CWE-401 · Missing Release of Memory after Effective Lifetime (page 18)
Page 18 of 20 — CVEs classified under CWE-401, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-27725 | Medium | 4.3 | 2020-12-24 | In version 15.1.0-15.1.0.5, 14.1.0-14.1.3, 13.1.0-13.1.3.4, 12.1.0-12.1.5.2, and 11.6.1-11.6.5.2 of BIG-IP DNS, GTM, and Link Controller, zxfrd leaks memory wh… |
CVE-2020-29485 | Medium | 5.5 | 2020-12-15 | An issue was discovered in Xen 4.6 through 4.14.x. When acting upon a guest XS_RESET_WATCHES request, not all tracking information is freed. A guest can cause… |
CVE-2020-27038 | Medium | 6.5 | 2020-12-15 | In process of C2SoftVorbisDec.cpp, there is a possible resource exhaustion due to a memory leak. This could lead to remote denial of service with no additional… |
CVE-2020-0491 | Medium | 6.5 | 2020-12-15 | In readBlock of MatroskaExtractor.cpp, there is a possible denial of service due to resource exhaustion. This could lead to remote denial of service with no ad… |
CVE-2020-27713 | High | 7.5 | 2020-12-11 | In certain configurations on version 13.1.3.4, when a BIG-IP AFM HTTP security profile is applied to a virtual server and the BIG-IP system receives a request… |
CVE-2020-26420 | Low | 3.1 | 2020-12-11 | Memory leak in RTPS protocol dissector in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via packet injection or crafted capture file. |
CVE-2020-26419 | Low | 3.1 | 2020-12-11 | Memory leak in the dissection engine in Wireshark 3.4.0 allows denial of service via packet injection or crafted capture file. |
CVE-2020-26418 | Low | 3.1 | 2020-12-11 | Memory leak in Kafka protocol dissector in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via packet injection or crafted capture file. |
CVE-2020-27755 | Low | 3.3 | 2020-12-08 | in SetImageExtent() of /MagickCore/image.c, an incorrect image depth size can cause a memory leak because the code which checks for the proper image depth size… |
CVE-2020-27753 | Medium | 5.5 | 2020-12-08 | There are several memory leaks in the MIFF coder in /coders/miff.c due to improper image depth values, which can be triggered by a specially crafted input file… |
CVE-2020-27822 | Medium | 5.9 | 2020-12-08 | A flaw was found in Wildfly affecting versions 19.0.0.Final, 19.1.0.Final, 20.0.0.Final, 20.0.1.Final, and 21.0.0.Final. When an application uses the OpenTraci… |
CVE-2020-25704 | Medium | 5.5 | 2020-12-02 | A flaw memory leak in the Linux kernel performance monitoring subsystem was found in the way if using PERF_EVENT_IOC_SET_FILTER. A local user could use this fl… |
CVE-2019-14559 | High | 7.5 | 2020-11-23 | Uncontrolled resource consumption in EDK II may allow an unauthenticated user to potentially enable denial of service via network access. |
CVE-2020-28723 | High | 7.5 | 2020-11-16 | Memory leak in IPv6Param::setAddress in CloudAvid PParam 1.3.1. |
CVE-2020-25689 | Medium | 5.3 | 2020-11-02 | A memory leak flaw was found in WildFly in all versions up to 21.0.0.Final, where host-controller tries to reconnect in a loop, generating new connections whic… |
CVE-2020-3572 | High | 8.6 | 2020-10-21 | A vulnerability in the SSL/TLS session handler of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allo… |
