Umbrella cloud security web interface is related to resource release errors. Exploiting this vulnerability can allow attackers to bypass existing security restrictions and gain unauthorized access to protected information...

TP-Link TL-WR1041N Router DoS

The vulnerability of the /userRpm/NetworkCfgRpm component in the TP-Link TL-WR1041N router microprogramming system is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

Firefox Confidential Data Access DoS

The vulnerability in the Firefox web browser is related to errors during resource release. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...