Vulnerabilities > Improper Release of Memory Before Removing Last Reference ('Memory Leak')

DATE CVE VULNERABILITY TITLE RISK
2020-12-24 CVE-2020-35679 Memory Leak vulnerability in multiple products
smtpd/table.c in OpenSMTPD before 6.8.0p1 lacks a certain regfree, which might allow attackers to trigger a "very significant" memory leak via messages to an instance that performs many regex lookups.
network
low complexity
opensmtpd fedoraproject CWE-401
7.5
2020-12-24 CVE-2020-27725 Memory Leak vulnerability in F5 products
In version 15.1.0-15.1.0.5, 14.1.0-14.1.3, 13.1.0-13.1.3.4, 12.1.0-12.1.5.2, and 11.6.1-11.6.5.2 of BIG-IP DNS, GTM, and Link Controller, zxfrd leaks memory when listing DNS zones.
network
low complexity
f5 CWE-401
4.3
2020-12-15 CVE-2020-29485 Memory Leak vulnerability in multiple products
An issue was discovered in Xen 4.6 through 4.14.x.
local
low complexity
xen debian fedoraproject CWE-401
5.5
2020-12-15 CVE-2020-27038 Memory Leak vulnerability in Google Android 11.0
In process of C2SoftVorbisDec.cpp, there is a possible resource exhaustion due to a memory leak.
network
low complexity
google CWE-401
6.5
2020-12-15 CVE-2020-0491 Memory Leak vulnerability in Google Android 11.0
In readBlock of MatroskaExtractor.cpp, there is a possible denial of service due to resource exhaustion.
network
low complexity
google CWE-401
6.5
2020-12-11 CVE-2020-27713 Memory Leak vulnerability in F5 Big-Ip Advanced Firewall Manager 13.1.3.4
In certain configurations on version 13.1.3.4, when a BIG-IP AFM HTTP security profile is applied to a virtual server and the BIG-IP system receives a request with specific characteristics, the connection is reset and the Traffic Management Microkernel (TMM) leaks memory.
network
low complexity
f5 CWE-401
7.5
2020-12-11 CVE-2020-26420 Memory Leak vulnerability in multiple products
Memory leak in RTPS protocol dissector in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via packet injection or crafted capture file.
network
low complexity
wireshark fedoraproject oracle CWE-401
5.3
2020-12-11 CVE-2020-26419 Memory Leak vulnerability in multiple products
Memory leak in the dissection engine in Wireshark 3.4.0 allows denial of service via packet injection or crafted capture file.
network
low complexity
wireshark fedoraproject oracle CWE-401
5.3
2020-12-11 CVE-2020-26418 Memory Leak vulnerability in multiple products
Memory leak in Kafka protocol dissector in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via packet injection or crafted capture file.
network
low complexity
wireshark fedoraproject debian oracle CWE-401
5.3
2020-12-08 CVE-2020-27755 Memory Leak vulnerability in Imagemagick
in SetImageExtent() of /MagickCore/image.c, an incorrect image depth size can cause a memory leak because the code which checks for the proper image depth size does not reset the size in the event there is an invalid size.
local
low complexity
imagemagick CWE-401
3.3