4465 matches found
GHSA-QPGC-W4MG-6V92 MLflow's excessive directory permissions allow local privilege escalation
Excessive directory permissions in MLflow leads to local privilege escalation when using sparkudf. This behavior can be exploited by a local attacker to gain elevated permissions by using a ToCToU attack. The issue is only relevant when the sparkudf MLflow API is called...
MLflow's excessive directory permissions allow local privilege escalation
Excessive directory permissions in MLflow leads to local privilege escalation when using sparkudf. This behavior can be exploited by a local attacker to gain elevated permissions by using a ToCToU attack. The issue is only relevant when the sparkudf MLflow API is called...
CVE-2024-27134
Excessive directory permissions in MLflow leads to local privilege escalation when using sparkudf. This behavior can be exploited by a local attacker to gain elevated permissions by using a ToCToU attack. The issue is only relevant when the sparkudf MLflow API is called...
PYSEC-2024-224
Excessive directory permissions in MLflow leads to local privilege escalation when using sparkudf. This behavior can be exploited by a local attacker to gain elevated permissions by using a ToCToU attack. The issue is only relevant when the sparkudf MLflow API is called...
CVE-2024-27134
Excessive directory permissions in MLflow leads to local privilege escalation when using sparkudf. This behavior can be exploited by a local attacker to gain elevated permissions by using a ToCToU attack. The issue is only relevant when the sparkudf MLflow API is called...
CVE-2024-27134 Excessive directory permissions in MLflow leads to local privilege escalation when using spark_udf
Excessive directory permissions in MLflow leads to local privilege escalation when using sparkudf. This behavior can be exploited by a local attacker to gain elevated permissions by using a ToCToU attack. The issue is only relevant when the sparkudf MLflow API is called...
CVE-2024-27134
CVE-2024-27134 : Multiple connected sources confirm a vulnerability in MLflow’s spark_udf API where excessive directory permissions allow a local attacker to achieve privilege escalation via a ToCToU attack. Affected: MLflow (spark_udf path) with local execution context. Root cause: insufficient ...
CVE-2024-27134 Excessive directory permissions in MLflow leads to local privilege escalation when using spark_udf
Excessive directory permissions in MLflow leads to local privilege escalation when using sparkudf. This behavior can be exploited by a local attacker to gain elevated permissions by using a ToCToU attack. The issue is only relevant when the sparkudf MLflow API is called...
CVE-2024-27134 Excessive directory permissions in MLflow leads to local privilege escalation when using spark_udf
Excessive directory permissions in MLflow leads to local privilege escalation when using sparkudf. This behavior can be exploited by a local attacker to gain elevated permissions by using a ToCToU attack. The issue is only relevant when the sparkudf MLflow API is called...
CVE-2024-27134: Time-of-check Time-of-use (TOCTOU) Race Condition
Excessive directory permissions in MLflow leads to local privilege escalation when using sparkudf. This behavior can be exploited by a local attacker to gain elevated permissions by using a ToCToU attack. The issue is only relevant when the sparkudf MLflow API is called...
Exploit for Race Condition in Apple Ipados
macOS LPE CVE-2023-32413 / ZDI-23-845 / Pwn2Own Vancouver 202...
CVE-2024-41779: Time-of-check Time-of-use (TOCTOU) Race Condition
IBM Engineering Systems Design Rhapsody - Model Manager 7.0.2 and 7.0.3 could allow a remote attacker to bypass security restrictions, caused by a race condition. By sending a specially crafted request, an attacker could exploit this vulnerability to remotely execute code...
WS-2023-0045
The removedirall crate is a Rust library that offers additional features over the Rust standard library fs::removedirall function. It suffers the same class of failure as the code it was layering over: TOCTOU race conditions, with the ability to cause arbitrary paths to be deleted by substituting...
CVE-2024-22185
CVE-2024-22185 is a time-of-check/time-of-use race condition in Intel ACTM (Alias Checking Trusted Module) potentially enabling local privilege escalation. The advisory and Red Hat/Intel sources indicate this affects certain Intel Xeon processor families and is mitigated through firmware updates ...
CVE-2024-22185: Time-of-check Time-of-use (TOCTOU) Race Condition
Time-of-check Time-of-use Race Condition in some IntelR processors with IntelR ACTM may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2024-51563
The virtiovqrecordon function is subject to a time-of-check to time-of-use TOCTOU race condition...
CVE-2024-51563 bhyve(8) virtio_vq_recordon time-of-check to time-of-use race
The virtiovqrecordon function is subject to a time-of-check to time-of-use TOCTOU race condition...
CVE-2024-51563
The FreeBSD operating system is affected by a time-of-check to time-of-use (TOCTOU) race condition within the bhyve hypervisor 's device models. Specifically, the virtio_vq_recordon function is subject to this race condition. A malicious guest virtual machine may exploit this vulnerability to per...