JerryScript 资源管理错误漏洞

JerryScript is a lightweight JavaScript engine from the Jerryscript project. version 2.4.0 of JerryScript is vulnerable to a memory misquoting vulnerability that originates in ecma-helpers- in ecmacompareecmanondirectstrings. string.c:1940, which is responsible for freeing memory, is garbled. An...

ALPINE-CVE-2022-27447

MariaDB Server v10.9 and below was discovered to contain a use-after-free via the component Binarystring::freebuffer at /sql/sqlstring.h...

MariaDB 资源管理错误漏洞

MariaDB is a free and open source database management system from the MariaDB Foundation and a forked version of MySQL with the Maria storage engine. A memory misreference vulnerability exists in Mariadb v10.9 and earlier versions, which originates in the /sql/sqlstring.h component...

PT-2021-28182

Name of the Vulnerable Software and Affected Versions: v9fs affected versions not specified Description: A crash occurs due to a stack-use-after-return READ 8 issue. The crash involves the v9fs string free and v9fs xattrwalk functions, as well as the coroutine trampoline. Recommendations: At the...

PT-2022-5556 · Mariadb +9 · Mariadb Server +9

Name of the Vulnerable Software and Affected Versions: MariaDB Server versions prior to 10.6.3 Description: The issue is related to the use of memory after it has been freed in the Binary string::free buffer function of the MariaDB component /sql/sql string.h. This can be exploited by a remote...