Lucene search
+L

703 matches found

Prion
Prion
added 2023/10/02 3:15 a.m.30 views

Double free

In rpmb , there is a possible double free due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07912966; Issue ID: ALPS07912961...

4CVSS6.7AI score0.00085EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2023/10/02 2:5 a.m.22 views

CVE-2023-32824

In rpmb , there is a possible double free due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07912966; Issue ID: ALPS07912961...

6.9AI score0.00085EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2023/10/02 12:0 a.m.7 views

PT-2023-24055 · Rpmb · Rpmb

Name of the Vulnerable Software and Affected Versions: rpmb affected versions not specified Description: The issue is related to a possible double free due to improper locking in rpmb, which could lead to local escalation of privilege. System execution privileges are needed for exploitation, and...

6.7CVSS7.1AI score0.00085EPSS
Exploits0References4
CNNVD
CNNVD
added 2023/10/02 12:0 a.m.6 views

MediaTek Chip Resource Management Error Vulnerability

MediaTek chips are a variety of chips from MediaTek, a company owned by MediaTek of China. A resource management error vulnerability exists in the MediaTek chips, which stems from an improper locking of the rpmb module, which may result in a double release...

6.7CVSS6.8AI score0.00085EPSS
Exploits0References2
OSV
OSV
added 2023/10/01 12:0 a.m.10 views

PUB-A-289470723

In gxpmappingput, there is a possible use-after-free write due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS7.1AI score0.00073EPSS
Exploits0References1
OSV
OSV
added 2023/08/14 3:35 p.m.14 views

SUSE-SU-2023:3313-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-40982: Fixed transient execution attack called 'Gather Data Sampling' bsc1206418. - CVE-2023-0459: Fixed information leak in uaccessbeginnospec...

7.8CVSS8.1AI score0.06657EPSS
Exploits4References47
OSV
OSV
added 2023/08/14 2:23 p.m.8 views

SUSE-SU-2023:3311-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-40982: Fixed transient execution attack called 'Gather Data Sampling' bsc1206418. - CVE-2023-0459: Fixed information leak in uaccessbeginnospec...

7.8CVSS8.1AI score0.06657EPSS
Exploits4References58
NVD
NVD
added 2023/07/24 4:15 p.m.27 views

CVE-2023-33951

A race condition vulnerability was found in the vmwgfx driver in the Linux kernel. The flaw exists within the handling of GEM objects. The issue results from improper locking when performing operations on an object. This flaw allows a local privileged user to disclose information in the context o...

6.7CVSS6.5AI score0.00343EPSS
Exploits0References9
OSV
OSV
added 2023/07/24 4:15 p.m.13 views

AZL-27761 CVE-2023-33951 affecting package kernel for versions less than 5.15.135.1-2

A race condition vulnerability was found in the vmwgfx driver in the Linux kernel. The flaw exists within the handling of GEM objects. The issue results from improper locking when performing operations on an object. This flaw allows a local privileged user to disclose information in the context o...

5.3CVSS6.6AI score0.00343EPSS
Exploits0References1
OSV
OSV
added 2023/07/24 4:15 p.m.4 views

DEBIAN-CVE-2023-33951

A race condition vulnerability was found in the vmwgfx driver in the Linux kernel. The flaw exists within the handling of GEM objects. The issue results from improper locking when performing operations on an object. This flaw allows a local privileged user to disclose information in the context o...

5.3CVSS6.5AI score0.00343EPSS
Exploits0References1
OSV
OSV
added 2023/07/24 4:15 p.m.23 views

AZL-27637 CVE-2023-33951 affecting package hyperv-daemons for versions less than 5.15.158.1-1

A race condition vulnerability was found in the vmwgfx driver in the Linux kernel. The flaw exists within the handling of GEM objects. The issue results from improper locking when performing operations on an object. This flaw allows a local privileged user to disclose information in the context o...

5.3CVSS6.6AI score0.00343EPSS
Exploits0References1
Prion
Prion
added 2023/07/24 4:15 p.m.39 views

Race condition

A race condition vulnerability was found in the vmwgfx driver in the Linux kernel. The flaw exists within the handling of GEM objects. The issue results from improper locking when performing operations on an object. This flaw allows a local privileged user to disclose information in the context o...

0.8CVSS5.5AI score0.00343EPSS
Exploits0References6Affected Software4
UbuntuCve
UbuntuCve
added 2023/07/24 4:15 p.m.46 views

CVE-2023-33951

A race condition vulnerability was found in the vmwgfx driver in the Linux kernel. The flaw exists within the handling of GEM objects. The issue results from improper locking when performing operations on an object. This flaw allows a local privileged user to disclose information in the context o...

6.7CVSS6.7AI score0.00343EPSS
Exploits0References3
OSV
OSV
added 2023/07/24 4:15 p.m.19 views

UBUNTU-CVE-2023-33951

A race condition vulnerability was found in the vmwgfx driver in the Linux kernel. The flaw exists within the handling of GEM objects. The issue results from improper locking when performing operations on an object. This flaw allows a local privileged user to disclose information in the context o...

6.7CVSS6.6AI score0.00343EPSS
Exploits0References4
Cvelist
Cvelist
added 2023/07/24 3:19 p.m.51 views

CVE-2023-33951 Kernel: vmwgfx: race condition leading to information disclosure vulnerability

A race condition vulnerability was found in the vmwgfx driver in the Linux kernel. The flaw exists within the handling of GEM objects. The issue results from improper locking when performing operations on an object. This flaw allows a local privileged user to disclose information in the context o...

6.7CVSS6.7AI score0.00343EPSS
Exploits0References9
Debian CVE
Debian CVE
added 2023/07/24 3:19 p.m.36 views

CVE-2023-33951

A race condition vulnerability was found in the vmwgfx driver in the Linux kernel. The flaw exists within the handling of GEM objects. The issue results from improper locking when performing operations on an object. This flaw allows a local privileged user to disclose information in the context o...

6.7CVSS7.1AI score0.00343EPSS
Exploits0
Vulnrichment
Vulnrichment
added 2023/07/24 3:19 p.m.10 views

CVE-2023-3750 Libvirt: improper locking in virstoragepoolobjlistsearch may lead to denial of service

A flaw was found in libvirt. The virStoragePoolObjListSearch function does not return a locked pool as expected, resulting in a race condition and denial of service when attempting to lock the same object from another thread. This issue could allow clients connecting to the read-only socket to...

6.5CVSS6.5AI score0.00753EPSS
Exploits0References3
Cvelist
Cvelist
added 2023/07/24 3:19 p.m.24 views

CVE-2023-3750 Libvirt: improper locking in virstoragepoolobjlistsearch may lead to denial of service

A flaw was found in libvirt. The virStoragePoolObjListSearch function does not return a locked pool as expected, resulting in a race condition and denial of service when attempting to lock the same object from another thread. This issue could allow clients connecting to the read-only socket to...

6.5CVSS6.6AI score0.00753EPSS
Exploits0References3
CNNVD
CNNVD
added 2023/07/20 12:0 a.m.2 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a lack of proper locking when an object performs an operation, which can be exploited by an attacker to...

6.7CVSS6.7AI score0.00343EPSS
Exploits0References5
SUSE CVE
SUSE CVE
added 2023/07/14 2:4 a.m.5 views

SUSE CVE-2023-21400

In multiple functions of iouring.c, there is a possible kernel memory corruption due to improper locking. This could lead to local escalation of privilege in the kernel with System execution privileges needed. User interaction is not needed for exploitation...

6.7CVSS7.3AI score0.00261EPSS
Exploits1References20
Rows per page
Query Builder