Lucene search
+L

5925 matches found

Positive Technologies
Positive Technologies
•added 2022/04/24 12:00 a.m.•6 views

PT-2022-29342

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.3 Description The issue is related to a recursive locking warning in the drm/amdgpu component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

5.8AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/04/24 12:00 a.m.•11 views

PT-2022-30285

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.111 Description The issue is related to a recursive locking warning in the drm/amdgpu component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

5.8AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/04/24 12:00 a.m.•4 views

PT-2022-30472

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.189 Description The issue is related to a recursive locking warning in the drm/amdgpu component. The actual impact and attack plausibility have not yet been proven. Recommendations For versions prior to...

5.8AI score
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2022/04/21 12:00 a.m.•29 views

Cisco IOS XE Device Reboot DoS

The vulnerability of the AppNav-XE function in the Cisco IOS XE operating system is related to improper locking of resources. Exploiting this vulnerability can allow a malicious actor to trigger a device reboot or cause a service failure by sending a TCP traffic...

8.6CVSS6.4AI score0.00961EPSS
SaveExploits0References3Affected Software1
NVD
NVD
•added 2022/04/12 5:15 p.m.•50 views

CVE-2021-39801

In ionioctl of ion-ioctl.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

7.8CVSS0.00122EPSS
SaveExploits0References1
Prion
Prion
•added 2022/04/12 5:15 p.m.•26 views

Design/Logic Flaw

In ionioctl of ion-ioctl.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

7.2CVSS7.7AI score0.00122EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2022/04/12 5:15 p.m.•14 views

UBUNTU-CVE-2021-39801

In ionioctl of ion-ioctl.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

7.8CVSS7.6AI score0.00122EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2022/04/12 5:15 p.m.•57 views

CVE-2021-39801

In ionioctl of ion-ioctl.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

7.8CVSS7.6AI score0.00122EPSS
SaveExploits0References2
CVE
CVE
•added 2022/04/12 4:11 p.m.•243 views

CVE-2021-39801

CVE-2021-39801 affects the Android kernel ion subsystem (ion-ioctl.c). The vulnerability is a use-after-free caused by improper locking in ion_ioctl, enabling local escalation of privilege with no additional privileges or user interaction required. Exploitation details are not provided beyond tho...

7.8CVSS7.7AI score0.00122EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2022/04/12 4:11 p.m.•37 views

CVE-2021-39801

In ionioctl of ion-ioctl.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

7.9AI score0.00122EPSS
SaveExploits0References1
Mend
Mend
•added 2022/04/12 4:11 p.m.•9 views

CVE-2021-39801

In ionioctl of ion-ioctl.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

8.5CVSS0.00122EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2022/04/12 4:11 p.m.•72 views

CVE-2021-39801

In ionioctl of ion-ioctl.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

7.8CVSS7.7AI score0.00122EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/12 12:00 a.m.•5 views

CVE-2021-39801: Use After Free

In ionioctl of ion-ioctl.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

7.8CVSS7.6AI score0.00122EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/07 12:00 a.m.•10 views

CVE-2021-43429: Improper Locking

A Denial of Service vulnerability exists in CORTX-S3 Server as of 11/7/2021 via the mempooldestroy method due to a failture to release locks pool-lock...

7.5CVSS7.2AI score0.0092EPSS
SaveExploits1References2
osv_cve
osv_cve
•added 2022/04/05 1:15 p.m.•50 views

CVE-2022-26356

Racy interactions between dirty vram tracking and paging log dirty hypercalls Activation of log dirty mode done by XENDMOPtrackdirtyvram was named HVMOPtrackdirtyvram before Xen 4.9 is racy with ongoing log dirty hypercalls. A suitably timed call to XENDMOPtrackdirtyvram can enable log dirty whil...

5.6CVSS6.7AI score0.00241EPSS
SaveExploits0References7
osv_asb
osv_asb
•added 2022/04/01 12:00 a.m.•41 views

ASB-A-209791720

In ionioctl of ion-ioctl.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS7.6AI score0.00122EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2022/04/01 12:00 a.m.•12 views

PT-2022-6558

Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description The issue results from the lack of proper locking when performing operations on an object within the DPT I2O Controller driver. This can be leveraged by an attacker, in conjunction with...

7.8CVSS7AI score0.00272EPSS
SaveExploits0References238
Fedora
Fedora
•added 2022/03/30 1:12 a.m.•39 views

[SECURITY] Fedora 34 Update: swaylock-1.6-1.fc34

swaylock is a screen locking utility for Wayland compositors...

9.1CVSS2.3AI score0.01555EPSS
SaveExploits0
NVD
NVD
•added 2022/03/25 7:15 p.m.•46 views

CVE-2021-3567

A flaw was found in Caribou due to a regression of CVE-2020-25712 fix. An attacker could use this flaw to bypass screen-locking applications that leverage Caribou as an input mechanism. The highest threat from this vulnerability is to system availability...

7.5CVSS0.01157EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2022/03/25 7:15 p.m.•77 views

CVE-2021-3567

A flaw was found in Caribou due to a regression of CVE-2020-25712 fix. An attacker could use this flaw to bypass screen-locking applications that leverage Caribou as an input mechanism. The highest threat from this vulnerability is to system availability...

7.5CVSS5.5AI score0.01157EPSS
SaveExploits0References2
Rows per page
Query Builder