Security Bulletin: IBM Sterling Connect:Direct Web Services is affected by PostgreSQL TOCTOU vulnerability

Summary IBM Sterling Connect:Direct Web Services uses PostgreSQL, PostgreSQL could allow a remote authenticated attacker to gain elevated privileges on the system, caused by a tme-of-check time-of-use TOCTOU race condition in pgdump. Vulnerability Details CVEID:CVE-2024-7348 DESCRIPTION: PostgreS...

Time-of-check Time-of-use (TOCTOU) Race Condition

NVIDIA Container Toolkit is vulnerable to Time-of-Check Time-of-Use TOCTOU Race Condition. The vulnerability is due to a TOCTOU flaw in the default configuration, where a specifically crafted container image may gain unauthorized access to the host file system. This can lead to code execution,...

CVE-2024-51563: Time-of-check Time-of-use (TOCTOU) Race Condition

The virtiovqrecordon function is subject to a time-of-check to time-of-use TOCTOU race condition...

CVE-2024-49046: Time-of-check Time-of-use (TOCTOU) Race Condition

Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability...

CVE-2024-43452: Time-of-check Time-of-use (TOCTOU) Race Condition

Windows Registry Elevation of Privilege Vulnerability...

CVE-2024-48322: Time-of-check Time-of-use (TOCTOU) Race Condition

UsersController.php in Run.codes 1.5.2 and older has a reset password race condition vulnerability...

CVE-2024-50220: Time-of-check Time-of-use (TOCTOU) Race Condition

In the Linux kernel, the following vulnerability has been resolved: fork: do not invoke uffd on fork if error occurs Patch series "fork: do not expose incomplete mm on fork". During fork we may place the virtual memory address space into an inconsistent state before the fork operation is complete...

CVE-2024-50234: Time-of-check Time-of-use (TOCTOU) Race Condition

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlegacy: Clear stale interrupts before resuming device iwl4965 fails upon resume from hibernation on my laptop. The reason seems to be a stale interrupt which isn't being cleared out before interrupts are enabled. We end u...

CVE-2024-50592: Time-of-check Time-of-use (TOCTOU) Race Condition

An attacker with local access the to medical office computer can escalate his Windows user privileges to "NT AUTHORITY\SYSTEM" by exploiting a race condition in the Elefant Update Service during the repair or update process. When using the repair function, the service queries the server for a lis...

GO-2024-3239 NVIDIA Container Toolkit contains a Time-of-check Time-of-Use (TOCTOU) vulnerability in github.com/NVIDIA/nvidia-container-toolkit

NVIDIA Container Toolkit contains a Time-of-check Time-of-Use TOCTOU vulnerability in github.com/NVIDIA/nvidia-container-toolkit...

CVE-2024-38407 Time-of-check Time-of-use (TOCTOU) Race Condition in Camera

Memory corruption while processing input parameters for any IOCTL call in the JPEG Encoder driver...

CVE-2024-38406 Time-of-check Time-of-use (TOCTOU) Race Condition in Camera

Memory corruption while handling IOCTL calls in JPEG Encoder driver...

CVE-2024-38406 Time-of-check Time-of-use (TOCTOU) Race Condition in Camera

Memory corruption while handling IOCTL calls in JPEG Encoder driver...

CVE-2024-38407: Time-of-check Time-of-use (TOCTOU) Race Condition

Memory corruption while processing input parameters for any IOCTL call in the JPEG Encoder driver...

CVE-2024-38406: Time-of-check Time-of-use (TOCTOU) Race Condition

Memory corruption while handling IOCTL calls in JPEG Encoder driver...

WS-2022-0329

etcd vulnerable to TOCTOU of gateway endpoint authentication...

NVIDIA Container Toolkit contains a Time-of-check Time-of-Use (TOCTOU) vulnerability

NVIDIA Container Toolkit 1.16.1 or earlier contains a Time-of-check Time-of-Use TOCTOU vulnerability when used with default configuration where a specifically crafted container image may gain access to the host file system. This does not impact use cases where CDI is used. A successful exploit of...

GHSA-MJJW-553X-87PQ NVIDIA Container Toolkit contains a Time-of-check Time-of-Use (TOCTOU) vulnerability

NVIDIA Container Toolkit 1.16.1 or earlier contains a Time-of-check Time-of-Use TOCTOU vulnerability when used with default configuration where a specifically crafted container image may gain access to the host file system. This does not impact use cases where CDI is used. A successful exploit of...

CVE-2024-49768: Time-of-check Time-of-use (TOCTOU) Race Condition

Waitress is a Web Server Gateway Interface server for Python 2 and 3. A remote client may send a request that is exactly recvbytes defaults to 8192 long, followed by a secondary request using HTTP pipelining. When request lookahead is disabled default we won't read any more requests, and when the...

NVIDIA Container Toolkit contains a Time-of-check Time-of-Use (TOCTOU) vulnerability

NVIDIA Container Toolkit 1.16.1 or earlier contains a Time-of-check Time-of-Use TOCTOU vulnerability when used with default configuration where a specifically crafted container image may gain access to the host file system. This does not impact use cases where CDI is used. A successful exploit of...