CWE-772 · Missing Release of Resource after Effective Lifetime (page 3)
Page 3 of 6 — CVEs classified under CWE-772, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-20622 | Medium | 6.5 | 2018-12-31 | JasPer 2.0.14 has a memory leak in base/jas_malloc.c in libjasper.a when "--output-format jp2" is used. |
CVE-2018-20540 | Medium | 6.5 | 2018-12-28 | There is memory leak at liblas::Open (liblas/liblas.hpp) in libLAS 1.8.1. |
CVE-2018-20408 | Medium | 6.5 | 2018-12-23 | An issue was discovered in Bento4 1.5.1-627. There is a memory leak in AP4_StdcFileByteStream::Create in System/StdC/Ap4StdCFileByteStream.cpp, as demonstrated… |
CVE-2018-20407 | Medium | 6.5 | 2018-12-23 | An issue was discovered in Bento4 1.5.1-627. There is a memory leak in AP4_DescriptorFactory::CreateDescriptorFromStream in Core/Ap4DescriptorFactory.cpp, as d… |
CVE-2018-20126 | Medium | 5.5 | 2018-12-20 | hw/rdma/vmw/pvrdma_cmd.c in QEMU allows create_cq and create_qp memory leaks because errors are mishandled. |
CVE-2018-20123 | Medium | 5.5 | 2018-12-17 | pvrdma_realize in hw/rdma/vmw/pvrdma_main.c in QEMU has a Memory leak after an initialisation error. |
CVE-2018-20002 | Medium | 5.5 | 2018-12-10 | The _bfd_generic_read_minisymbols function in syms.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31, has a memor… |
CVE-2018-19760 | High | 8.8 | 2018-11-30 | cfg_init in confuse.c in libConfuse 3.2.2 has a memory leak. |
CVE-2018-10851 | Medium | 5.3 | 2018-11-29 | PowerDNS Authoritative Server 3.3.0 up to 4.1.4 excluding 4.1.5 and 4.0.6, and PowerDNS Recursor 3.2 up to 4.1.4 excluding 4.1.5 and 4.0.9, are vulnerable to a… |
CVE-2018-19213 | Medium | 5.5 | 2018-11-12 | Netwide Assembler (NASM) through 2.14rc16 has memory leaks that may lead to DoS, related to nasm_malloc in nasmlib/malloc.c. |
CVE-2018-19139 | Medium | 5.5 | 2018-11-09 | An issue has been found in JasPer 2.0.14. There is a memory leak in jas_malloc.c when called from jpc_unk_getparms in jpc_cs.c. |
CVE-2018-19132 | Medium | 5.9 | 2018-11-09 | Squid before 4.4, when SNMP is enabled, allows a denial of service (Memory Leak) via an SNMP packet. |
CVE-2018-18897 | Medium | 6.5 | 2018-11-02 | An issue was discovered in Poppler 0.71.0. There is a memory leak in GfxColorSpace::setDisplayProfile in GfxState.cc, as demonstrated by pdftocairo. |
CVE-2018-18544 | Medium | 6.5 | 2018-10-21 | There is a memory leak in the function WriteMSLImage of coders/msl.c in ImageMagick 7.0.8-13 Q16, and the function ProcessMSLScript of coders/msl.c in Graphics… |
CVE-2018-18482 | Medium | 6.5 | 2018-10-18 | An issue was discovered in libpg_query 10-1.0.2. There is a memory leak in pg_query_raw_parse in pg_query_parse.c, which might lead to a denial of service. |
CVE-2018-18443 | Medium | 4.3 | 2018-10-17 | OpenEXR 2.3.0 has a memory leak in ThreadPool in IlmBase/IlmThread/IlmThreadPool.cpp, as demonstrated by exrmultiview. |
CVE-2018-18226 | High | 7.5 | 2018-10-12 | In Wireshark 2.6.0 to 2.6.3, the Steam IHS Discovery dissector could consume system memory. This was addressed in epan/dissectors/packet-steam-ihs-discovery.c… |
CVE-2018-18016 | Medium | 6.5 | 2018-10-05 | ImageMagick 7.0.7-28 has a memory leak vulnerability in WritePCXImage in coders/pcx.c. |
CVE-2018-0471 | High | 7.4 | 2018-10-05 | A vulnerability in the Cisco Discovery Protocol (CDP) module of Cisco IOS XE Software Releases 16.6.1 and 16.6.2 could allow an unauthenticated, adjacent attac… |