CVE-2020-3373 | High | 8.6 | 2020-10-21 | A vulnerability in the IP fragment-handling implementation of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Softwar… |
CVE-2020-3995 | Medium | 5.3 | 2020-10-20 | In VMware ESXi (6.7 before ESXi670-201908101-SG, 6.5 before ESXi650-202007101-SG), Workstation (15.x before 15.1.0), Fusion (11.x before 11.1.0), the VMCI host… |
CVE-2020-16949 | Medium | 4.7 | 2020-10-16 | <p>A denial of service vulnerability exists in Microsoft Outlook software when the software fails to properly handle objects in memory. An attacker who success… |
CVE-2020-1683 | High | 7.5 | 2020-10-16 | On Juniper Networks Junos OS devices, a specific SNMP OID poll causes a memory leak which over time leads to a kernel crash (vmcore). Prior to the kernel crash… |
CVE-2020-1678 | Medium | 6.5 | 2020-10-16 | On Juniper Networks Junos OS and Junos OS Evolved platforms with EVPN configured, receipt of specific BGP packets causes a slow memory leak. If the memory is e… |
CVE-2020-15254 | High | 8.1 | 2020-10-16 | Crossbeam is a set of tools for concurrent programming. In crossbeam-channel before version 0.4.4, the bounded channel incorrectly assumes that `Vec::from_iter… |
CVE-2020-27174 | High | 7.5 | 2020-10-16 | In Amazon AWS Firecracker before 0.21.3, and 0.22.x before 0.22.1, the serial console buffer can grow its memory usage without limit when data is sent to the s… |
CVE-2020-11637 | Medium | 5.8 | 2020-10-15 | A memory leak in the TFTP service in B&R Automation Runtime versions <N4.26, <N4.34, <F4.45, <E4.53, <D4.63, <A4.73 and prior could allow an unauthenticated at… |
CVE-2020-3543 | Medium | 6.5 | 2020-10-08 | A vulnerability in the Cisco Discovery Protocol of Cisco Video Surveillance 8000 Series IP Cameras could allow an unauthenticated, adjacent attacker to cause a… |
CVE-2020-25644 | High | 7.5 | 2020-10-06 | A memory leak flaw was found in WildFly OpenSSL in versions prior to 1.1.3.Final, where it removes an HTTP session. It may allow the attacker to cause OOM lead… |
CVE-2020-25795 | High | 7.5 | 2020-09-19 | An issue was discovered in the sized-chunks crate through 0.6.2 for Rust. In the Chunk implementation, insert_from can have a memory-safety issue upon a panic. |
CVE-2020-25794 | High | 7.5 | 2020-09-19 | An issue was discovered in the sized-chunks crate through 0.6.2 for Rust. In the Chunk implementation, clone can have a memory-safety issue upon a panic. |
CVE-2020-3505 | Medium | 6.5 | 2020-08-26 | A vulnerability in the Cisco Discovery Protocol of Cisco Video Surveillance 8000 Series IP Cameras could allow an unauthenticated, adjacent attacker to cause a… |
CVE-2020-5924 | Medium | 5.3 | 2020-08-26 | In BIG-IP APM versions 12.1.0-12.1.5.1 and 11.6.1-11.6.5.2, RADIUS authentication leaks memory when the username for authentication is not set. |
CVE-2020-9104 | Medium | 4.3 | 2020-08-21 | HUAWEI P30 smartphones with Versions earlier than 10.1.0.123(C431E22R2P5),Versions earlier than 10.1.0.123(C432E22R2P5),Versions earlier than 10.1.0.126(C10E7R… |
CVE-2020-9697 | Medium | 5.5 | 2020-08-19 | Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier have a disclosure of s… |
CVE-2020-8229 | Medium | 5.5 | 2020-08-10 | A memory leak in the OCUtil.dll library used by Nextcloud Desktop Client 2.6.4 can lead to a DoS against the host system. |
