Vulnerabilities > Double Free

DATE CVE VULNERABILITY TITLE RISK
2018-03-01 CVE-2018-7589 Double Free vulnerability in Cimg .220
An issue was discovered in CImg v.220.
local
low complexity
cimg CWE-415
7.8
2018-02-26 CVE-2017-18201 Double Free vulnerability in GNU Libcdio
An issue was discovered in GNU libcdio before 2.0.0.
network
low complexity
gnu CWE-415
critical
9.8
2018-02-25 CVE-2018-7480 Double Free vulnerability in multiple products
The blkcg_init_queue function in block/blk-cgroup.c in the Linux kernel before 4.11 allows local users to cause a denial of service (double free) or possibly have unspecified other impact by triggering a creation failure.
local
low complexity
linux canonical debian CWE-415
7.8
2018-02-20 CVE-2018-7263 Double Free vulnerability in Underbit Libmad 0.15.0B/0.15.1B
The mad_decoder_run() function in decoder.c in Underbit libmad through 0.15.1b allows remote attackers to cause a denial of service (SIGABRT because of double free or corruption) or possibly have unspecified other impact via a crafted file.
network
low complexity
underbit CWE-415
critical
9.8
2018-02-19 CVE-2018-5379 Double Free vulnerability in multiple products
The Quagga BGP daemon (bgpd) prior to version 1.2.3 can double-free memory when processing certain forms of UPDATE message, containing cluster-list and/or unknown attributes.
network
low complexity
quagga debian canonical redhat siemens CWE-415
critical
9.8
2018-02-15 CVE-2017-15330 Double Free vulnerability in Huawei Vicky-Al00A Firmware Vickyal00Ac00B124D/Vickyal00Ac00B157D/Vickyal00Ac00B167
The Flp Driver in some Huawei smartphones of the software Vicky-AL00AC00B124D, Vicky-AL00AC00B157D, Vicky-AL00AC00B167 has a double free vulnerability.
local
low complexity
huawei CWE-415
5.5
2018-02-13 CVE-2018-6952 Double Free vulnerability in GNU Patch
A double free exists in the another_hunk function in pch.c in GNU patch through 2.7.6.
network
low complexity
gnu CWE-415
7.5
2018-02-11 CVE-2017-18174 Double Free vulnerability in Linux Kernel
In the Linux kernel before 4.7, the amd_gpio_remove function in drivers/pinctrl/pinctrl-amd.c calls the pinctrl_unregister function, leading to a double free.
network
low complexity
linux CWE-415
critical
9.8
2018-02-02 CVE-2017-18120 Double Free vulnerability in Lcdf Gifsicle 1.90
A double-free bug in the read_gif function in gifread.c in gifsicle 1.90 allows a remote attacker to cause a denial-of-service attack or unspecified other impact via a maliciously crafted file, because last_name is mishandled, a different vulnerability than CVE-2017-1000421.
local
low complexity
lcdf CWE-415
7.8
2018-01-29 CVE-2018-0101 Double Free vulnerability in Cisco Adaptive Security Appliance Software
A vulnerability in the Secure Sockets Layer (SSL) VPN functionality of the Cisco Adaptive Security Appliance (ASA) Software could allow an unauthenticated, remote attacker to cause a reload of the affected system or to remotely execute code.
network
low complexity
cisco CWE-415
critical
10.0