The vulnerability of the KEYS subsystem in the Linux operating system allows a hacker to trigger a service failure or cause other adverse effects.

The vulnerability of the KEYS subsystem in the Linux operating system is related to incorrect synchronization of update procedures. Exploiting this vulnerability can allow an attacker to cause service failures or other effects through specially crafted system calls...

CVE-2017-16857: Concurrent Execution using Shared Resource with Improper Synchronization

It is possible to bypass the bitbucket auto-unapprove plugin via minimal brute-force because it is relying on asynchronous events on the back-end. This allows an attacker to merge any code into unsuspecting repositories. This affects all versions of the auto-unapprove plugin, however since the...

CVE-2017-2898: Concurrent Execution using Shared Resource with Improper Synchronization

An exploitable vulnerability exists in the signature verification of the firmware update functionality of Circle with Disney. Specially crafted network packets can cause an unsigned firmware to be installed in the device resulting in arbitrary code execution. An attacker can send a series of...

CVE-2017-16001: Concurrent Execution using Shared Resource with Improper Synchronization

In HashiCorp Vagrant VMware Fusion plugin aka vagrant-vmware-fusion 5.0.1, a local attacker or malware can silently subvert the plugin update process in order to escalate to root privileges...

CVE-2017-15884: Concurrent Execution using Shared Resource with Improper Synchronization

In HashiCorp Vagrant VMware Fusion plugin aka vagrant-vmware-fusion 5.0.0, a local attacker or malware can silently subvert the plugin update process in order to escalate to root privileges...

CVE-2015-1865: Concurrent Execution using Shared Resource with Improper Synchronization

fts.c in coreutils 8.4 allows local users to delete arbitrary files...

CVE-2017-14483: Concurrent Execution using Shared Resource with Improper Synchronization

flower.initd in the Gentoo dev-python/flower package before 0.9.1-r1 for Celery Flower sets PID file ownership to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for PID file modification before a root script executes a...

CVE-2017-0161: Concurrent Execution using Shared Resource with Improper Synchronization

The Windows NetBT Session Services component on Microsoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a remote code execution vulnerability when it fails to maintain...

CVE-2017-0794: Concurrent Execution using Shared Resource with Improper Synchronization

A elevation of privilege vulnerability in the Upstream kernel scsi driver. Product: Android. Versions: Android kernel. Android ID: A-35644812...

CVE-2015-5947: Concurrent Execution using Shared Resource with Improper Synchronization

SuiteCRM before 7.2.3 allows remote attackers to execute arbitrary code...

CVE-2015-5948: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition in SuiteCRM before 7.2.3 allows remote attackers to execute arbitrary code. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-5947...

CVE-2017-8257: Concurrent Execution using Shared Resource with Improper Synchronization

In all Qualcomm products with Android releases from CAF using the Linux kernel, when accessing the sderotator debug interface for register reading with multiple processes, one process can free the debug buffer while another process still has the debug buffer in use...

CVE-2017-0727: Concurrent Execution using Shared Resource with Improper Synchronization

A elevation of privilege vulnerability in the Android media framework libgui. Product: Android. Versions: 7.0, 7.1.1, 7.1.2. Android ID: A-33004354...

CVE-2015-7543: Concurrent Execution using Shared Resource with Improper Synchronization

aRts 1.5.10 and kdelibs3 3.5.10 and earlier do not properly create temporary directories, which allows local users to hijack the IPC by pre-creating the temporary directory...

CVE-2017-11353: Concurrent Execution using Shared Resource with Improper Synchronization

yadm yet another dotfile manager 1.10.0 has a race condition related to the behavior of git commands in setting permissions for new files and directories, which potentially allows access to SSH and PGP keys...

CVE-2015-5232: Concurrent Execution using Shared Resource with Improper Synchronization

Race conditions in opa-fm before 10.4.0.0.196 and opa-ff before 10.4.0.0.197...

CVE-2016-9256: Concurrent Execution using Shared Resource with Improper Synchronization

In F5 BIG-IP 12.1.0 through 12.1.2, permissions enforced by iControl can lag behind the actual permissions assigned to a user if the rolemap is not reloaded between the time the permissions are changed and the time of the user's next request. This is a race condition that occurs rarely in normal...

CVE-2016-3106: Concurrent Execution using Shared Resource with Improper Synchronization

Pulp before 2.8.3 creates a temporary directory during CA key generation in an insecure manner...

CVE-2015-8556: Concurrent Execution using Shared Resource with Improper Synchronization

Local privilege escalation vulnerability in the Gentoo QEMU package before 2.5.0-r1...

CVE-2016-9962: Concurrent Execution using Shared Resource with Improper Synchronization

RunC allowed additional container processes via 'runc exec' to be ptraced by the pid 1 of the container. This allows the main processes of the container, if running as root, to gain access to file-descriptors of these new processes during the initialization and can lead to container escapes or...