CVE-2020-11937 | Medium | 5.5 | 2020-08-06 | In whoopsie, parse_report() from whoopsie.c allows a local attacker to cause a denial of service via a crafted file. The DoS is caused by resource exhaustion d… |
CVE-2020-9249 | Medium | 6.5 | 2020-07-31 | HUAWEI P30 smartphones with versions earlier than 10.1.0.160(C00E160R2P11) have a denial of service vulnerability. A module does not deal with mal-crafted mess… |
CVE-2020-4375 | High | 7.5 | 2020-07-28 | IBM MQ, IBM MQ Appliance, IBM MQ for HPE NonStop 8.0, 9.1 CD, and 9.1 LTS could allow an attacker to cause a denial of service due to a memory leak caused by a… |
CVE-2020-15806 | High | 7.5 | 2020-07-22 | CODESYS Control runtime system before 3.5.16.10 allows Uncontrolled Memory Allocation. |
CVE-2020-1651 | Medium | 6.5 | 2020-07-17 | On Juniper Networks MX series, receipt of a stream of specific Layer 2 frames may cause a memory leak resulting in the packet forwarding engine (PFE) on the li… |
CVE-2020-13934 | High | 7.5 | 2020-07-14 | An h2c direct connection to Apache Tomcat 10.0.0-M1 to 10.0.0-M6, 9.0.0.M5 to 9.0.36 and 8.5.1 to 8.5.56 did not release the HTTP/1.1 processor after the upgra… |
CVE-2020-8916 | Medium | 5.0 | 2020-07-07 | A memory leak in Openthread's wpantund versions up to commit 0e5d1601febb869f583e944785e5685c6c747be7, when used in an environment where wpanctl is directly in… |
CVE-2020-12604 | High | 7.5 | 2020-07-01 | Envoy version 1.14.2, 1.13.2, 1.12.4 or earlier is susceptible to increased memory usage in the case where an HTTP/2 client requests a large payload but does n… |
CVE-2020-15393 | Medium | 5.5 | 2020-06-29 | In the Linux kernel 4.4 through 5.7.6, usbtest_disconnect in drivers/usb/misc/usbtest.c has a memory leak, aka CID-28ebeb8db770. |
CVE-2020-15025 | Medium | 4.4 | 2020-06-24 | ntpd in ntp 4.2.8 before 4.2.8p15 and 4.3.x before 4.3.101 allows remote attackers to cause a denial of service (memory consumption) by sending packets, becaus… |
CVE-2019-20888 | High | 7.5 | 2020-06-19 | An issue was discovered in Mattermost Server before 5.7, 5.6.3, 5.5.2, and 4.10.5. It allows attackers to cause a denial of service (memory consumption) via an… |
CVE-2020-12887 | High | 7.5 | 2020-06-18 | Memory leaks were discovered in the CoAP library in Arm Mbed OS 5.15.3 when using the Arm mbed-coap library 5.1.5. The CoAP parser is responsible for parsing r… |
CVE-2020-1883 | Medium | 4.9 | 2020-06-05 | Huawei products NIP6800;Secospace USG6600;USG9500 have a memory leak vulnerability. An attacker with high privileges exploits this vulnerability by continuousl… |
CVE-2020-3203 | High | 8.6 | 2020-06-03 | A vulnerability in the locally significant certificate (LSC) provisioning feature of Cisco Catalyst 9800 Series Wireless Controllers that are running Cisco IOS… |
CVE-2019-20810 | Medium | 5.5 | 2020-06-03 | go7007_snd_init in drivers/media/usb/go7007/snd-go7007.c in the Linux kernel before 5.6 does not call snd_card_free for a failure path, which causes a memory l… |
CVE-2020-3959 | Low | 3.3 | 2020-05-29 | VMware ESXi (6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), VMware Workstation (15.x before 15.1.0) and VMware Fusion (11.x before 11.1… |
CVE-2020-13152 | Medium | 5.5 | 2020-05-20 | A remote user can create a specially crafted M3U file, media playlist file that when loaded by the target user, will trigger a memory leak, whereby Amarok 2.8… |
CVE-2020-12768 | Medium | 5.5 | 2020-05-09 | An issue was discovered in the Linux kernel before 5.6. svm_cpu_uninit in arch/x86/kvm/svm.c has a memory leak, aka CID-d80b64ff297e. NOTE: third parties dispu… |
CVE-2020-3195 | High | 7.5 | 2020-05-06 | A vulnerability in the Open Shortest Path First (OSPF) implementation in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (F… |
CVE-2020-3189 | High | 8.6 | 2020-05-06 | A vulnerability in the VPN System Logging functionality for Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to ca… |
CVE-2020-12656 | Medium | 5.5 | 2020-05-05 | gss_mech_free in net/sunrpc/auth_gss/gss_mech_switch.c in the rpcsec_gss_krb5 implementation in the Linux kernel through 5.6.10 lacks certain domain_release ca… |
CVE-2020-5883 | High | 7.5 | 2020-04-30 | On BIG-IP 15.0.0-15.0.1, 14.1.0-14.1.2.3, 14.0.0-14.0.1, and 13.1.0-13.1.3.1, when a virtual server is configured with HTTP explicit proxy and has an attached… |
CVE-2020-12430 | Medium | 6.5 | 2020-04-28 | An issue was discovered in qemuDomainGetStatsIOThread in qemu/qemu_driver.c in libvirt 4.10.0 though 6.x before 6.1.0. A memory leak was found in the virDomain… |
CVE-2020-4267 | Medium | 6.5 | 2020-04-24 | IBM MQ and MQ Appliance 8.0, 9.1 LTS, and 9.1 CD could allow an authenticated user cause a denial of service due to a memory leak. IBM X-Force ID: 175840. |
CVE-2019-10547 | High | 7.8 | 2020-04-16 | When issuing IOCTL calls to ION, Memory leak can occur due to failure in unassign pages under certain conditions in Snapdragon Auto, Snapdragon Compute, Snapdr… |
CVE-2020-1625 | Medium | 6.5 | 2020-04-08 | The kernel memory usage represented as "temp" via 'show system virtual-memory' may constantly increase when Integrated Routing and Bridging (IRB) is configured… |
CVE-2018-21079 | High | 7.5 | 2020-04-08 | An issue was discovered on Samsung mobile devices with L(5.x), M(6.0), N(7.x), and O(8.0) software. There is a kernel pointer leak in the USB gadget driver. Th… |
CVE-2020-3914 | Medium | 5.5 | 2020-04-01 | A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10.15.4, tvOS 13.4… |
CVE-2020-6080 | High | 7.5 | 2020-03-24 | An exploitable denial-of-service vulnerability exists in the resource allocation handling of Videolabs libmicrodns 0.1.0. When encountering errors while parsin… |
CVE-2020-6079 | High | 7.5 | 2020-03-24 | An exploitable denial-of-service vulnerability exists in the resource allocation handling of Videolabs libmicrodns 0.1.0. When encountering errors while parsin… |
CVE-2020-10840 | High | 7.1 | 2020-03-24 | An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) (Exynos 9610 chipsets) software. There is a kernel pointer leak in the vipx driver. T… |
CVE-2020-10593 | High | 7.5 | 2020-03-23 | Tor before 0.3.5.10, 0.4.x before 0.4.1.9, and 0.4.2.x before 0.4.2.7 allows remote attackers to cause a Denial of Service (memory leak), aka TROVE-2020-004. T… |
CVE-2019-20382 | Low | 3.5 | 2020-03-05 | QEMU 4.1.0 has a memory leak in zrle_compress_data in ui/vnc-enc-zrle.c during a VNC disconnect operation because libz is misused, resulting in a situation whe… |
CVE-2020-9431 | High | 7.5 | 2020-02-27 | In Wireshark 3.2.0 to 3.2.1, 3.0.0 to 3.0.8, and 2.6.0 to 2.6.14, the LTE RRC dissector could leak memory. This was addressed in epan/dissectors/packet-lte-rrc… |
