26 matches found
CVE-2026-65061
Data::ReqRep::Shared versions before 0.05 for Perl create a world-readable mmap backing file and open it without OEXCL or ONOFOLLOW. The segment is created in reqrep.h with openpath, ORDWR | OCREAT, 0666, for both the request-reply and the integer-variant segments. The mode is 0666, so under the...
CVE-2026-65068
Data::SpatialHash::Shared versions before 0.02 for Perl create a world-readable mmap backing file and open it without OEXCL or ONOFOLLOW. The segment is created in sphash.h with openpath, ORDWR|OCREAT, 0666. The mode is 0666, so under the default umask 022 the file is created mode 0644...
systemd security update
An update is available for systemd. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The systemd packages contain systemd, a system and service manager for Linux...
UBUNTU-CVE-2026-47331
Ubuntu Linux 6.8 contains AppArmor SAUCE patches which fail to acquire a lock when modifying a linked list. An unprivileged local user could trigger the race condition that can lead to a use-after-free UAF and, theoretically, arbitrary code execution...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004347)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004347 advisory. The mptctlioctl function in drivers/message/fusion/mptctl.c in the Linux kernel before 5.4.14 allows local users to hold an incorrect lock during the ioctl operation...
Linux Distros Unpatched Vulnerability : CVE-2020-13882
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - CISOfy Lynis before 3.0.0 has Incorrect Access Control because of a TOCTOU race condition. The routine to check the log and report file permissions was not...
CVE-2021-31797
The user identification mechanism used by CyberArk Credential Provider prior to 12.1 is susceptible to a local host race condition, leading to password disclosure...
UBUNTU-CVE-2024-3219
There is a MEDIUM severity vulnerability affecting CPython. The “socket” module provides a pure-Python fallback to the socket.socketpair function for platforms that don’t support AFUNIX, such as Windows. This pure-Python implementation uses AFINET or AFINET6 to create a local connected pair of...
CVE-2022-33915
Versions of the Amazon AWS Apache Log4j hotpatch package before log4j-cve-2021-44228-hotpatch-1.3.5 are affected by a race condition that could lead to a local privilege escalation. This Hotpatch package is not a replacement for updating to a log4j version that mitigates CVE-2021-44228 or...
PT-2021-19514 · Cyberark · Cyberark Credential Provider
Name of the Vulnerable Software and Affected Versions: CyberArk Credential Provider versions prior to 12.1 Description: The user identification mechanism used by CyberArk Credential Provider is susceptible to a local host race condition, leading to password disclosure. Recommendations: For versio...
Linux Kernel CVE-2019-14898 Incomplete Fix Local Race Condition Vulnerability
Description The Linux Kernel is prone to a local race-condition vulnerability. An attacker can exploit this issue to obtain sensitive information and cause a denial-of-service condition. This may lead to other attacks. Technologies Affected Linux kernel 2.6.38 Linux kernel 2.6.38.2 Linux kernel...
Linux Kernel <= 2.6.17.4 - (proc) Local Root Exploit
No description provided by source. / Author: h00lyshit Vulnerable: Linux 2.6 ALL Type of Vulnerability: Local Race Tested On : various distros Vendor Status: unknown Disclaimer: In no event shall the author be liable for any damages whatsoever arising out of or in connection with the use or sprea...
X.Org xorg-x11-xfs <= 1.0.2-3.1 - Local Race Condition Exploit
No description provided by source. !/bin/sh Xorg-x11-xfs Race Condition Vuln local root exploit CVE-2007-3103 Another lame xploit by vl4dZ : works on redhat el5 and before $ id uid=1001kecos gid=1001user groups=1001user $ sh xfs-RaceCondition-root-exploit.sh Generate large data file in...
Linux Kernel "posix-cpu-timers.c"本地竞争条件漏洞
BUGTRAQ ID: 45028 CVE ID: CVE-2010-4248 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel在实现上存在漏洞，攻击者可以利用此漏洞引起内核瘫痪，异常终止受影响的计算机。 posix-cpu-timers.c认为将要终止的进程会执行posixcputimersexitgroup并将从 signal-cputimers列表中删除所有!CPUCLOCKPERTHREAD计时器。但它错误地认为 timer-it.cpu.task总是组前导，这样dead -task就表示不作用的线程组。 Linux kernel...
FreeBSD 8.1/7.3 vm.pmap Kernel Local Race Condition
No description provided by source. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 FreeBSD 8.1/7.3 vm.pmap kernel local race condition Author: Maksymilian Arciemowicz http://SecurityReason.com http://lu.cxib.net Date: - - Dis.: 09.07.2010 - - Pub.: 07.09.2010 Affected Software verified: - - FreeBSD...
FreeBSD 8.1/7.3 vm.pmap Kernel Local Race Condition
Exploit for bsd platform in category dos / poc =================================================== FreeBSD 8.1/7.3 vm.pmap Kernel Local Race Condition =================================================== Date: - - Dis.: 09.07.2010 - - Pub.: 07.09.2010 Affected Software verified: - - FreeBSD 7.3/8....
FreeBSD 8.17.3 - vm.pmap Local Race Condition
FreeBSD 8.17.3 - vm.pmap Local Race Condition -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 FreeBSD 8.1/7.3 vm.pmap kernel local race condition Author: Maksymilian Arciemowicz http://SecurityReason.com http://lu.cxib.net Date: - - Dis.: 09.07.2010 - - Pub.: 07.09.2010 Affected Software verified: ...
openSUSE Security Update : kde4-kdm (openSUSE-SU-2010:0112-1)
The KDE KDM contains a local race condition which allows to make arbitrary files world-writable. CVE-2010-0436 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...
openSUSE Security Update : kde4-kdm (kde4-kdm-2134)
The KDE KDM contains a local race condition which allows to make arbitrary files world-writable. CVE-2010-0436 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...
X.Org xorg-x11-xfs 1.0.2-3.1 - Local Race Condition
X.Org xorg-x11-xfs 1.0.2-3.1 - Local Race Condition !/bin/sh Xorg-x11-xfs Race Condition Vuln local root exploit CVE-2007-3103 Another lame xploit by vl4dZ : works on redhat el5 and before $ id uid=1001kecos gid=1001user groups=1001user $ sh xfs-RaceCondition-root-exploit.sh Generate large data...