ESP-IDF 安全漏洞

ESP-IDF is an open source development framework for Espressif SoCs supported on Windows, Linux and macOS by Espressif Systems. ESP-IDF has a security vulnerability that stems from the presence of a TOCTOU vulnerability. The vulnerability allows an attacker with physical access to the device's fla...

PT-2024-10972 · Openeuler · Openeuler Isulad

Name of the Vulnerable Software and Affected Versions: openEuler iSulad version 2.0.18-13 openEuler iSulad versions 2.1.4-1 through 2.1.4-2 Description: The issue is a Time-of-check Time-of-use TOCTOU Race Condition vulnerability in openEuler iSulad on Linux, allowing the leveraging of...

CVE-2023-32282: Time-of-check Time-of-use (TOCTOU) Race Condition

Race condition in BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-0163

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain a TOCTOU race condition vulnerability. A local low privileged attacker could potentially exploit this vulnerability to gain access to otherwise unauthorized resources...

CVE-2024-0163

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain a TOCTOU race condition vulnerability. A local low privileged attacker could potentially exploit this vulnerability to gain access to otherwise unauthorized resources...

Race condition

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain a TOCTOU race condition vulnerability. A local low privileged attacker could potentially exploit this vulnerability to gain access to otherwise unauthorized resources...

CVE-2024-0163

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain a TOCTOU race condition vulnerability. A local low privileged attacker could potentially exploit this vulnerability to gain access to otherwise unauthorized resources...

CVE-2024-0163

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS are affected by a TOCTOU race condition in BIOS microcode. The vulnerability allows a local low-privileged attacker to access restricted resources due to a TOCTOU flaw. Affected products: Dell PowerEdge Server BIOS; Dell Precision Rack BIOS....

CVE-2024-0163

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain a TOCTOU race condition vulnerability. A local low privileged attacker could potentially exploit this vulnerability to gain access to otherwise unauthorized resources...

CVE-2024-0163: Time-of-check Time-of-use (TOCTOU) Race Condition

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain a TOCTOU race condition vulnerability. A local low privileged attacker could potentially exploit this vulnerability to gain access to otherwise unauthorized resources...

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS Security Vulnerability

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS are both products of Dell, Inc.Dell PowerEdge Server BIOS is a system update driver from Dell.Dell Precision Rack BIOS is a Dell Precision Rack BIOS is a BIOS utility for high-performance workstation products. A security vulnerability exists...

CVE-2024-24692: Time-of-check Time-of-use (TOCTOU) Race Condition

Race condition in the installer for Zoom Rooms Client for Windows before version 5.17.5 may allow an authenticated user to conduct a denial of service via local access...

CVE-2024-21433: Time-of-check Time-of-use (TOCTOU) Race Condition

Windows Print Spooler Elevation of Privilege Vulnerability...

PT-2024-2312 · Dell · Dell Precision Rack Bios +1

Name of the Vulnerable Software and Affected Versions: Dell PowerEdge Server BIOS affected versions not specified Dell Precision Rack BIOS affected versions not specified Description: The issue is related to a Time-of-check Time-of-use TOCTOU Race Condition in the BIOS microcode of Dell PowerEdge...

CVE-2024-27297: Time-of-check Time-of-use (TOCTOU) Race Condition

Nix is a package manager for Linux and other Unix systems. A fixed-output derivations on Linux can send file descriptors to files in the Nix store to another program running on the host or another fixed-output derivation via Unix domain sockets in the abstract namespace. This allows to modify the...

BIT-WORDPRESS-2022-3590 WP <= 6.1.1 - Unauthenticated Blind SSRF via DNS Rebinding

WordPress is affected by an unauthenticated blind SSRF in the pingback feature. Because of a TOCTOU race condition between the validation checks and the HTTP request, attackers can reach internal hosts that are explicitly forbidden...

BIT-JENKINS-2021-21615

Jenkins LTS 2.263.2 allows reading arbitrary files using the file browser for workspaces and archived artifacts due to a time-of-check to time-of-use TOCTOU race condition...

openSUSE: Security Advisory for curl (SUSE-SU-2023:2891-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-52556: Time-of-check Time-of-use (TOCTOU) Race Condition

In OpenBSD 7.4 before errata 009, a race condition between pf4's processing of packets and expiration of packet states may cause a kernel panic...

CVE-2023-52478

In the Linux kernel, the following vulnerability has been resolved: HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect hidppconnectevent has four time-of-check vs time-of-use TOCTOU races when it races with itself. hidppconnectevent primarily runs from a workqueue but it also runs o...