CVE-2020-1815 | High | 7.5 | 2020-02-18 | Huawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00; Secospace USG6600 and USG9500 versions V500R001C30SPC200, V500R001C30SPC600, V500R001C… |
CVE-2020-8991 | Low | 2.3 | 2020-02-14 | vg_lookup in daemons/lvmetad/lvmetad-core.c in LVM2 2.02 mismanages memory, leading to an lvmetad memory leak, as demonstrated by running pvs. NOTE: RedHat dis… |
CVE-2020-3756 | High | 7.5 | 2020-02-13 | Adobe Acrobat and Reader versions 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2017.011.30156 and earlier, and 2015.006.30508 and earlier have a sta… |
CVE-2020-3753 | High | 7.5 | 2020-02-13 | Adobe Acrobat and Reader versions 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2017.011.30156 and earlier, and 2015.006.30508 and earlier have a sta… |
CVE-2020-7217 | High | 7.5 | 2020-02-11 | An ni_dhcp4_fsm_process_dhcp4_packet memory leak in openSUSE wicked 0.6.55 and earlier allows network attackers to cause a denial of service by sending DHCP4 p… |
CVE-2020-7216 | High | 7.5 | 2020-02-05 | An ni_dhcp4_parse_response memory leak in openSUSE wicked 0.6.55 and earlier allows network attackers to cause a denial of service by sending DHCP4 packets wit… |
CVE-2019-20388 | High | 7.5 | 2020-01-21 | xmlSchemaPreRun in xmlschemas.c in libxml2 2.9.10 allows an xmlSchemaValidateStream memory leak. |
CVE-2019-20386 | Low | 2.4 | 2020-01-21 | An issue was discovered in button_open in login/logind-button.c in systemd before 243. When executing the udevadm trigger command, a memory leak may occur. |
CVE-2020-1603 | High | 8.6 | 2020-01-15 | Specific IPv6 packets sent by clients processed by the Routing Engine (RE) are improperly handled. These IPv6 packets are designed to be blocked by the RE from… |
CVE-2019-20171 | Medium | 5.5 | 2019-12-31 | An issue was discovered in GPAC version 0.5.2 and 0.9.0-development-20191109. There are memory leaks in metx_New in isomedia/box_code_base.c and abst_Read in i… |
CVE-2019-20159 | Medium | 5.5 | 2019-12-31 | An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a memory leak in dinf_New() in isomedia/box_code_base.c. |
CVE-2019-20096 | Medium | 5.5 | 2019-12-30 | In the Linux kernel before 5.1, there is a memory leak in __feat_register_sp() in net/dccp/feat.c, which may cause denial of service, aka CID-1d3ff0950e2b. |
CVE-2019-20095 | Medium | 5.5 | 2019-12-30 | mwifiex_tm_cmd in drivers/net/wireless/marvell/mwifiex/cfg80211.c in the Linux kernel before 5.1.6 has some error-handling cases that did not free allocated ho… |
CVE-2019-20052 | Medium | 6.5 | 2019-12-27 | A memory leak was discovered in Mat_VarCalloc in mat.c in matio 1.5.17 because SafeMulDims does not consider the rank==0 case. |
CVE-2019-20023 | Medium | 6.5 | 2019-12-27 | A memory leak was discovered in image_buffer_resize in fromsixel.c in libsixel 1.8.4. |
CVE-2019-19956 | High | 7.5 | 2019-12-24 | xmlParseBalancedChunkMemoryRecover in parser.c in libxml2 before 2.9.10 has a memory leak related to newDoc->oldNs. |
CVE-2019-6681 | High | 7.5 | 2019-12-23 | On BIG-IP versions 15.0.0-15.0.1.1, 14.1.0-14.1.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1, and 12.1.0-12.1.5, a memory leak in Multicast Forwarding Cache (MFC) handlin… |