CVE-2018-0421 | High | 8.6 | 2018-10-05 | A vulnerability in TCP connection management in Cisco Prime Access Registrar could allow an unauthenticated, remote attacker to cause a denial of service (DoS)… |
CVE-2018-17967 | Medium | 6.5 | 2018-10-03 | ImageMagick 7.0.7-28 has a memory leak vulnerability in ReadBGRImage in coders/bgr.c. |
CVE-2018-17966 | Medium | 6.5 | 2018-10-03 | ImageMagick 7.0.7-28 has a memory leak vulnerability in WritePDBImage in coders/pdb.c. |
CVE-2018-17965 | Medium | 6.5 | 2018-10-03 | ImageMagick 7.0.7-28 has a memory leak vulnerability in WriteSGIImage in coders/sgi.c. |
CVE-2018-17437 | Medium | 6.5 | 2018-09-24 | Memory leak in the H5O_dtype_decode_helper() function in H5Odtype.c in the HDF HDF5 through 1.10.3 library allows attackers to cause a denial of service (memor… |
CVE-2018-17332 | High | 7.5 | 2018-09-22 | An issue was discovered in libsvg2 through 2012-10-19. The svgGetNextPathField function in svg_string.c returns its input pointer in certain circumstances, whi… |
CVE-2018-17234 | Medium | 6.5 | 2018-09-20 | Memory leak in the H5O__chunk_deserialize() function in H5Ocache.c in the HDF HDF5 through 1.10.3 library allows attackers to cause a denial of service (memory… |
CVE-2018-3658 | Medium | 5.3 | 2018-09-12 | Multiple memory leaks in Intel AMT in Intel CSME firmware versions before 12.0.5 may allow an unauthenticated user with Intel AMT provisioned to potentially ca… |
CVE-2018-16807 | High | 7.5 | 2018-09-11 | In Bro through 2.5.5, there is a memory leak potentially leading to DoS in scripts/base/protocols/krb/main.bro in the Kerberos protocol parser. |
CVE-2018-16750 | Medium | 6.5 | 2018-09-09 | In ImageMagick 7.0.7-29 and earlier, a memory leak in the formatIPTCfromBuffer function in coders/meta.c was found. |
CVE-2018-16641 | Medium | 6.5 | 2018-09-06 | ImageMagick 7.0.8-6 has a memory leak vulnerability in the TIFFWritePhotoshopLayers function in coders/tiff.c. |
CVE-2018-16640 | Medium | 6.5 | 2018-09-06 | ImageMagick 7.0.8-5 has a memory leak vulnerability in the function ReadOneJNGImage in coders/png.c. |
CVE-2018-16548 | Medium | 6.5 | 2018-09-05 | An issue was discovered in ZZIPlib through 0.13.69. There is a memory leak triggered in the function __zzip_parse_root_directory in zip.c, which will lead to a… |
CVE-2018-6554 | Medium | 5.5 | 2018-09-04 | Memory leak in the irda_bind function in net/irda/af_irda.c and later in drivers/staging/irda/net/af_irda.c in the Linux kernel before 4.17 allows local users… |
CVE-2018-10924 | Medium | 5.3 | 2018-09-04 | It was discovered that fsync(2) system call in glusterfs client code leaks memory. An authenticated attacker could use this flaw to launch a denial of service… |
CVE-2018-1999043 | High | 7.5 | 2018-08-23 | A denial of service vulnerability exists in Jenkins 2.137 and earlier, 2.121.2 and earlier in BasicAuthenticationFilter.java, BasicHeaderApiTokenAuthenticator… |
CVE-2018-1000215 | High | 7.5 | 2018-08-20 | Dave Gamble cJSON version 1.7.6 and earlier contains a CWE-772 vulnerability in cJSON library that can result in Denial of Service (DoS). This attack appear to… |
CVE-2018-7994 | High | 7.5 | 2018-07-31 | Some Huawei products IPS Module V500R001C50; NGFW Module V500R001C50; V500R002C10; NIP6300 V500R001C50; NIP6600 V500R001C50; NIP6800 V500R001C50; Secospace USG… |
CVE-2018-5536 | High | 7.5 | 2018-07-25 | A remote attacker via undisclosed measures, may be able to exploit an F5 BIG-IP APM 13.0.0-13.1.0.7 or 12.1.0-12.1.3.5 virtual server configured with an APM pe… |
