Lucene search
+L

1065 matches found

NVD
NVD
•added 2018/11/06 5:29 p.m.•41 views

CVE-2018-9415

In driveroverridestore and driveroverrideshow of bus.c, there is a possible double free due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel...

7.8CVSS7.6AI score0.00254EPSS
SaveExploits0References4
NVD
NVD
•added 2018/11/06 5:29 p.m.•27 views

CVE-2018-9422

In getfutexkey of futex.c, there is a use-after-free due to improper locking. This could lead to local escalation of privilege with no additional privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-74250718 References: Upstre...

7.8CVSS7.2AI score0.00216EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2018/11/06 5:00 p.m.•46 views

CVE-2018-9415

In driveroverridestore and driveroverrideshow of bus.c, there is a possible double free due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel...

7.1AI score0.00254EPSS
SaveExploits0References4
CVE
CVE
•added 2018/11/06 5:00 p.m.•125 views

CVE-2018-9415

CVE-2018-9415 affects the Android kernel’s bus.c, specifically in driver_override_store and driver_override_show, where a double free can occur due to improper locking. This can enable local escalation of privilege to SYSTEM without user interaction. The vulnerability follows from upstream kernel...

7.8CVSS7.4AI score0.00254EPSS
SaveExploits0References4Affected Software1
Debian CVE
Debian CVE
•added 2018/11/06 5:00 p.m.•78 views

CVE-2018-9415

In driveroverridestore and driveroverrideshow of bus.c, there is a possible double free due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel...

7.8CVSS7.8AI score0.00254EPSS
SaveExploits0
OSV
OSV
•added 2018/10/02 7:29 p.m.•20 views

CVE-2018-9476

In avrcparsbrowsingcmd of avrcparstg.cc, there is a possible use-after-free due to improper locking. This could lead to remote escalation of privilege in the Bluetooth service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Version...

9.8CVSS5.9AI score0.02478EPSS
SaveExploits0References3
NVD
NVD
•added 2018/10/02 7:29 p.m.•38 views

CVE-2018-9476

In avrcparsbrowsingcmd of avrcparstg.cc, there is a possible use-after-free due to improper locking. This could lead to remote escalation of privilege in the Bluetooth service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Version...

10CVSS9AI score0.02478EPSS
SaveExploits0References3
Prion
Prion
•added 2018/10/02 7:29 p.m.•24 views

Design/Logic Flaw

In avrcparsbrowsingcmd of avrcparstg.cc, there is a possible use-after-free due to improper locking. This could lead to remote escalation of privilege in the Bluetooth service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Version...

10CVSS8.8AI score0.02478EPSS
SaveExploits0References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/10/02 12:00 a.m.•3 views

CVE-2018-9515: Improper Restriction of Operations within the Bounds of a Memory Buffer

In sdcardfscreate and sdcardfsmkdir of inode.c, there is a possible memory corruption due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kerne...

7.8CVSS7.6AI score0.00712EPSS
SaveExploits3References2
android
android
•added 2018/10/01 12:00 a.m.•46 views

CVE-2018-9476

In avrcparsbrowsingcmd of avrcparstg.cc, there is a possible use-after-free due to improper locking. This could lead to remote escalation of privilege in the Bluetooth service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Version...

10CVSS7.2AI score0.02478EPSS
SaveExploits0References4Affected Software1
UbuntuCve
UbuntuCve
•added 2018/07/03 12:00 a.m.•44 views

CVE-2018-9415

In driveroverridestore and driveroverrideshow of bus.c, there is a possible double free due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel...

7.8CVSS7.3AI score0.00254EPSS
SaveExploits0References8
Prion
Prion
•added 2017/05/09 9:29 p.m.•34 views

Design/Logic Flaw

All versions of the NVIDIA GPU Display Driver contain a vulnerability in the kernel mode layer handler for DxgDdiEscape where due to improper locking on certain conditions may lead to a denial of service...

4.9CVSS5.3AI score0.00278EPSS
SaveExploits0References1
NVD
NVD
•added 2017/05/09 9:29 p.m.•30 views

CVE-2017-0353

All versions of the NVIDIA GPU Display Driver contain a vulnerability in the kernel mode layer handler for DxgDdiEscape where due to improper locking on certain conditions may lead to a denial of service...

5.5CVSS5.3AI score0.00278EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/05/09 12:00 a.m.•7 views

CVE-2017-0353: Improper Input Validation

All versions of the NVIDIA GPU Display Driver contain a vulnerability in the kernel mode layer handler for DxgDdiEscape where due to improper locking on certain conditions may lead to a denial of service...

5.5CVSS5.8AI score0.00278EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2017/05/09 12:00 a.m.•1 views

PT-2017-10543

Name of the Vulnerable Software and Affected Versions NVIDIA GPU Display Driver affected versions not specified Description The issue is related to a vulnerability in the kernel mode layer handler for DxgDdiEscape. Due to improper locking under certain conditions, this may lead to a denial of...

5.5CVSS0.00278EPSS
SaveExploits0References2
OSV
OSV
•added 2012/12/13 11:53 a.m.•16 views

CVE-2012-5514

The guestphysmapmarkpopulateondemand function in Xen 4.2 and earlier does not properly unlock the subject GFNs when checking if they are in use, which allows local guest HVM administrators to cause a denial of service hang via unspecified vectors...

6AI score
SaveExploits0References19
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2010/11/20 12:00 a.m.•6 views

CVE-2010-4210: Improper Locking

The pfsgetextattr function in FreeBSD 7.x before 7.3-RELEASE and 8.x before 8.0-RC1 unlocks a mutex that was not previously locked, which allows local users to cause a denial of service kernel panic, overwrite arbitrary memory locations, and possibly execute arbitrary code via vectors related to...

7.8CVSS6.4AI score0.01133EPSS
SaveExploits3References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/08/19 12:00 a.m.•5 views

CVE-2009-2857: Improper Locking

The kernel in Sun Solaris 8, 9, and 10, and OpenSolaris before snv103, does not properly handle interaction between the filesystem and virtual-memory implementations, which allows local users to cause a denial of service deadlock and system halt via vectors involving mmap and write operations on...

5.5CVSS5.9AI score0.00265EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/04/06 12:00 a.m.•7 views

CVE-2009-1243: Improper Locking

net/ipv4/udp.c in the Linux kernel before 2.6.29.1 performs an unlocking step in certain incorrect circumstances, which allows local users to cause a denial of service panic by reading zero bytes from the /proc/net/udp file and unspecified other files, related to the "udp seqfile infrastructure."...

5.5CVSS6AI score0.00267EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/03/18 12:00 a.m.•8 views

CVE-2009-0935: Improper Locking

The inotifyread function in the Linux kernel 2.6.27 to 2.6.27.13, 2.6.28 to 2.6.28.2, and 2.6.29-rc3 allows local users to cause a denial of service OOPS via a read with an invalid address to an inotify instance, which causes the device's event list mutex to be unlocked twice and prevents proper...

5.5CVSS5.9AI score0.0027EPSS
SaveExploits1References2
Rows per page
Query Builder