CVE-2023-1902 HCI Connection Creation Dangling State Reference Re-use

The bluetooth HCI host layer logic not clearing a global reference to a state pointer after handling connection events may allow a malicious HCI Controller to cause the use of a dangling reference in the host layer, leading to a crash DoS or potential RCE on the Host layer...

Zephyr 资源管理错误漏洞

Zephyr is an extensible real-time operating system RTOS open-sourced by the Zephyr Project. A resource management error vulnerability exists in Zephyr 3.3 and earlier versions that stems from not clearing global references to state pointers after processing connection events, which could allow a...

Malicious code in yandex-global-state-controller (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c1a6c4dba2b3e3c39b4ce832c2744f991230aee48e1a68f51b1dc4fd47dffb8a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-984 Malicious code in yandex-global-state-controller (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c1a6c4dba2b3e3c39b4ce832c2744f991230aee48e1a68f51b1dc4fd47dffb8a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Add reward token existence check in order to avoid user reward lost.

Lines of code Vulnerability details Impact The user can lost his rewards if the reward token is removed from the producerTokensproducerToken.rewardTokens list. If the reward token is removed, the rewardToken length is going to be zero, the user rewards going to be zero and the for statement will...

The setupExecution is reentrancy attack vulnerable

Lines of code Vulnerability details Impact The setupExecution can be re-entered by calling bulkExecute inside an execution. Because the global state remainingETH and isInternal are modified reset to 0 and flase after the latter reentrant call, the previous call is affected: 1. all subsequent...

Use of globalState.unlocked state change outside lock modifier allows for Re-entrancy which would cause huge loss to pool

Lines of code Vulnerability details I guess I can put this into one report since the issue affects two seperate functions in a contract. Impact The functions AlgebraPool.swap and AlgebraPool.swapSupportingFeeOnInputTokens attempt to not use the lock modifier to update the globalState.unlocked sta...

GSD-2022-1005877 drm/msm/mdp5: Fix global state lock backoff

drm/msm/mdp5: Fix global state lock backoff This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.137 by commit...

PT-2022-33886 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.15.46 through v5.15.60 Description: The issue is related to the global state lock backoff in the drm/msm/mdp5 component. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

GSD-2022-1005289 drm/msm/mdp5: Fix global state lock backoff

drm/msm/mdp5: Fix global state lock backoff This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

openSUSE Security Update : postgresql (openSUSE-SU-2010:0903-1)

PostgreSQL functions implemented in Perl or TCL shared a global state even across different user user ids. A user could therefore influence functions of other users in an unexpected or even malicious way CVE-2010-3433. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

openSUSE Security Update : postgresql (openSUSE-SU-2010:0903-1)

PostgreSQL functions implemented in Perl or TCL shared a global state even across different user user ids. A user could therefore influence functions of other users in an unexpected or even malicious way CVE-2010-3433. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

SuSE 10 Security Update : PostgreSQL (ZYPP Patch Number 7186)

PostgreSQL functions implemented in Perl or TCL shared a global state even across different user user ids. A user could therefore influence functions of other users in an unexpected or even malicious way. CVE-2010-3433 PostgreSQL was updated to version 8.1.22 which fixes the security issue...