Browse CVEs

MEDIUM 5.5 CVE-2021-29649 An issue was discovered in the Linux kernel before 5.11.11. The user mode driver (UMD) has a copy_process() memory leak, related to a lack of cleanup… Linux Kernel 5.11.11+ Fix from $1,6002021-03-30 HIGH 7.5 CVE-2021-20214 A flaw was found in Privoxy in versions before 3.0.29. Memory leaks in the client-tags CGI handler when client tags are configured and memory allocat… Privoxy 3.0.29+ Fix from $1,9502021-03-25 HIGH 7.5 CVE-2021-20215 A flaw was found in Privoxy in versions before 3.0.29. Memory leaks in the show-status CGI handler when memory allocations fail can lead to a system … Privoxy 3.0.29+ Fix from $1,9502021-03-25 HIGH 7.5 CVE-2021-20216 A flaw was found in Privoxy in versions before 3.0.31. A memory leak that occurs when decompression fails unexpectedly may lead to a denial of servic… Privoxy 3.0.31+ Fix from $1,9502021-03-25 HIGH 7.5 CVE-2020-35502 A flaw was found in Privoxy in versions before 3.0.29. Memory leaks when a response is buffered and the buffer limit is reached or Privoxy is running… Privoxy 3.0.29+ Fix from $1,9502021-03-25 HIGH 7.5 CVE-2021-20210 A flaw was found in Privoxy in versions before 3.0.29. Memory leak in the show-status CGI handler when no filter files are configured can lead to a s… Privoxy 3.0.29+ Fix from $1,9502021-03-25 HIGH 7.5 CVE-2021-20211 A flaw was found in Privoxy in versions before 3.0.29. Memory leak when client tags are active can cause a system crash. Privoxy 3.0.29+ Fix from $1,9502021-03-25 HIGH 7.5 CVE-2021-20212 A flaw was found in Privoxy in versions before 3.0.29. Memory leak if multiple filters are executed and the last one is skipped due to a pcre error l… Privoxy 3.0.29+ Fix from $1,9502021-03-25 MEDIUM 5.5 CVE-2021-20265 A flaw was found in the way memory resources were freed in the unix_stream_recvmsg function in the Linux kernel when a signal was pending. This flaw … Linux Kernel after 7.7.1 Fix from $1,6002021-03-10 HIGH 8.6 CVE-2021-1387 A vulnerability in the network stack of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condi… Unified Computing System 4.0 / 4.1+ Fix from $1,9502021-02-24 MEDIUM 5.3 CVE-2021-1229 A vulnerability in ICMP Version 6 (ICMPv6) processing in Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a slow system … Nx Os Mitigation only Fix from $1,6002021-02-24 HIGH 7.5 CVE-2021-22173 Memory leak in USB HID dissector in Wireshark 3.4.0 to 3.4.2 allows denial of service via packet injection or crafted capture file Wireshark 3.4.3+ Fix from $1,9502021-02-17 MEDIUM 5.5 CVE-2020-25340 An issue was discovered in NFStream 5.2.0. Because some allocated modules are not correctly freed, if the nfstream object is directly destroyed witho… Nfstream No fix yet Fix from $1,6002021-02-16 HIGH 7.5 CVE-2021-1313 Multiple vulnerabilities in the ingress packet processing function of Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause … Ios Xr 5.2.6 / 5.3.4+ Fix from $1,9502021-02-04 HIGH 7.5 CVE-2021-21723 Some ZTE products have a DoS vulnerability. Due to the improper handling of memory release in some specific scenarios, a remote attacker can trigger … Zxr10 9904 Firmware Mitigation only Fix from $1,9502021-01-26 HIGH 8.6 CVE-2021-1353 A vulnerability in the IPv4 protocol handling of Cisco StarOS could allow an unauthenticated, remote attacker to cause a denial of service (DoS) cond… Staros 21.22.0+ Fix from $1,9502021-01-20 MEDIUM 6.5 CVE-2021-3181 rfc822.c in Mutt through 2.0.4 allows remote attackers to cause a denial of service (mailbox unavailability) by sending email messages with sequences… Debian Linux after 2.0.4 Fix from $1,6002021-01-19 MEDIUM 6.5 CVE-2021-0215 On Juniper Networks Junos EX series, QFX Series, MX Series and SRX branch series devices, a memory leak occurs every time the 802.1X authenticator po… Junos No fix yet Fix from $1,6002021-01-15 HIGH 7.5 CVE-2021-0202 On Juniper Networks MX Series and EX9200 Series platforms with Trio-based MPC (Modular Port Concentrator) where Integrated Routing and Bridging (IRB)… Junos Mitigation only Fix from $1,9502021-01-15 HIGH 7.5 CVE-2018-11246 K7TSMngr.exe in K7Computing K7AntiVirus Premium 15.1.0.53 has a Memory Leak. Antivrius 14.2.0001 / 16.0.0001+ Fix from $1,9502021-01-11 HIGH 7.5 CVE-2020-35893 An issue was discovered in the simple-slab crate before 0.3.3 for Rust. remove() has an off-by-one error, causing memory leakage and a drop of uninit… Simple Slab 0.3.3+ Fix from $1,9502020-12-31 HIGH 7.5 CVE-2020-9124 There is a memory leak vulnerability in some versions of Huawei CloudEngine product. An unauthenticated, remote attacker may exploit this vulnerabili… Cloudengine 12800 Firmware Mitigation only Fix from $1,9502020-12-29 HIGH 7.5 CVE-2020-35679 smtpd/table.c in OpenSMTPD before 6.8.0p1 lacks a certain regfree, which might allow attackers to trigger a "very significant" memory leak via messag… Fedora 6.8.0+ Fix from $1,9502020-12-24 MEDIUM 5.5 CVE-2020-29485 An issue was discovered in Xen 4.6 through 4.14.x. When acting upon a guest XS_RESET_WATCHES request, not all tracking information is freed. A guest … Debian Linux after 4.14.0 Fix from $1,6002020-12-15 MEDIUM 6.5 CVE-2020-27038 In process of C2SoftVorbisDec.cpp, there is a possible resource exhaustion due to a memory leak. This could lead to remote denial of service with no … Android Patch available Fix from $1,6002020-12-15 MEDIUM 6.5 CVE-2020-0491 In readBlock of MatroskaExtractor.cpp, there is a possible denial of service due to resource exhaustion. This could lead to remote denial of service … Android Mitigation only Fix from $1,6002020-12-15 MEDIUM 5.3 CVE-2020-26418 Memory leak in Kafka protocol dissector in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via packet injection or crafted capture file. Wireshark after 3.2.8 Fix from $1,6002020-12-11 MEDIUM 5.3 CVE-2020-26419 Memory leak in the dissection engine in Wireshark 3.4.0 allows denial of service via packet injection or crafted capture file. Wireshark Patch available Fix from $1,6002020-12-11 MEDIUM 5.3 CVE-2020-26420 Memory leak in RTPS protocol dissector in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via packet injection or crafted capture file. Wireshark after 3.2.8 Fix from $1,6002020-12-11 HIGH 7.5 CVE-2020-27713 In certain configurations on version 13.1.3.4, when a BIG-IP AFM HTTP security profile is applied to a virtual server and the BIG-IP system receives … Big Ip Advanced Firewall Manager Mitigation only Fix from $1,9502020-12-11