Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2,309

Export CSV
CVE-2012-3954

dhcp: two memory leaks may result in DoS

Multiple memory leaks in ISC DHCP 4.1.x and 4.2.x before 4.2.4-P1 and 4.1-ESV before 4.1-ESV-R6 allow remote attackers to cause a denial of service (memory consumption) by sending many requests.

CVSS 2.0 · 3.3 Low EPSS 4.3% KEV · Not listed
Vendors
Canonical Debian Isc and 1 more
Products
Ubuntu Linux Debian Linux Dhcp and 1 more
CVE-2010-4746

Server: Multiple memory leaks in the normalization functionality

Multiple memory leaks in the normalization functionality in 389 Directory Server before 1.2.7.5 allow remote attackers to cause a denial of service (memory consumption) via "badly behaved applications," related to (1) Slapi_Attr mishandling in the DN normalization code and (2) pointer mishandling in the syntax normalization code, a different issue than CVE-2011-0019.

CVSS 2.0 · 5.0 Medium EPSS 1.7% KEV · Not listed
Vendors
Fedoraproject
Products
389 Directory Server
CVE-2010-2942

kernel: net sched: fix some kernel memory leaks

The actions implementation in the network queueing functionality in the Linux kernel before 2.6.36-rc2 does not properly initialize certain structure members when performing dump operations, which allows local users to obtain potentially sensitive information from kernel memory via vectors related to (1) the tcf_gact_dump function in net/sched/act_gact.c, (2) the tcf_mirred_dump function in net/sched/act_mirred.c, (3) the tcf_nat_dump function in net/sched/act_nat.c, (4) the tcf_simp_dump function in net/sched/act_simple.c, and (5) the tcf_skbedit_dump function in net/sched/act_skbedit.c.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Avaya Canonical Linux and 4 more
Products
Aura Communication Manager Aura Presence Services Aura Session Manager and 12 more
CVE-2010-2249

libpng: Memory leak when processing Physical Scale (sCAL) images

Memory leak in pngrutil.c in libpng before 1.2.44, and 1.4.x before 1.4.3, allows remote attackers to cause a denial of service (memory consumption and application crash) via a PNG image containing malformed Physical Scale (aka sCAL) chunks.

CVSS 3.1 · 6.5 Medium EPSS 2.6% KEV · Not listed
Vendors
Apple Canonical Debian and 6 more
Products
Iphone Os Itunes Safari and 10 more
CVE-2010-4250

kernel: inotify memory leak

Memory leak in the inotify_init1 function in fs/notify/inotify/inotify_user.c in the Linux kernel before 2.6.37 allows local users to cause a denial of service (memory consumption) via vectors involving failed attempts to create files.

CVSS 2.0 · 4.9 Medium EPSS < 1% KEV · Not listed
Vendors
Linux Redhat
Products
Linux Kernel Enterprise Linux Enterprise Mrg
CVE-2011-1468

php: Multiple memory leaks in the OpenSSL extension

Multiple memory leaks in the OpenSSL extension in PHP before 5.3.6 might allow remote attackers to cause a denial of service (memory consumption) via (1) plaintext data to the openssl_encrypt function or (2) ciphertext data to the openssl_decrypt function.

CVSS 2.0 · 4.3 Medium EPSS 13.3% KEV · Not listed
Vendors
Php Redhat
Products
Php Enterprise Linux
CVE-2009-5063

libpng: Memory leak by write of iCCP chunk with negative embedded profile length (CVE-2006-7244, CVE-2009-5063)

Memory leak in the embedded_profile_len function in pngwutil.c in libpng before 1.2.39beta5 allows context-dependent attackers to cause a denial of service (memory leak or segmentation fault) via a JPEG image containing an iCCP chunk with a negative embedded profile length. NOTE: this is due to an incomplete fix for CVE-2006-7244.

CVSS 2.0 · 5.0 Medium EPSS 1.5% KEV · Not listed
Vendors
Libpng
Products
Libpng
CVE-2012-1148

expat: Memory leak in poolGrow

Memory leak in the poolGrow function in expat/lib/xmlparse.c in expat before 2.1.0 allows context-dependent attackers to cause a denial of service (memory consumption) via a large number of crafted XML files that cause improperly-handled reallocation failures when expanding entities.

CVSS 3.0 · 7.5 High EPSS 3.4% KEV · Not listed
Vendors
Apple Libexpat Project Redhat
Products
Mac Os X Libexpat Enterprise Linux and 1 more
CVE-2010-3078

kernel: xfs: XFS_IOC_FSGETXATTR ioctl memory leak

The xfs_ioc_fsgetxattr function in fs/xfs/linux-2.6/xfs_ioctl.c in the Linux kernel before 2.6.36-rc4 does not initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via an ioctl call.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Canonical Linux Opensuse and 3 more
Products
Ubuntu Linux Linux Kernel Opensuse and 4 more
CVE-2013-4356

Kernel: Xen: Xsa-64: memory leak by 64bit PV guests under live migration

Xen 4.3.x writes hypervisor mappings to certain shadow pagetables when live migration is performed on hosts with more than 5TB of RAM, which allows local 64-bit PV guests to read or write to invalid memory and cause a denial of service (crash).

