9081 matches found
CVE-2019-15879: Concurrent Execution using Shared Resource with Improper Synchronization
In FreeBSD 12.1-STABLE before r356908, 12.1-RELEASE before p5, 11.3-STABLE before r356908, and 11.3-RELEASE before p9, a race condition in the cryptodev module permitted a data structure in the kernel to be used after it was freed, allowing an unprivileged process can overwrite arbitrary kernel...
FreeBSD : FreeBSD -- Use after free in cryptodev module (9f15c2da-947e-11ea-92ab-00163e433440)
A race condition permitted a data structure in the kernel to be used after it was freed by the cryptodev module. Impact : An unprivileged process can overwrite arbitrary kernel memory. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the...
kernel: out of bounds write in function i2c_smbus_xfer_emulated in drivers/i2c/i2c-core-smbus.c
An out of bounds OOB memory access flaw was found in i2csmbusxferemulated in drivers/i2c/i2c-core-smbus.c in I2C subsystem. A read request for length data-block0 greater than 'I2CSMBUSBLOCKMAX + 1' may cause underlying I2C driver write out of array's boundary. This could allow a local attacker wi...
PT-2020-9767
Name of the Vulnerable Software and Affected Versions FreeBSD versions 12.1-STABLE before r356908 FreeBSD versions 12.1-RELEASE before p5 FreeBSD versions 11.3-STABLE before r356908 FreeBSD versions 11.3-RELEASE before p9 Description A race condition in the cryptodev module permitted a data...
FreeBSD-SA-20:15.cryptodev
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-20:15.cryptodev Security Advisory The FreeBSD Project Topic: Use after free in cryptodev module Category: core Module: cryptodev Announced: 2020-05-12 Credits:...
CVE-2020-10067 Integer Overflow In is_in_region Allows User Thread To Access Kernel Memory
A malicious userspace application can cause a integer overflow and bypass security checks performed by system call handlers. The impact would depend on the underlying system call and can range from denial of service to information leak to memory corruption resulting in code execution within the...
Exploit for Improper Input Validation in Linux Linux_Kernel
CVE-2017-5123 PoC CVE-2017-5123 - LPE - Bypassing SMEP/SMAP. N...
DEBIAN-CVE-2012-0953
A race condition was discovered in the Linux drivers for Nvidia graphics which allowed an attacker to exfiltrate kernel memory to userspace. This issue was fixed in version 295.53...
CVE-2012-0953
A race condition was discovered in the Linux drivers for Nvidia graphics which allowed an attacker to exfiltrate kernel memory to userspace. This issue was fixed in version 295.53...
CVE-2012-0953
A race condition was discovered in the Linux drivers for Nvidia graphics which allowed an attacker to exfiltrate kernel memory to userspace. This issue was fixed in version 295.53...
CVE-2012-0953
A race condition was discovered in the Linux drivers for Nvidia graphics which allowed an attacker to exfiltrate kernel memory to userspace. This issue was fixed in version 295.53...
Race condition
A race condition was discovered in the Linux drivers for Nvidia graphics which allowed an attacker to exfiltrate kernel memory to userspace. This issue was fixed in version 295.53...
CVE-2012-0953
The CVE-2012-0953 entry describes a race condition in the Linux Nvidia graphics driver that could allow an attacker to exfiltrate kernel memory to userspace. Affected component: Nvidia graphics driver for Linux (pre-295.53). Root cause: a race condition in the driver’s ioctl/path to memory, enabl...
CVE-2012-0953 Kernel heap contents leak race in ioctl handler
A race condition was discovered in the Linux drivers for Nvidia graphics which allowed an attacker to exfiltrate kernel memory to userspace. This issue was fixed in version 295.53...
CVE-2012-0953
A race condition was discovered in the Linux drivers for Nvidia graphics which allowed an attacker to exfiltrate kernel memory to userspace. This issue was fixed in version 295.53...
CVE-2012-0953: Concurrent Execution using Shared Resource with Improper Synchronization
A race condition was discovered in the Linux drivers for Nvidia graphics which allowed an attacker to exfiltrate kernel memory to userspace. This issue was fixed in version 295.53...
NVIDIA Display driver competitive conditions issue vulnerability
NVIDIA graphics driver is a graphics driver from the American company NVIDIA. A competing condition issue vulnerability exists in NVIDIA Display driver Linux versions prior to 295.53. An attacker could exploit this vulnerability to leak kernel memory into user space...
PT-2020-7173
Name of the Vulnerable Software and Affected Versions Nvidia Linux drivers versions prior to 295.53 Description A race condition was discovered in the Linux drivers for Nvidia graphics, allowing an attacker to exfiltrate kernel memory to userspace. Recommendations For versions prior to 295.53,...
UBUNTU-CVE-2020-12656
gssmechfree in net/sunrpc/authgss/gssmechswitch.c in the rpcsecgsskrb5 implementation in the Linux kernel through 5.6.10 lacks certain domainrelease calls, leading to a memory leak. Note: This was disputed with the assertion that the issue does not grant any access not already available. It is a...
CVE-2020-7453
In FreeBSD 12.1-STABLE before r359021, 12.1-RELEASE before 12.1-RELEASE-p3, 11.3-STABLE before r359020, and 11.3-RELEASE before 11.3-RELEASE-p7, a missing null termination check in the jailset configuration option "osrelease" may return more bytes with a subsequent jailget system call allowing a...