CVE & Exploit Intelligence Database

CVE-2021-41959 7.5 HIGH EPSS 0.00

JerryScript Git version 14ff5bf does not sufficiently track and release allocated memory via jerry-core/ecma/operations/ecma-regexp-object.c after RegExp, which causes a memory leak.

CWE-401 May 03, 2022

CVE-2022-1515 5.5 MEDIUM EPSS 0.00

A memory leak was discovered in matio 1.5.21 and earlier in Mat_VarReadNextInfo5() in mat5.c via a crafted file. This issue can potentially result in DoS.

CWE-401 May 02, 2022

CVE-2022-23159 4.8 MEDIUM EPSS 0.00

Dell PowerScale OneFS, 8.2.2 - 9.3.0.x, contain a missing release of memory after effective lifetime vulnerability. An authenticated user with ISI_PRIV_LOGIN_SSH and/or ISI_PRIV_LOGIN_CONSOLE and ISI_PRIV_AUTH_PROVIDERS privileges could exploit this vulnerability, leading to a Denial-Of-Service. This can also impact a cluster in Compliance mode. Dell recommends to update at the earliest opportunity.

CWE-401 Apr 12, 2022

CVE-2022-27950 5.5 MEDIUM 1 Writeup EPSS 0.00

In drivers/hid/hid-elo.c in the Linux kernel before 5.16.11, a memory leak exists for a certain hid_parse error condition.

CWE-401 Mar 28, 2022

CVE-2022-0854 5.5 MEDIUM EPSS 0.00

A memory leak flaw was found in the Linux kernel’s DMA subsystem, in the way a user calls DMA_FROM_DEVICE. This flaw allows a local user to read random memory from the kernel space.

CWE-401 Mar 23, 2022

CVE-2022-0742 9.1 CRITICAL EPSS 0.02

Memory leak in icmp6 implementation in Linux Kernel 5.13+ allows a remote attacker to DoS a host by making it go out-of-memory via icmp6 packets of type 130 or 131. We recommend upgrading past commit 2d3916f3189172d5c69d33065c3c21119fe539fc.

CWE-401 Mar 18, 2022

CVE-2022-24756 7.5 HIGH EPSS 0.01

Bareos is open source software for backup, archiving, and recovery of data for operating systems. When Bareos Director >= 18.2 but prior to 21.1.0, 20.0.6, and 19.2.12 is built and configured for PAM authentication, a failed PAM authentication will leak a small amount of memory. An attacker that is able to use the PAM Console (i.e. by knowing the shared secret or via the WebUI) can flood the Director with failing login attempts which will eventually lead to an out-of-memory condition in which the Director will not work anymore. Bareos Director versions 21.1.0, 20.0.6 and 19.2.12 contain a Bugfix for this problem. Users who are unable to upgrade may disable PAM authentication as a workaround.

CWE-401 Mar 15, 2022

CVE-2022-0853 7.5 HIGH 2 PoCs Analysis EPSS 0.01

A flaw was found in JBoss-client. The vulnerability occurs due to a memory leak on the JBoss client-side, when using UserTransaction repeatedly and leads to information leakage vulnerability.

CWE-401 Mar 11, 2022

CVE-2022-26878 5.5 MEDIUM EPSS 0.00

drivers/bluetooth/virtio_bt.c in the Linux kernel before 5.16.3 has a memory leak (socket buffers have memory allocated but not freed).

CWE-401 Mar 11, 2022

CVE-2021-40047 7.5 HIGH EPSS 0.00

There is a vulnerability of memory not being released after effective lifetime in the Bastet module. Successful exploitation of this vulnerability may affect integrity.

CWE-401 Mar 10, 2022

CVE-2021-3744 5.5 MEDIUM 1 Writeup EPSS 0.00

A memory leak flaw was found in the Linux kernel in the ccp_run_aes_gcm_cmd() function in drivers/crypto/ccp/ccp-ops.c, which allows attackers to cause a denial of service (memory consumption). This vulnerability is similar with the older CVE-2019-18808.

CWE-401 Mar 04, 2022

CVE-2021-4002 4.4 MEDIUM EPSS 0.00

A memory leak flaw in the Linux kernel's hugetlbfs memory usage was found in the way the user maps some regions of memory twice using shmget() which are aligned to PUD alignment with the fault of some of the memory pages. A local user could use this flaw to get unauthorized access to some data.

CWE-401 Mar 03, 2022

CVE-2021-44961 5.5 MEDIUM EPSS 0.00

A memory leakage flaw exists in the class PerimeterGenerator of Slic3r libslic3r 1.3.0 and Master Commit b1a5500. Specially crafted stl files can exhaust available memory. An attacker can provide malicious files to trigger this vulnerability.

CWE-401 Mar 01, 2022

CVE-2020-22844 7.5 HIGH 1 Writeup EPSS 0.01

A buffer overflow in Mikrotik RouterOS 6.47 allows unauthenticated attackers to cause a denial of service (DOS) via crafted SMB requests.

CWE-401 Feb 28, 2022

CVE-2022-24599 6.5 MEDIUM EPSS 0.00

In autofile Audio File Library 0.3.6, there exists one memory leak vulnerability in printfileinfo, in printinfo.c, which allows an attacker to leak sensitive information via a crafted file. The printfileinfo function calls the copyrightstring function to get data, however, it dosn't use zero bytes to truncate the data.

CWE-401 Feb 24, 2022

CVE-2022-22336 7.5 HIGH EPSS 0.03

IBM Sterling External Authentication Server and IBM Sterling Secure Proxy 6.0.3.0, 6.0.2.0, and 3.4.3.2 could allow a remote user to consume resources causing a denial of service due to a resource leak. IBM X-Force ID: 219395.

CWE-401 Feb 23, 2022

CVE-2021-46082 7.5 HIGH EPSS 0.00

Moxa TN-5900 v3.1 series routers, MGate 5109 v2.2 series protocol gateways, and MGate 5101-PBM-MN v2.1 series protocol gateways were discovered to contain a memory leak which allows attackers to cause a Denial of Service (DoS) via crafted packets.

CWE-401 Feb 18, 2022

CVE-2021-45346 4.3 MEDIUM 1 Writeup EPSS 0.00

A Memory Leak vulnerability exists in SQLite Project SQLite3 3.35.1 and 3.37.0 via maliciously crafted SQL Queries (made via editing the Database File), it is possible to query a record, and leak subsequent bytes of memory that extend beyond the record, which could let a malicious user obtain sensitive information. NOTE: The developer disputes this as a vulnerability stating that If you give SQLite a corrupted database file and submit a query against the database, it might read parts of the database that you did not intend or expect.

CWE-401 Feb 14, 2022

CVE-2022-24959 5.5 MEDIUM 1 Writeup EPSS 0.00

An issue was discovered in the Linux kernel before 5.16.5. There is a memory leak in yam_siocdevprivate in drivers/net/hamradio/yam.c.

CWE-401 Feb 11, 2022

CVE-2022-20046 5.5 MEDIUM EPSS 0.00

In Bluetooth, there is a possible memory corruption due to a logic error. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06142410; Issue ID: ALPS06142410.

CWE-401 Feb 09, 2022