617 matches found
Mozilla Firefox ESR 资源管理错误漏洞
Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox ESR prior to version 102.2, which stems from a possible data contention issue in the PK11ChangePW function that can lead to reuse after release, and i...
AMD CPU Information Disclosure Vulnerability (AMD-SB-1039, SQUIP)
The AMD CPU on the remote host might be prone to an information disclosure vulnerability dubbed Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
CVE-2021-46778
Execution unit scheduler contention may lead to a side channel vulnerability found on AMD CPU microarchitectures codenamed “Zen 1”, “Zen 2” and “Zen 3” that use simultaneous multithreading SMT. By measuring the contention level on scheduler queues an attacker may potentially leak sensitive...
CVE-2021-46778
A contention-based side channel vulnerability was found in hw. Some AMD CPUs using simultaneous multithreading SMT may allow an attacker to measure the contention level on scheduler queues, leading to potential leakage of sensitive information...
CVE-2021-46778
Execution unit scheduler contention may lead to a side channel vulnerability found on AMD CPU microarchitectures codenamed “Zen 1”, “Zen 2” and “Zen 3” that use simultaneous multithreading SMT. By measuring the contention level on scheduler queues an attacker may potentially leak sensitive...
Samsung score drive competition condition loophole
Samsung score drive is a driver for Samsung mobile devices. samsung score drive is vulnerable to a contention condition. The vulnerability stems from the lack of proper synchronization points and can be exploited by attackers to perform malicious operations...
October CMS Competitive Conditions Issue Vulnerability
October CMS is an open source content management system CMS based on PHP and Laravel web application framework. October CMS suffers from a Competing Conditions Issue vulnerability. The vulnerability stems from improper handling of concurrent access when concurrent code requires mutually exclusive...
SAMSUNG Mobile devices score driver 安全漏洞
Samsung score drive is a driver for Samsung mobile devices. samsung score drive is vulnerable to a contention condition. The vulnerability stems from the lack of proper synchronization points and can be exploited by attackers to perform malicious operations...
Atlassian Jira 8.14.x < 8.20.5 Cross-Site Request Forgery
According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is prior to 8.13.16 or 8.14.x prior to 8.20.5. It is, therefore, affected by a vulnerability allowing unauthenticated remote attackers to toggle the Thread Contention and CPU monitoring...
xnio: org.xnio.StreamConnection.notifyReadClosed log to debug instead of stderr
A flaw was found in XNIO, specifically in the notifyReadClosed method. The issue revealed this method was logging a message to another expected end. This flaw allows an attacker to send flawed requests to a server, possibly causing log contention-related performance concerns or an unwanted disk...
Google Android 竞争条件问题漏洞
Google Android is a Linux-based open source operating system from Google. A security vulnerability exists in Google Android, which originates from concurrent execution of shared resources in the TEEI driver using incorrect synchronization contention condition. MT6879, MT6885, MT6893, MT6895,...
Denial Of Service (DoS)
eap is vulnerable to denial of service. The vulnerability exists due to a flaw found in XNIO, specifically in the notifyReadClosed method allowing an attacker to crash the system via a flawed requests sent to a server, possibly causing log contention-related performance concerns or an unwanted di...
Google Android Competition Condition Issue Vulnerability (CNVD-2022-52276)
Google Android is a Linux-based open source operating system from Google, Inc. Google Android is vulnerable to a contention condition issue that originates in locksocknested in sock.c. Due to the contention condition, it is possible to use it after free, and an attacker could exploit the...
CVE-2022-31751
The kernel emcom module has multi-thread contention. Successful exploitation of this vulnerability may affect system availability...
CVE-2022-31751
The kernel emcom module has multi-thread contention. Successful exploitation of this vulnerability may affect system availability...
CVE-2022-31751
The kernel emcom module has multi-thread contention. Successful exploitation of this vulnerability may affect system availability...
Design/Logic Flaw
The kernel emcom module has multi-thread contention. Successful exploitation of this vulnerability may affect system availability...
CVE-2022-31751
The kernel emcom module has multi-thread contention. Successful exploitation of this vulnerability may affect system availability...
CVE-2022-31751
The CVE-2022-31751 entry concerns a multi-thread contention issue in the kernel emcom module, with availability impact. Connected documents consistently identify HarmonyOS (notably HarmonyOS 2.0) as the affected platform and attribute the problem to resource contention in the kernel emcom module,...
PT-2022-20902 · Unknown · Kernel Emcom Module
Name of the Vulnerable Software and Affected Versions: kernel emcom module affected versions not specified Description: The issue is related to multi-thread contention in the kernel emcom module. Successful exploitation of this issue may affect system availability. Recommendations: At the moment,...