5225 matches found
USN-4679-1 linux, linux-aws, linux-aws-5.4, linux-azure, linux-azure-5.4, linux-gcp, linux-gcp-5.4, linux-gke-5.4, linux-hwe-5.4, linux-kvm, linux-oracle, linux-oracle-5.4, linux-raspi, linux-raspi-5.4 vulnerabilities
It was discovered that the console keyboard driver in the Linux kernel contained a race condition. A local attacker could use this to expose sensitive information kernel memory. CVE-2020-25656 Minh Yuan discovered that the tty driver in the Linux kernel contained race conditions when handling...
Mozilla Rust rocket crate competitive conditions issue vulnerability
Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A contention condition issue vulnerability exists in rocket crate in versions of Mozilla Rust prior to 0.4.5, which stems from LocalRequest::clone creating multiple mutable references to the same object, which c...
Vulnerability Spotlight: Multiple vulnerabilities in SoftMaker Office TextMaker
A Cisco Talos team member discovered these vulnerabilities. Blog by Jon Munshaw. Cisco Talos recently discovered multiple vulnerabilities in SoftMaker's TextMaker software. A user could trigger these vulnerabilities by opening an attacker-created, malicious document. An adversary could use these...
Google Android Competitive Conditions Issue Vulnerability
Google Android is a Linux-based open source operating system from the USGoogleOpen Handheld Alliance Google. Google Android OS suffers from a competitive conditions issue vulnerability that arises from improper handling of concurrent access when concurrent code requires mutually exclusive access ...
FreeBSD FTPD Improper Handling of Exceptional Conditions Privilege Escalation Vulnerability
This vulnerability allows remote attackers to escalate privileges on affected installations of FreeBSD FTPD. Authentication is required to exploit this vulnerability. The specific flaw exists within the enforcement of permissions. The process does not properly handle exceptional conditions. An...
CVE-2020-7549
A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in the Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules see security notification for affected versions, that could cause denial of HTTP and FTP...
CVE-2020-7537
A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Legacy Controllers Modicon Quantum & Modicon Premium see security notifications for affected versions, that could cause denial of service when a specially crafted Read Physical Memo...
Design/Logic Flaw
A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Legacy Controllers Modicon Quantum & Modicon Premium see security notifications for affected versions, that could cause denial of service when a specially crafted Read Physical Memo...
Design/Logic Flaw
An improper handling of exceptional conditions vulnerability in Cortex XDR Agent allows a local authenticated Windows user to create files in the software's internal program directory that prevents the Cortex XDR Agent from starting. The exceptional condition is persistent and prevents Cortex XDR...
CVE-2020-2020
The CVE-2020-2020 issue affects Cortex XDR Agent on Windows, caused by improper handling of exceptional conditions in the agent’s internal directory. This allows a local authenticated user to create files that prevent the agent from starting, with the problem persisting after reboot. Affected ver...
SUSE SLES12 Security Update : xen (SUSE-SU-2020:2822-1)
This update for xen fixes the following issues : CVE-2020-25604: Fixed a race condition when migrating timers between x86 HVM vCPU-s bsc1176343,XSA-336 CVE-2020-25595: Fixed an issue where PCI passthrough code was reading back hardware registers bsc1176344,XSA-337 CVE-2020-25597: Fixed an issue...
CVE-2020-27756
In ParseMetaGeometry of MagickCore/geometry.c, image height and width calculations can lead to divide-by-zero conditions which also lead to undefined behavior. This flaw can be triggered by a crafted input file processed by ImageMagick and could impact application availability. The patch uses...
Privilege Escalation
intel-microcode is vulnerable to privilege escalation. Allows an local authenticated malicious user to gain elevated privileges on the system, caused by improper conditions check. An attacker could exploit this vulnerability to escalate privileges, obtain confidential information or cause a denia...
Heap Corruption
Failure to check error conditions in V8 in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
The vulnerability of the get_user_pages() function allows a hacker to trigger a service failure.
The vulnerability of the getuserpages function is related to errors during multi-threaded operations race conditions. Exploiting this vulnerability could allow a hacker to cause service failures...
The vulnerability of the do_madvise function (mm/madvise.c) in Linux operating system kernels allows a attacker to cause a service failure.
The vulnerability of the domadvise function in the Linux operating system’s kernel is related to errors during the execution of multi-threaded tasks race conditions. Exploiting this vulnerability can allow an attacker to cause service failures...
The vulnerability of the kmem_cache_alloc_bulk function (mm/slub.c) in Linux operating systems allows a hacker to cause a service failure.
The vulnerability of the kmemcacheallocbulk function in the mm/slub.c file of Linux operating system kernels is related to errors during multi-threaded tasks race conditions. Exploiting this vulnerability can allow an attacker to cause service failures...
PulseAudio Competitive Conditions Issue Vulnerability
PulseAudio is an open source audio system for POSIX OS. The system is primarily used for audio transmission, among other things. PulseAudio suffers from a Competitive Conditions Issue vulnerability in Ubuntu, which can be exploited by attackers to bypass access restrictions on Ubuntu PulseAudio...
Cisco IOS XE Software Packet Filtering Bypass (cisco-sa-cedge-filt-bypass-Y6wZMqm4)
According to its self-reported version, Cisco IOS XE is affected by a packet filtering bypass vulnerability. The vulnerability is due to improper traffic filtering conditions on an affected device. An unauthenticated, remote attacker could exploit this vulnerability by crafting a malicious TCP...