CVSS 2.0 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Xen
Products
Xen
CVE-2012-5643

squid: cachemgr.cgi memory usage DoS and memory leaks

Multiple memory leaks in tools/cachemgr.cc in cachemgr.cgi in Squid 2.x and 3.x before 3.1.22, 3.2.x before 3.2.4, and 3.3.x before 3.3.0.2 allow remote attackers to cause a denial of service (memory consumption) via (1) invalid Content-Length headers, (2) long POST requests, or (3) crafted authentication credentials.

CVSS 2.0 · 5.0 Medium EPSS 23.0% KEV · Not listed
Vendors
Redhat Squid-cache
Products
Enterprise Linux Squid
CVE-2013-4592

kernel: kvm: memory leak when memory slot is moved with assigned device

Memory leak in the __kvm_set_memory_region function in virt/kvm/kvm_main.c in the Linux kernel before 3.9 allows local users to cause a denial of service (memory consumption) by leveraging certain device access to trigger movement of memory slots.

CVSS 2.0 · 4.0 Medium EPSS < 1% KEV · Not listed
Vendors
Linux Redhat
Products
Linux Kernel Enterprise Linux
CVE-2012-3420

pcp: two memory leaks can lead to pcmd crash or trigger OOM killer

Multiple memory leaks in Performance Co-Pilot (PCP) before 3.6.5 allow remote attackers to cause a denial of service (memory consumption or daemon crash) via a large number of PDUs with (1) a crafted context number to the DoFetch function in pmcd/src/dofetch.c or (2) a negative type value to the __pmGetPDU function in libpcp/src/pdu.c.

CVSS 2.0 · 5.0 Medium EPSS 3.6% KEV · Not listed
Vendors
Sgi
Products
Performance Co-pilot
CVE-2006-7244

libpng: Memory leak by write of iCCP chunk with negative embedded profile length (CVE-2006-7244, CVE-2009-5063)

Memory leak in pngwutil.c in libpng 1.2.13beta1, and other versions before 1.2.15beta3, allows context-dependent attackers to cause a denial of service (memory leak or segmentation fault) via a JPEG image containing an iCCP chunk with a negative embedded profile length.

CVSS 2.0 · 5.0 Medium EPSS 1.2% KEV · Not listed
Vendors
Libpng
Products
Libpng
CVE-2011-1576

kernel: net: Fix memory leak/corruption on VLAN GRO_DROP

The Generic Receive Offload (GRO) implementation in the Linux kernel 2.6.18 on Red Hat Enterprise Linux 5 and 2.6.32 on Red Hat Enterprise Linux 6, as used in Red Hat Enterprise Virtualization (RHEV) Hypervisor and other products, allows remote attackers to cause a denial of service via crafted VLAN packets that are processed by the napi_reuse_skb function, leading to (1) a memory leak or (2) memory corruption, a different vulnerability than CVE-2011-1478.

CVSS 2.0 · 5.7 Medium EPSS < 1% KEV · Not listed
Vendors
Linux Redhat
Products
Linux Kernel Enterprise Linux Enterprise Mrg and 2 more
CVE-2012-0789

php: strtotime timezone memory leak

Memory leak in the timezone functionality in PHP before 5.3.9 allows remote attackers to cause a denial of service (memory consumption) by triggering many strtotime function calls, which are not properly handled by the php_date_parse_tzfile cache.

CVSS 2.0 · 5.0 Medium EPSS 8.0% KEV · Not listed
Vendors
Php Redhat
Products
Php Enterprise Linux
CVE-2012-0817

samba: DoS (smbd crash) due memory leak in management of fds for socket connections

Memory leak in smbd in Samba 3.6.x before 3.6.3 allows remote attackers to cause a denial of service (memory and CPU consumption) by making many connection requests.

CVSS 2.0 · 5.0 Medium EPSS 3.5% KEV · Not listed
Vendors
Samba
Products
Samba
CVE-2012-0957

kernel: uts: stack memory leak in UNAME26

The override_release function in kernel/sys.c in the Linux kernel before 3.4.16 allows local users to obtain sensitive information from kernel stack memory via a uname system call in conjunction with a UNAME26 personality.

CVSS 2.0 · 4.9 Medium EPSS < 1% KEV · Not listed
Vendors
Linux Redhat
Products
Linux Kernel Enterprise Mrg
CVE-2012-2390

kernel: huge pages: memory leak on mmap failure

Memory leak in mm/hugetlb.c in the Linux kernel before 3.4.2 allows local users to cause a denial of service (memory consumption or system crash) via invalid MAP_HUGETLB mmap operations.

CVSS 2.0 · 4.9 Medium EPSS < 1% KEV · Not listed
Vendors
Linux Redhat
Products
Linux Kernel Enterprise Linux Enterprise Mrg
CVE-2013-2898

Kernel: HID: sensor-hub: memory leak flaw

drivers/hid/hid-sensor-hub.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_SENSOR_HUB is enabled, allows physically proximate attackers to obtain sensitive information from kernel memory via a crafted device.

CVSS 2.0 · 1.9 Low EPSS < 1% KEV · Not listed
Vendors
Linux
Products
Linux Kernel