Denial Of Service (DoS)

Microsoft.AspNetCore.App.Runtime is vulnerable to Denial of Service DoS. The vulnerability is caused by a deadlock that occurs within the .NET Kestrel web server, specifically impacting the handling of concurrent requests under certain conditions, which allows an attacker to potentially disrupt...

The vulnerability of the `btrfs_use_block_rsv()` function in the `fs/btrfs/block-rsv.c` file of the Linux kernel’s file system allows a malicious actor to cause a service failure.

The vulnerability of the btrfsuseblockrsv function in the fs/btrfs/block-rsv.c file of the btrfs file system in the Linux kernel is related to concurrent resource access race condition. Exploiting this vulnerability could allow a attacker to cause service failures...

The vulnerability of the binder_alloc_free_page() function in the drivers/android/binder_alloc.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the binderallocfreepage function in the drivers/android/binderalloc.c driver of the Linux operating system’s drivers/android/binder kernel is related to the use of memory after it is freed due to concurrent access to resources race condition. Exploiting this vulnerability cou...

The vulnerability of the `bnx2x_set_fw_mac_addr()` function in the `drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.h` file of the Broadcom NetXtremeII 10Gb driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the bnx2xsetfwmacaddr function in the drivers/net/ethernet/broadcom/bnx2x/bnx2xcmn.h file of the Broadcom NetXtremeII 10Gb driver for the Linux operating system is related to the reallocation of previously freed memory due to concurrent access to resources. Exploiting this...

The vulnerability of the free_swap_and_cache() function in the mm/swapfile.c module of the Linux kernel’s memory management subsystem allows a hacker to trigger a service failure.

The vulnerability of the freeswapandcache function in the mm/swapfile.c file, a memory management subsystem of the Linux kernel, is related to concurrent access to resources. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the pmic_glink_altmode_probe() function in the driver drivers/soc/qcom/pmic_glink_altmode.c of the Qualcomm PMIC GLINK kernel for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the pmicglinkaltmodeprobe function in the driver drivers/soc/qcom/pmicglinkaltmode.c of the Qualcomm PMIC GLINK driver for the Linux operating system is related to the reallocation of previously freed memory due to concurrent access to resources. Exploiting this vulnerability...

The vulnerability of the __i915_vma_active() function in the drivers/gpu/drm/i915/i915_vma.c file of the Intel graphics adapter driver for Linux-based systems can be exploited by attackers to cause service interruptions.

The vulnerability of the i915vmaactive function in the drivers/gpu/drm/i915/i915vma.c file of the Intel 8xx/9xx/G3x/G4x/HD graphics controller driver for the Linux operating system is related to the reallocation of previously freed memory due to concurrent access to resources. Exploiting this...

The vulnerabilities of the functions pdsc_process_adminq() and pdsc_adminq_isr() in the driver drivers.net/ethernet/amd/pds_core/adminq.c of the AMD network adapter driver for the Linux operating system allow a attacker to cause a service failure.

The vulnerability of the functions pdscprocessadminq and pdscadminqisr in the drivers/net/ethernet/amd/pdscore/adminq.c file of the AMD network adapter driver for the Linux operating system is related to the swapping of a zero pointer due to concurrent access to resources. Exploiting this...

Karma 安全漏洞

Karma is a simple tool. Allows execution of JavaScript code in multiple real browsers. A security vulnerability exists in Karma versions prior to 0.17.4.1, which stems from the fact that sending multiple post requests at the same time will bypass the cooldown validation...

CVE-2024-34695: Improper Control of Interaction Frequency

WOWS Karma is a reputation system for Wargaming's World of Warships. A user is able to click multiple times on "create" on a post creation prompt before the modal closes, which triggers sending several post creation API requests at once. Due to timing, sending multiple posts simultaneously reques...

CVE-2024-34695

Affected software: WOWS Karma reputation system for World of Warships. Root cause / vector: A user can click the"create" button multiple times on the post-creation prompt before the modal closes, causing several API requests to be sent in parallel. This timing flaw allows bypassing the cooldown v...

openSUSE Security Advisory (SUSE-SU-2024:1447-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

AnythingLLM 安全漏洞

AnythingLLM is a document chatbot that meets business requirements. A security vulnerability exists in AnythingLLM that stems from the fact that an attacker can accept a single user invitation by sending multiple concurrent requests, thereby allowing the creation of multiple user accounts from a...

CVE-2024-2913 Race Condition Vulnerability in mintplex-labs/anything-llm

A race condition vulnerability exists in the mintplex-labs/anything-llm repository, specifically within the user invite acceptance process. Attackers can exploit this vulnerability by sending multiple concurrent requests to accept a single user invite, allowing the creation of multiple user...

CVE-2024-2913 Race Condition Vulnerability in mintplex-labs/anything-llm

A race condition vulnerability exists in the mintplex-labs/anything-llm repository, specifically within the user invite acceptance process. Attackers can exploit this vulnerability by sending multiple concurrent requests to accept a single user invite, allowing the creation of multiple user...

kernel: GSM multiplexing race condition leads to privilege escalation

A race condition was found in the GSM 0710 tty multiplexor in the Linux kernel. This issue occurs when two threads execute the GSMIOCSETCONF ioctl on the same tty file descriptor with the gsm line discipline enabled, and can lead to a use-after-free problem on a struct gsmdlci while restarting th...

SUSE CVE-2024-27030

In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: Use separate handlers for interrupts For PF to AF interrupt vector and VF to AF vector same interrupt handler is registered which is causing race condition. When two interrupts are raised to two CPUs at same time th...

AZL-42214 CVE-2024-27019 affecting package kernel for versions less than 5.15.158.1-1

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: Fix potential data-race in nftobjtypeget nftunregisterobj can concurrent with nftobjtypeget, and there is not any protection when iterate over nftablesobjects list in nftobjtypeget. Therefore, there is...

CVE-2024-26962

In the Linux kernel, the following vulnerability has been resolved: dm-raid456, md/raid456: fix a deadlock for dm-raid456 while io concurrent with reshape For raid456, if reshape is still in progress, then IO across reshape position will wait for reshape to make progress. However, for dm-raid, in...

Linux kernel 安全漏洞

Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. A security vulnerability exists in the Linux kernel that stems from a deadlock in dm-raid456 when io is concurrent with reshape...