CVE-2019-5248 | High | 7.4 | 2019-12-13 | CloudEngine 12800 has a DoS vulnerability. An attacker of a neighboring device sends a large number of specific packets. As a result, a memory leak occurs afte… |
CVE-2019-19577 | High | 7.2 | 2019-12-11 | An issue was discovered in Xen through 4.12.x allowing x86 AMD HVM guest OS users to cause a denial of service or possibly gain privileges by triggering data-s… |
CVE-2019-6671 | High | 7.5 | 2019-11-27 | On BIG-IP 15.0.0-15.0.1, 14.1.0-14.1.2, 14.0.0-14.0.1, and 13.1.0-13.1.3.1, under certain conditions tmm may leak memory when processing packet fragments, lead… |
CVE-2019-5540 | High | 7.7 | 2019-11-20 | VMware Workstation (15.x before 15.5.1) and Fusion (11.x before 11.5.1) contain an information disclosure vulnerability in vmnetdhcp. Successful exploitation o… |
CVE-2019-19083 | Medium | 4.7 | 2019-11-18 | Memory leaks in *clock_source_create() functions under drivers/gpu/drm/amd/display/dc in the Linux kernel before 5.3.8 allow attackers to cause a denial of ser… |
CVE-2019-19082 | Medium | 4.7 | 2019-11-18 | Memory leaks in *create_resource_pool() functions under drivers/gpu/drm/amd/display/dc in the Linux kernel through 5.3.11 allow attackers to cause a denial of… |
CVE-2019-19081 | Medium | 5.9 | 2019-11-18 | A memory leak in the nfp_flower_spawn_vnic_reprs() function in drivers/net/ethernet/netronome/nfp/flower/main.c in the Linux kernel before 5.3.4 allows attacke… |
CVE-2019-19080 | Medium | 5.9 | 2019-11-18 | Four memory leaks in the nfp_flower_spawn_phy_reprs() function in drivers/net/ethernet/netronome/nfp/flower/main.c in the Linux kernel before 5.3.4 allow attac… |
CVE-2019-19079 | High | 7.5 | 2019-11-18 | A memory leak in the qrtr_tun_write_iter() function in net/qrtr/tun.c in the Linux kernel before 5.3 allows attackers to cause a denial of service (memory cons… |
CVE-2019-19078 | High | 7.5 | 2019-11-18 | A memory leak in the ath10k_usb_hif_tx_sg() function in drivers/net/wireless/ath/ath10k/usb.c in the Linux kernel through 5.3.11 allows attackers to cause a de… |
CVE-2019-19077 | Medium | 5.5 | 2019-11-18 | A memory leak in the bnxt_re_create_srq() function in drivers/infiniband/hw/bnxt_re/ib_verbs.c in the Linux kernel through 5.3.11 allows attackers to cause a d… |
CVE-2019-19076 | Medium | 5.9 | 2019-11-18 | A memory leak in the nfp_abm_u32_knode_replace() function in drivers/net/ethernet/netronome/nfp/abm/cls.c in the Linux kernel before 5.3.6 allows attackers to… |
CVE-2019-19075 | High | 7.5 | 2019-11-18 | A memory leak in the ca8210_probe() function in drivers/net/ieee802154/ca8210.c in the Linux kernel before 5.3.8 allows attackers to cause a denial of service… |
CVE-2019-19074 | High | 7.5 | 2019-11-18 | A memory leak in the ath9k_wmi_cmd() function in drivers/net/wireless/ath/ath9k/wmi.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of… |
CVE-2019-19073 | Medium | 4.0 | 2019-11-18 | Memory leaks in drivers/net/wireless/ath/ath9k/htc_hst.c in the Linux kernel through 5.3.11 allow attackers to cause a denial of service (memory consumption) b… |
CVE-2019-19072 | Medium | 4.4 | 2019-11-18 | A memory leak in the predicate_parse() function in kernel/trace/trace_events_filter.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of… |