Lucene search
+L

197 matches found

OSV
OSV
added 2022/10/07 8:15 p.m.5 views

CVE-2022-26473

In vdec fmt, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07342197; Issue ID: ALPS07342197...

6.7CVSS5.9AI score0.00108EPSS
Exploits0References1
Prion
Prion
added 2022/10/07 8:15 p.m.16 views

Input validation

In vdec fmt, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07342197; Issue ID: ALPS07342197...

4CVSS6.8AI score0.00108EPSS
Exploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2022/10/07 12:0 a.m.5 views

PT-2022-17886 · Vdec Fmt · Vdec Fmt

Name of the Vulnerable Software and Affected Versions: vdec fmt affected versions not specified Description: The issue is related to a possible use after free due to improper locking in vdec fmt. This could lead to local escalation of privilege, with System execution privileges needed. User...

6.7CVSS6.5AI score0.00108EPSS
Exploits0References2
CVE
CVE
added 2022/10/07 12:0 a.m.58 views

CVE-2022-26473

CVE-2022-26473 concerns a use-after-free in the vdec fmt component caused by improper locking, enabling local privilege escalation with System privileges required. Exploitation status is not detailed in the provided documents. Multiple sources (NVD, Red Hat, CVE lists, CNVD, PRION, CNNVD, PRON, P...

6.7CVSS6.7AI score0.00108EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2022/10/07 12:0 a.m.23 views

CVE-2022-26473

In vdec fmt, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07342197; Issue ID: ALPS07342197...

7AI score0.00108EPSS
Exploits0References1
RedHat Linux
RedHat Linux
added 2022/09/01 2:21 p.m.6 views

mariadb: assertion failure in VDec::VDec at /sql/sql_type.cc

A flaw was found in the MariaDB Server. It contains a use-after-free in the component, VDec::VDec at /sql/sqltype.cc, affecting availability...

7.5CVSS7.3AI score0.02125EPSS
Exploits1References4
RedHat Linux
RedHat Linux
added 2022/08/09 12:23 p.m.6 views

mariadb: assertion failure in VDec::VDec at /sql/sql_type.cc

A flaw was found in the MariaDB Server. It contains a use-after-free in the component, VDec::VDec at /sql/sqltype.cc, affecting availability...

7.5CVSS7.3AI score0.02125EPSS
Exploits1References4
RedHat Linux
RedHat Linux
added 2022/08/02 10:9 a.m.6 views

mariadb: assertion failure in VDec::VDec at /sql/sql_type.cc

A flaw was found in the MariaDB Server. It contains a use-after-free in the component, VDec::VDec at /sql/sqltype.cc, affecting availability...

7.5CVSS7.3AI score0.02125EPSS
Exploits1References4
RedHat Linux
RedHat Linux
added 2022/07/28 4:6 p.m.3 views

mariadb: assertion failure in VDec::VDec at /sql/sql_type.cc

A flaw was found in the MariaDB Server. It contains a use-after-free in the component, VDec::VDec at /sql/sqltype.cc, affecting availability...

7.5CVSS7.3AI score0.02125EPSS
Exploits1References4
OpenVAS
OpenVAS
added 2022/06/13 12:0 a.m.16 views

MariaDB Use-After-Free Vulnerability (MDEV-28093) - Windows

MariaDB is prone to a use-after-free vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mariadb:mariadb"; if...

7.5CVSS8.2AI score0.02125EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2022/06/13 12:0 a.m.22 views

MariaDB Use-After-Free Vulnerability (MDEV-28093) - Linux

MariaDB is prone to a use-after-free vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mariadb:mariadb"; if...

7.5CVSS8.2AI score0.02125EPSS
Exploits1References2
Veracode
Veracode
added 2022/05/25 5:2 a.m.25 views

Use-After-Free

mariadb is vulnerable to use-after-free. The vulnerability exists in sqltype.cc in VDec::VDec component which allows an attacker to cause an application crash...

7.5CVSS7.4AI score0.02125EPSS
Exploits1References9Affected Software3
OSV
OSV
added 2022/04/24 9:26 p.m.10 views

GSD-2022-1001592 media: venus: vdec: fixed possible memory leak issue

media: venus: vdec: fixed possible memory leak issue This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.19 by commit...

7.2AI score
Exploits0
OSV
OSV
added 2022/04/24 9:1 p.m.5 views

GSD-2022-1001291 media: venus: vdec: fixed possible memory leak issue

media: venus: vdec: fixed possible memory leak issue This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.2 by commit...

7.2AI score
Exploits0
Microsoft CVE
Microsoft CVE
added 2022/04/22 7:0 a.m.3 views

MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component VDec::VDec at /sql/sql_type.cc.

...

7.5CVSS7.8AI score0.02125EPSS
Exploits1
RedhatCVE
RedhatCVE
added 2022/04/14 10:38 p.m.55 views

CVE-2022-27456

A flaw was found in the MariaDB Server. It contains a use-after-free in the component, VDec::VDec at /sql/sqltype.cc, affecting availability...

7.5CVSS3AI score0.02125EPSS
Exploits1References3
ATTACKERKB
ATTACKERKB
added 2022/04/14 1:15 p.m.3 views

CVE-2022-27456

MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component VDec::VDec at /sql/sqltype.cc...

7.5CVSS7AI score0.02125EPSS
Exploits1References4
OSV
OSV
added 2022/04/14 1:15 p.m.4 views

ALPINE-CVE-2022-27456

MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component VDec::VDec at /sql/sqltype.cc...

7.5CVSS7.3AI score0.02125EPSS
Exploits1References1
NVD
NVD
added 2022/04/14 1:15 p.m.14 views

CVE-2022-27456

MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component VDec::VDec at /sql/sqltype.cc...

7.5CVSS0.02125EPSS
Exploits1References3
OSV
OSV
added 2022/04/14 1:15 p.m.0 views

DEBIAN-CVE-2022-27456

MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component VDec::VDec at /sql/sqltype.cc...

7.5CVSS7.8AI score0.02125EPSS
Exploits1References1
Rows per page
Query Builder