Linux kernel 竞争条件问题漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. The Linux kernel has a security vulnerability that stems from the presence of a contention issue, which can be exploited by an attacker to cause a denial of service...

Web applications and Project Loom

Introduction Project Loom aims to bring "easy-to-use, high-throughput, lightweight concurrency" to the JRE. One feature introduced by Project Loom is virtual threads. In this blog post, we'll be exploring what virtual threads mean for web applications using some simple web applications deployed o...

SUSE CVE-2018-5407

Simultaneous Multi-threading SMT in processors can enable local users to exploit software vulnerable to timing attacks via a side-channel timing attack on 'port contention'...

Qualcomm 芯片资源管理错误漏洞

A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way of miniaturizing circuits mainly semiconductor devices, but also passive components, etc., and is often fabricated on the surface of semiconductor wafers. A security vulnerability exists in the Qualcomm chip bt driver, which stems fr...

Linux kernel 资源管理错误漏洞

Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. A security vulnerability exists in the Linux Kernel that originates in the iouring/poll.c file in its iouring subcomponent's iopollcheckevents where a post-release reuse due to a contention condition in...

ISC BIND 安全漏洞

ISC BIND is a suite of open source software that implements the DNS protocol from the American company ISC. A security vulnerability exists in BIND versions 9.16.0 through 9.16.36, 9.18.0 through 9.18.10, and 9.19.0 through 9.19.8, which stems from the fact that if the resolver receives a lot of...

oznetmaster SSharpSmartThreadPool 竞争条件问题漏洞

SSharpSmartThreadPool is a secondary wrapper component for ThreadPool by oznetmaster Personal Developer. The oznetmaster SSharpSmartThreadPool is vulnerable to a contention condition issue. An attacker exploits this vulnerability to cause two threads to rely on the order or timing of the appearan...

Mozilla Firefox Competition Condition Issue Vulnerability (CNVD-2023-06511)

Mozilla Firefox is an open source Web browser from the Mozilla Foundation in the U.S. Mozilla Firefox is vulnerable to a contention issue that could be exploited by an attacker to gain root privileges and execute arbitrary code to gain privilege escalation...

GoBase 竞争条件问题漏洞

GoBase is a set of commonly used utilities by Nathan Bosscher Personal Developer. A security vulnerability exists in GoBase that stems from a contention condition that could lead to incorrect routing of HTTP requests...

ARM Mali GPU Driver Competitive Conditions Vulnerability

ARM Mali GPU Driver is an email driver from ARM UK. A competitive condition vulnerability exists in ARM Mali GPU Driver version 2022-06-29 and earlier, which stems from TOCTOU having a competitive condition that allows an unprivileged user to perform an incorrect GPU processing operation to acces...

Grafana Competition Conditions Vulnerability

Grafana is a Grafana open source set of open source monitoring tools that provide a visual monitoring interface. The tool is mainly used to monitor and analyze Graphite, InfluxDB and Prometheus, etc. Grafana has a contention condition vulnerability that stems from the inclusion of a contention...

Grafana 竞争条件问题漏洞

Grafana is a Grafana open source set of open source monitoring tools that provide a visual monitoring interface. The tool is mainly used to monitor and analyze Graphite, InfluxDB and Prometheus, etc. Grafana has a contention condition vulnerability that stems from the inclusion of a contention...

xnio: org.xnio.StreamConnection.notifyReadClosed log to debug instead of stderr

A flaw was found in XNIO, specifically in the notifyReadClosed method. The issue revealed this method was logging a message to another expected end. This flaw allows an attacker to send flawed requests to a server, possibly causing log contention-related performance concerns or an unwanted disk...

xnio: org.xnio.StreamConnection.notifyReadClosed log to debug instead of stderr

A flaw was found in XNIO, specifically in the notifyReadClosed method. The issue revealed this method was logging a message to another expected end. This flaw allows an attacker to send flawed requests to a server, possibly causing log contention-related performance concerns or an unwanted disk...

xnio: org.xnio.StreamConnection.notifyReadClosed log to debug instead of stderr

A flaw was found in XNIO, specifically in the notifyReadClosed method. The issue revealed this method was logging a message to another expected end. This flaw allows an attacker to send flawed requests to a server, possibly causing log contention-related performance concerns or an unwanted disk...

Linux kernel cm4000_cs.c competition condition vulnerability

Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. Linux kernel 6.0.6 and earlier versions have a contention condition vulnerability that originates in drivers/char/pcmcia/cm4000cs.c when calling open if cmmopen and cm4000detach, an attacker can exploit...

Linux kernel contention condition vulnerability (CNVD-2022-74084)

Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. Linux kernel 6.0.6 and earlier versions have a contention condition vulnerability that originates in drivers/char/pcmcia/scr24xcs.c when calling open if scr24x open and scr24xremove, an attacker can...

Linux kernel 竞争条件问题漏洞

Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. Linux kernel 6.0.6 and earlier versions have a contention condition vulnerability that originates in drivers/char/pcmcia/cm4000cs.c when calling open if cmmopen and cm4000detach, an attacker can exploit...

Linux kernel 竞争条件问题漏洞

Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. Linux kernel 6.0.6 and earlier versions have a contention condition vulnerability that originates in drivers/char/pcmcia/scr24xcs.c when calling open if scr24x open and scr24xremove, an attacker can...

Mozilla Firefox 竞争条件问题漏洞

Mozilla Firefox is an open source Web browser from the Mozilla Foundation in the U.S. Mozilla Firefox is vulnerable to a contention issue that could be exploited by an attacker to gain root privileges and execute arbitrary code to gain privilege escalation...