CVE-2018-14437 | Medium | 6.5 | 2018-07-20 | ImageMagick 7.0.8-4 has a memory leak in parse8BIM in coders/meta.c. |
CVE-2018-14436 | Medium | 6.5 | 2018-07-20 | ImageMagick 7.0.8-4 has a memory leak in ReadMIFFImage in coders/miff.c. |
CVE-2018-14435 | Medium | 6.5 | 2018-07-20 | ImageMagick 7.0.8-4 has a memory leak in DecodeImage in coders/pcd.c. |
CVE-2018-14434 | Medium | 6.5 | 2018-07-20 | ImageMagick 7.0.8-4 has a memory leak for a colormap in WriteMPCImage in coders/mpc.c. |
CVE-2018-14073 | High | 7.5 | 2018-07-15 | libsixel 1.8.1 has a memory leak in sixel_allocator_new in allocator.c. |
CVE-2018-14072 | High | 7.5 | 2018-07-15 | libsixel 1.8.1 has a memory leak in sixel_decoder_decode in decoder.c, image_buffer_resize in fromsixel.c, and sixel_decode_raw in fromsixel.c. |
CVE-2018-13843 | High | 7.5 | 2018-07-10 | An issue has been found in HTSlib 1.8. It is a memory leak in bgzf_getline in bgzf.c. NOTE: the software maintainer's position is that the "failure to free mem… |
CVE-2018-13420 | High | 7.5 | 2018-07-07 | Google gperftools 2.7 has a memory leak in malloc_extension.cc, related to MallocExtension::Register and InitModule. NOTE: the software maintainer indicates th… |
CVE-2018-13419 | Medium | 6.5 | 2018-07-07 | An issue has been found in libsndfile 1.0.28. There is a memory leak in psf_allocate in common.c, as demonstrated by sndfile-convert. NOTE: The maintainer and… |
CVE-2017-15824 | Medium | 5.5 | 2018-07-06 | In Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05, the function Upd… |
CVE-2018-13153 | Medium | 6.5 | 2018-07-05 | In ImageMagick 7.0.8-4, there is a memory leak in the XMagickCommand function in MagickCore/animate.c. |
CVE-2018-13066 | High | 7.5 | 2018-07-02 | There is a memory leak in util/parser.c in libming 0.4.8, which will lead to a denial of service via parseSWF_DEFINEBUTTON2, parseSWF_DEFINEFONT, parseSWF_DEFI… |
CVE-2018-5527 | High | 7.5 | 2018-06-27 | On BIG-IP 13.1.0-13.1.0.7, a remote attacker using undisclosed methods against virtual servers configured with a Client SSL or Server SSL profile that has the… |
CVE-2018-12093 | High | 7.5 | 2018-06-11 | tinyexr 0.9.5 has a memory leak in ParseEXRHeaderFromMemory in tinyexr.h. |
CVE-2017-7654 | High | 7.5 | 2018-06-05 | In Eclipse Mosquitto 1.4.15 and earlier, a Memory Leak vulnerability was found within the Mosquitto Broker. Unauthenticated clients can send crafted CONNECT pa… |
CVE-2018-11656 | Medium | 6.5 | 2018-06-01 | In ImageMagick 7.0.7-20 Q16 x86_64, a memory leak vulnerability was found in the function ReadDCMImage in coders/dcm.c, which allows attackers to cause a denia… |
CVE-2018-11655 | Medium | 6.5 | 2018-06-01 | In ImageMagick 7.0.7-20 Q16 x86_64, a memory leak vulnerability was found in the function GetImagePixelCache in MagickCore/cache.c, which allows attackers to c… |
CVE-2018-1000036 | Medium | 5.5 | 2018-05-24 | In Artifex MuPDF 1.12.0 and earlier, multiple memory leaks in the PDF parser allow an attacker to cause a denial of service (memory leak) via a crafted file. |
CVE-2018-11364 | High | 7.5 | 2018-05-22 | sav_parse_machine_integer_info_record in spss/readstat_sav_read.c in libreadstat.a in ReadStat 0.1.1 has a memory leak related to an iconv_open call. |
CVE-2018-11097 | High | 7.5 | 2018-05-15 | An issue was discovered in cloudwu/cstring through 2016-11-09. There is a memory leak vulnerability that could lead to a program crash. |
CVE-2018-10805 | Medium | 6.5 | 2018-05-08 | ImageMagick version 7.0.7-28 contains a memory leak in ReadYCBCRImage in coders/ycbcr.c. |
CVE-2018-10804 | Medium | 6.5 | 2018-05-08 | ImageMagick version 7.0.7-28 contains a memory leak in WriteTIFFImage in coders/tiff.c. |
CVE-2018-10801 | Medium | 6.5 | 2018-05-08 | TIFFClientOpen in tif_unix.c in LibTIFF 3.8.2 has memory leaks, as demonstrated by bmp2tiff. |
CVE-2017-6888 | Medium | 5.5 | 2018-04-25 | An error in the "read_metadata_vorbiscomment_()" function (src/libFLAC/stream_decoder.c) in FLAC version 1.3.2 can be exploited to cause a memory leak via a sp… |
CVE-2017-17257 | High | 7.5 | 2018-04-24 | Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R00… |
CVE-2017-17256 | High | 7.5 | 2018-04-24 | Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R00… |
CVE-2017-1786 | Medium | 5.3 | 2018-04-23 | IBM WebSphere MQ 8.0 through 8.0.0.8 and 9.0 through 9.0.4 under special circumstances could allow an authenticated user to consume all resources due to a memo… |
CVE-2018-10205 | Medium | 5.3 | 2018-04-19 | hyperstart 1.0.0 in HyperHQ Hyper has memory leaks in the container_setup_modules and hyper_rescan_scsi functions in container.c, related to runV 1.0.0 for Doc… |
CVE-2018-9274 | High | 7.5 | 2018-04-04 | In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, ui/failure_message.c has a memory leak. |
CVE-2018-9273 | High | 7.5 | 2018-04-04 | In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, epan/dissectors/packet-pcp.c has a memory leak. |
CVE-2018-9272 | High | 7.5 | 2018-04-04 | In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, epan/dissectors/packet-h223.c has a memory leak. |
CVE-2018-9271 | High | 7.5 | 2018-04-04 | In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, epan/dissectors/packet-multipart.c has a memory leak. |
CVE-2018-9270 | High | 7.5 | 2018-04-04 | In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, epan/oids.c has a memory leak. |
CVE-2018-9269 | High | 7.5 | 2018-04-04 | In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, epan/dissectors/packet-giop.c has a memory leak. |
CVE-2018-9268 | High | 7.5 | 2018-04-04 | In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, epan/dissectors/packet-smb2.c has a memory leak. |
CVE-2018-9267 | High | 7.5 | 2018-04-04 | In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, epan/dissectors/packet-lapd.c has a memory leak. |
CVE-2018-9266 | High | 7.5 | 2018-04-04 | In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, epan/dissectors/packet-isup.c has a memory leak. |
CVE-2018-9265 | High | 7.5 | 2018-04-04 | In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, epan/dissectors/packet-tn3270.c has a memory leak. |
CVE-2018-0165 | High | 7.4 | 2018-03-28 | A vulnerability in the Internet Group Management Protocol (IGMP) packet-processing functionality of Cisco IOS XE Software could allow an unauthenticated, adjac… |
CVE-2017-18254 | Medium | 6.5 | 2018-03-27 | An issue was discovered in ImageMagick 7.0.7. A memory leak vulnerability was found in the function WriteGIFImage in coders/gif.c, which allow remote attackers… |
CVE-2017-18251 | Medium | 6.5 | 2018-03-27 | An issue was discovered in ImageMagick 7.0.7. A memory leak vulnerability was found in the function ReadPCDImage in coders/pcd.c, which allow remote attackers… |
CVE-2018-6957 | Medium | 5.3 | 2018-03-15 | VMware Workstation (14.x before 14.1.1, 12.x) and Fusion (10.x before 10.1.1 and 8.x) contain a denial-of-service vulnerability which can be triggered by openi… |
CVE-2018-8087 | Medium | 5.5 | 2018-03-13 | Memory leak in the hwsim_new_radio_nl function in drivers/net/wireless/mac80211_hwsim.c in the Linux kernel through 4.15.9 allows local users to cause a denial… |
