Lucene search
+L

2489 matches found

OSV
OSV
added 2023/01/17 3:54 p.m.14 views

GSD-2023-1000033 netfilter: ctnetlink: fix compilation warning after data race fixes in ct mark

netfilter: ctnetlink: fix compilation warning after data race fixes in ct mark This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.13 by commit...

7.2AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2023/01/17 12:0 a.m.4 views

PT-2023-33644 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.16 Description: The issue is related to a potential data-race in the ipv6/sit module. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

7.1AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/01/17 12:0 a.m.6 views

PT-2023-33292 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 5.10.157 through 5.10.158 Description: The issue is related to a data race in the netfilter ctnetlink component of the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations: Fo...

7.2AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/01/17 12:0 a.m.1 views

PT-2023-33214 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.15.81 through v5.15.82 Description: The issue is related to a data race in the netfilter ctnetlink component. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

7.1AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/01/17 12:0 a.m.1 views

PT-2023-33110 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v6.0.11 through v6.0.12 Description: The issue is related to a data race in the netfilter ctnetlink component. It was introduced in version v6.0.11 and fixed in version v6.0.13. The actual impact and attack plausibility...

7.1AI score
SaveExploits0References1
OpenVAS
OpenVAS
added 2023/01/06 12:0 a.m.24 views

Ubuntu: Security Advisory (USN-5789-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.3AI score0.21314EPSS
SaveExploits3References2
NVD
NVD
added 2022/12/22 8:15 p.m.17 views

CVE-2022-42930

If two Workers were simultaneously initializing their CacheStorage, a data race could have occurred in the ThirdPartyUtil component. This vulnerability affects Firefox 106...

7.1CVSS0.00391EPSS
SaveExploits0References2
OSV
OSV
added 2022/12/22 8:15 p.m.5 views

CVE-2022-42930

If two Workers were simultaneously initializing their CacheStorage, a data race could have occurred in the ThirdPartyUtil component. This vulnerability affects Firefox 106...

7.1CVSS7.3AI score0.00391EPSS
SaveExploits0References2
OSV
OSV
added 2022/12/22 8:15 p.m.7 views

CVE-2022-38476

A data race could occur in the PK11ChangePW function, potentially leading to a use-after-free vulnerability. In Firefox, this lock protected the data when a user changed their master password. This vulnerability affects Firefox ESR 102.2 and Thunderbird 102.2...

7.5CVSS8.2AI score
SaveExploits0References3
OSV
OSV
added 2022/12/22 8:15 p.m.1 views

DEBIAN-CVE-2022-38476

A data race could occur in the PK11ChangePW function, potentially leading to a use-after-free vulnerability. In Firefox, this lock protected the data when a user changed their master password. This vulnerability affects Firefox ESR 102.2 and Thunderbird 102.2...

7.5CVSS7.6AI score0.0082EPSS
SaveExploits0References1
NVD
NVD
added 2022/12/22 8:15 p.m.24 views

CVE-2022-38476

A data race could occur in the PK11ChangePW function, potentially leading to a use-after-free vulnerability. In Firefox, this lock protected the data when a user changed their master password. This vulnerability affects Firefox ESR 102.2 and Thunderbird 102.2...

7.5CVSS0.0082EPSS
SaveExploits0References3
Prion
Prion
added 2022/12/22 8:15 p.m.27 views

Design/Logic Flaw

If two Workers were simultaneously initializing their CacheStorage, a data race could have occurred in the ThirdPartyUtil component. This vulnerability affects Firefox 106...

4.6CVSS6.8AI score0.00391EPSS
SaveExploits0References2Affected Software1
Prion
Prion
added 2022/12/22 8:15 p.m.24 views

Design/Logic Flaw

A data race could occur in the PK11ChangePW function, potentially leading to a use-after-free vulnerability. In Firefox, this lock protected the data when a user changed their master password. This vulnerability affects Firefox ESR 102.2 and Thunderbird 102.2...

5.1CVSS7.3AI score0.0082EPSS
SaveExploits0References3Affected Software2
Debian CVE
Debian CVE
added 2022/12/22 12:0 a.m.55 views

CVE-2022-42930

If two Workers were simultaneously initializing their CacheStorage, a data race could have occurred in the ThirdPartyUtil component. This vulnerability affects Firefox 106...

7.1CVSS8.5AI score0.00391EPSS
SaveExploits0
Vulnrichment
Vulnrichment
added 2022/12/22 12:0 a.m.4 views

CVE-2022-42930

If two Workers were simultaneously initializing their CacheStorage, a data race could have occurred in the ThirdPartyUtil component. This vulnerability affects Firefox 106...

6.3AI score0.00391EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2022/12/22 12:0 a.m.6 views

CVE-2022-38476

A data race could occur in the PK11ChangePW function, potentially leading to a use-after-free vulnerability. In Firefox, this lock protected the data when a user changed their master password. This vulnerability affects Firefox ESR 102.2 and Thunderbird 102.2...

6.3AI score0.0082EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2022/12/22 12:0 a.m.26 views

CVE-2022-38476

A data race could occur in the PK11ChangePW function, potentially leading to a use-after-free vulnerability. In Firefox, this lock protected the data when a user changed their master password. This vulnerability affects Firefox ESR 102.2 and Thunderbird 102.2...

7.8AI score0.0082EPSS
SaveExploits0References3
CVE
CVE
added 2022/12/22 12:0 a.m.178 views

CVE-2022-38476

CVE-2022-38476 describes a data race in PK11_ChangePW that could cause a use-after-free, affecting Firefox ESR < 102.2 and Thunderbird

7.5CVSS7.4AI score0.0082EPSS
SaveExploits0References3Affected Software2
Debian CVE
Debian CVE
added 2022/12/22 12:0 a.m.24 views

CVE-2022-38476

A data race could occur in the PK11ChangePW function, potentially leading to a use-after-free vulnerability. In Firefox, this lock protected the data when a user changed their master password. This vulnerability affects Firefox ESR 102.2 and Thunderbird 102.2...

7.5CVSS7.8AI score0.0082EPSS
SaveExploits0
CVE
CVE
added 2022/12/22 12:0 a.m.408 views

CVE-2022-42930

Mozilla Firefox prior to version 106 is affected by a data race in the ThirdPartyUtil component when two Workers initialize CacheStorage concurrently. The vulnerability could lead to memory corruption or a potentially exploitable crash. The fix is included in Firefox 106 (per MFSA2022-44). Mitiga...

7.1CVSS6.8AI score0.00391EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder