Vulnerabilities > Double Free

DATE CVE VULNERABILITY TITLE RISK
2021-03-05 CVE-2021-28041 Double Free vulnerability in multiple products
ssh-agent in OpenSSH before 8.5 has a double free that may be relevant in a few less-common scenarios, such as unconstrained agent-socket access on a legacy operating system, or the forwarding of an agent to an attacker-controlled host.
network
high complexity
openbsd fedoraproject netapp oracle CWE-415
7.1
2021-03-05 CVE-2021-28034 Double Free vulnerability in Stack DST Project Stack DST
An issue was discovered in the stack_dst crate before 0.6.1 for Rust.
network
low complexity
stack-dst-project CWE-415
critical
9.8
2021-03-05 CVE-2021-28031 Double Free vulnerability in Scratchpad Project Scratchpad
An issue was discovered in the scratchpad crate before 1.3.1 for Rust.
network
low complexity
scratchpad-project CWE-415
critical
9.8
2021-03-05 CVE-2021-28028 Double Free vulnerability in Toodee Project Toodee
An issue was discovered in the toodee crate before 0.3.0 for Rust.
network
low complexity
toodee-project CWE-415
critical
9.8
2021-03-04 CVE-2021-3403 Double Free vulnerability in multiple products
In ytnef 1.9.3, the TNEFSubjectHandler function in lib/ytnef.c allows remote attackers to cause a denial-of-service (and potentially code execution) due to a double free which can be triggered via a crafted file.
local
low complexity
ytnef-project redhat fedoraproject CWE-415
7.8
2021-02-24 CVE-2021-27645 Double Free vulnerability in multiple products
The nameserver caching daemon (nscd) in the GNU C Library (aka glibc or libc6) 2.29 through 2.33, when processing a request for netgroup lookup, may crash due to a double-free, potentially resulting in degraded service or Denial of Service on the local system.
local
high complexity
gnu fedoraproject debian CWE-415
2.5
2021-02-23 CVE-2021-3407 Double Free vulnerability in multiple products
A flaw was found in mupdf 1.18.0.
local
low complexity
artifex fedoraproject debian CWE-415
5.5
2021-02-11 CVE-2019-19005 Double Free vulnerability in multiple products
A bitmap double free in main.c in autotrace 0.31.1 allows attackers to cause an unspecified impact via a malformed bitmap image.
local
low complexity
autotrace-project fedoraproject CWE-415
7.8
2021-02-09 CVE-2021-26954 Double Free vulnerability in Qwutils Project Qwutils
An issue was discovered in the qwutils crate before 0.3.1 for Rust.
network
low complexity
qwutils-project CWE-415
5.3
2021-02-06 CVE-2021-22303 Double Free vulnerability in Huawei Taurus-Al00A Firmware 10.0.0.1(C00E1R1P1)
There is a pointer double free vulnerability in Taurus-AL00A 10.0.0.1(C00E1R1P1).
local
low complexity
huawei CWE-415
3.3