CWE-415 Archives - CVE Vulnerability

CVE-2008-2944

Sun, 26 Feb 2023 09:09:46 +0000

Double free vulnerability in the utrace support in the Linux kernel, probably 2.6.18, in Red Hat Enterprise Linux (RHEL) 5 and Fedora Core 6 (FC6) allows local users to cause a denial of service (oops), as demonstrated by a crash when running the GNU GDB testsuite, a different vulnerability than CVE-2008-2365.

The post CVE-2008-2944 appeared first on CVE Vulnerability.

CVE-2007-4773

Sun, 26 Feb 2023 09:07:23 +0000

Systrace before 1.6.0 has insufficient escape policy enforcement.

The post CVE-2007-4773 appeared first on CVE Vulnerability.

CVE-2007-1216

Sun, 26 Feb 2023 09:05:47 +0000

Double free vulnerability in the GSS-API library (lib/gssapi/krb5/k5unseal.c), as used by the Kerberos administration daemon (kadmind) in MIT krb5 before 1.6.1, when used with the authentication method provided by the RPCSEC_GSS RPC library, allows remote authenticated users to execute arbitrary code and modify the Kerberos key database via a message with an “an invalid direction encoding”.

The post CVE-2007-1216 appeared first on CVE Vulnerability.

CVE-2018-9553

Sun, 26 Feb 2023 06:51:50 +0000

In MasteringMetadata::Parse of mkvparser.cc there is a possible double free due to an insecure default value. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-116615297.

The post CVE-2018-9553 appeared first on CVE Vulnerability.

CVE-2018-9513

Sun, 26 Feb 2023 06:51:49 +0000

In copy_process of fork.c, there is possible memory corruption due to a double free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-111081202 References: N/A

The post CVE-2018-9513 appeared first on CVE Vulnerability.

CVE-2018-9336

Sun, 26 Feb 2023 06:51:48 +0000

openvpnserv.exe (aka the interactive service helper) in OpenVPN 2.4.x before 2.4.6 allows a local attacker to cause a double-free of memory by sending a malformed request to the interactive service. This could cause a denial-of-service through memory corruption or possibly have unspecified other impact including privilege escalation.

The post CVE-2018-9336 appeared first on CVE Vulnerability.

CVE-2018-9356

Sun, 26 Feb 2023 06:51:48 +0000

In bnep_data_ind of bnep_main.c, there is a possible remote code execution due to a double free. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android ID: A-74950468.

The post CVE-2018-9356 appeared first on CVE Vulnerability.

CVE-2018-9415

Sun, 26 Feb 2023 06:51:48 +0000

In driver_override_store and driver_override_show of bus.c, there is a possible double free due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-69129004 References: Upstream kernel.

The post CVE-2018-9415 appeared first on CVE Vulnerability.

CVE-2018-8835

Sun, 26 Feb 2023 06:51:37 +0000

Double free vulnerabilities in Advantech WebAccess HMI Designer 2.1.7.32 and prior caused by processing specially crafted .pm3 files may allow remote code execution.

The post CVE-2018-8835 appeared first on CVE Vulnerability.

CVE-2018-8804

Sun, 26 Feb 2023 06:51:36 +0000

WriteEPTImage in coders/ept.c in ImageMagick 7.0.7-25 Q16 allows remote attackers to cause a denial of service (MagickCore/memory.c double free and application crash) or possibly have unspecified other impact via a crafted file.

The post CVE-2018-8804 appeared first on CVE Vulnerability.