CVE-2017-15315 | Medium | 6.5 | 2018-03-09 | Patch module of Huawei NIP6300 V500R001C20SPC100, V500R001C20SPC200, NIP6600 V500R001C20SPC100, V500R001C20SPC200, Secospace USG6300 V500R001C20SPC100, V500R00… |
CVE-2017-15314 | Medium | 5.5 | 2018-03-09 | Huawei DP300 V500R002C00, RP200 V500R002C00SPC200, V600R006C00, TE30 V100R001C10SPC300, V100R001C10SPC500, V100R001C10SPC600, V100R001C10SPC700, V500R002C00SPC… |
CVE-2017-17330 | Low | 3.3 | 2018-03-09 | Huawei AR3200 V200R005C32; V200R006C10; V200R006C11; V200R007C00; V200R007C01; V200R007C02; V200R008C00; V200R008C10; V200R008C20; V200R008C30; NGFW Module V50… |
CVE-2017-17329 | Low | 3.3 | 2018-03-09 | Huawei ViewPoint 8660 V100R008C03 have a memory leak vulnerability. The software does not release allocated memory properly when parse XML Schema data. An auth… |
CVE-2018-7869 | High | 7.5 | 2018-03-08 | There is a memory leak triggered in the function dcinit of util/decompile.c in libming 0.4.8, which will lead to a denial of service attack. |
CVE-2018-7757 | Medium | 5.5 | 2018-03-08 | Memory leak in the sas_smp_get_phy_events function in drivers/scsi/libsas/sas_expander.c in the Linux kernel through 4.15.7 allows local users to cause a denia… |
CVE-2018-7727 | Medium | 6.5 | 2018-03-06 | An issue was discovered in ZZIPlib 0.13.68. There is a memory leak triggered in the function zzip_mem_disk_new in memdisk.c, which will lead to a denial of ser… |
CVE-2017-17141 | Low | 3.7 | 2018-03-05 | Huawei S12700 V200R005C00; V200R006C00; V200R007C00; V200R007C01; V200R007C20; V200R008C00; V200R009C00;S1700 V200R006C10; V200R009C00;S2700 V100R006C03; V200R… |
CVE-2017-17302 | Low | 3.3 | 2018-02-15 | Huawei DP300 V500R002C00, RP200 V600R006C00, TE30 V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V10… |
CVE-2017-17296 | Medium | 5.3 | 2018-02-15 | Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R00… |
CVE-2017-17291 | Medium | 5.5 | 2018-02-15 | Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R00… |
CVE-2017-17289 | Low | 3.3 | 2018-02-15 | Huawei DP300 V500R002C00, RP200 V500R002C00, V600R006C00, TE30 V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006… |
CVE-2017-17164 | Medium | 5.3 | 2018-02-15 | Huawei Secospace AntiDDoS8000 V500R001C20SPC500 have a memory leak vulnerability due to memory don't be released when the system open some function. An attacke… |
CVE-2017-17162 | Medium | 5.5 | 2018-02-15 | Huawei Secospace USG6600 V500R001C30SPC100, Secospace USG6600 V500R001C30SPC200, Secospace USG6600 V500R001C30SPC300, USG9500 V500R001C30SPC100, USG9500 V500R0… |
CVE-2017-17153 | High | 7.5 | 2018-02-15 | IKEv2 in Huawei IPS Module V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20… |
CVE-2017-15349 | High | 7.5 | 2018-02-15 | Huawei CloudEngine 12800 V100R003C00, V100R005C00, V100R005C10, V100R006C00,CloudEngine 5800 V100R003C00, V100R005C00, V100R005C10, V100R006C00,CloudEngine 680… |
CVE-2017-15332 | Medium | 5.3 | 2018-02-15 | Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R00… |
CVE-2017-13234 | Medium | 6.5 | 2018-02-12 | In DLSParser of the sonivox library, there is possible resource exhaustion due to a memory leak. This could lead to remote temporary denial of service with no… |
CVE-2017-12467 | High | 7.5 | 2018-02-07 | Memory leak in CCN-lite before 2.00 allows context-dependent attackers to cause a denial of service (memory consumption) by leveraging failure to allocate memo… |