3606 matches found
GHSA-9J94-67JR-4CQJ Rack session gets restored after deletion
Summary When using the Rack::Session::Pool middleware, simultaneous rack requests can restore a deleted rack session, which allows the unauthenticated user to occupy that session. Details Rack session middleware prepares the session at the beginning of request, then saves is back to the store wit...
CVE-2024-45562
Memory corruption during concurrent access to server info object due to unprotected critical field...
CVE-2024-45564
Memory corruption during concurrent access to server info object due to incorrect reference count update...
DEBIAN-CVE-2025-37800
In the Linux kernel, the following vulnerability has been resolved: driver core: fix potential NULL pointer dereference in devuevent If userspace reads "uevent" device attribute at the same time as another threads unbinds the device from its driver, change to dev-driver from a valid pointer to NU...
UBUNTU-CVE-2025-37800
In the Linux kernel, the following vulnerability has been resolved: driver core: fix potential NULL pointer dereference in devuevent If userspace reads "uevent" device attribute at the same time as another threads unbinds the device from its driver, change to dev-driver from a valid pointer to NU...
PT-2025-20329
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A potential NULL pointer dereference in the dev uevent function has been resolved. This issue occurs when userspace reads the "uevent" device attribute at the same time as another thread...
Configure a Proper Number of Concurrent Unauthenticated SSH Connections
Without knowing the password, an attacker can set up a large number of concurrent connections that have not been authenticated to consume system resources. The number of concurrent unauthenticated SSH connections is not configured in openEuler by default. You are advised to configure the upper...
Configure a Proper Number of Concurrent Sessions Allowed for a Single SSH Connection
SSH allows a client that supports multiplexing to establish multiple sessions based on a network connection. MaxSessions limits the number of concurrent SSH sessions that can be established for each network connection. This prevents system resources from being occupied by a single connection or a...
CVE-2025-47545: Concurrent Execution using Shared Resource with Improper Synchronization
Concurrent Execution using Shared Resource with Improper Synchronization 'Race Condition' vulnerability in Ays Pro Poll Maker poll-maker allows Leveraging Race Conditions.This issue affects Poll Maker: from n/a through = 5.7.7...
CVE-2024-45564
Memory corruption during concurrent access to server info object due to incorrect reference count update...
CVE-2024-45566
Memory corruption during concurrent buffer access due to modification of the reference count...
CVE-2024-45564
Memory corruption during concurrent access to server info object due to incorrect reference count update...
CVE-2024-45562
Memory corruption during concurrent access to server info object due to unprotected critical field...
CVE-2024-45554
Memory corruption during concurrent SSR execution due to race condition on the global maps list...
CVE-2024-45562 Use After Free in HLOS
Memory corruption during concurrent access to server info object due to unprotected critical field...
CVE-2024-45562 Use After Free in HLOS
Memory corruption during concurrent access to server info object due to unprotected critical field...
CVE-2024-45562
CVE-2024-45562 describes memory corruption during concurrent access to a server info object caused by an unprotected critical field. Sources (NVD, Red Hat, CVE List, CNNVD, VulnEnrichment) confirm the issue and its consistency across feeds. CVSS v3.1 base scores indicate high impact for confident...
CVE-2024-45554 Use After Free in DSP Service
Memory corruption during concurrent SSR execution due to race condition on the global maps list...
CVE-2024-45554
CVE-2024-45554 is referenced in the Pixel Watch security bulletin as a kernel vulnerability affecting Qualcomm components, labeled as a memory corruption issue occurring during concurrent SSR due to a race on the global maps list. The bulletin lists it under Qualcomm kernel issues and notes that ...