Lucene search
K

54 matches found

CVE
CVE
added 2024/05/06 2:32 p.m.54 views

CVE-2023-33119

CVE-2023-33119 describes a memory corruption in a Qualcomm closed‑source component triggered while loading a VM from a signed VM image that is not coherent in the processor cache. Connected records corroborate impact as LOCAL with high severity (CONFIDENTIALITY, INTEGRITY, AVAILABILITY affected) ...

8.4CVSS7AI score0.00062EPSS
Exploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2024/05/06 12:0 a.m.3 views

PT-2024-12420 · Qualcomm · Snapdragon +141

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves memory corruption that occurs while loading a VM from a signed VM image that is not coherent in the processor cache. This is a...

8.4CVSS7.2AI score0.00062EPSS
Exploits0References7
CNNVD
CNNVD
added 2024/05/06 12:0 a.m.1 views

Qualcomm Chipsets 安全漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that originates from a memory corruption when loading a VM from an inconsistent signed VM image in the processor cache...

8.4CVSS6.7AI score0.00062EPSS
Exploits0References3
SUSE CVE
SUSE CVE
added 2023/02/15 4:56 a.m.2 views

SUSE CVE-2016-8745

A bug in the error handling of the send file code for the NIO HTTP connector in Apache Tomcat 9.0.0.M1 to 9.0.0.M13, 8.5.0 to 8.5.8, 8.0.0.RC1 to 8.0.39, 7.0.0 to 7.0.73 and 6.0.16 to 6.0.48 resulted in the current Processor object being added to the Processor cache multiple times. This in turn...

7.5CVSS9.4AI score0.1091EPSS
Exploits0References8
SUSE CVE
SUSE CVE
added 2023/02/15 4:49 a.m.1 views

SUSE CVE-2017-5651

In Apache Tomcat 9.0.0.M1 to 9.0.0.M18 and 8.5.0 to 8.5.12, the refactoring of the HTTP connectors introduced a regression in the send file processing. If the send file processing completed quickly, it was possible for the Processor to be added to the processor cache twice. This could result in t...

9.8CVSS9.5AI score0.06144EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2022/06/09 12:0 a.m.1 views

PT-2022-3407 · Xen +1 · Xen +1

Name of the Vulnerable Software and Affected Versions: Xen affected versions not specified Description: The issue is related to a buffer overflow in memory, which can allow an attacker to execute arbitrary code. Xen's safety logic does not account for CPU-induced cache non-coherency, leading to...

8.8CVSS7.9AI score0.01411EPSS
Exploits3References122
OSV
OSV
added 2022/05/14 1:10 a.m.1 views

GHSA-W3J5-Q8F2-3CQQ Concurrent Execution using Shared Resource with Improper Synchronization in Apache Tomcat

A bug in the error handling of the send file code for the NIO HTTP connector in Apache Tomcat 9.0.0.M1 to 9.0.0.M13, 8.5.0 to 8.5.8, 8.0.0.RC1 to 8.0.39, 7.0.0 to 7.0.73 and 6.0.16 to 6.0.48 resulted in the current Processor object being added to the Processor cache multiple times. This in turn...

7.5CVSS7.1AI score0.1091EPSS
Exploits0References53
OSV
OSV
added 2022/05/13 1:46 a.m.1 views

GHSA-9HG2-395J-83RM Expected Behavior Violation in Apache Tomcat

In Apache Tomcat 9.0.0.M1 to 9.0.0.M18 and 8.5.0 to 8.5.12, the refactoring of the HTTP connectors introduced a regression in the send file processing. If the send file processing completed quickly, it was possible for the Processor to be added to the processor cache twice. This could result in t...

9.8CVSS7.2AI score0.06144EPSS
Exploits0References29
RedhatCVE
RedhatCVE
added 2020/04/01 2:4 a.m.38 views

CVE-2017-5651

In Apache Tomcat 9.0.0.M1 to 9.0.0.M18 and 8.5.0 to 8.5.12, the refactoring of the HTTP connectors introduced a regression in the send file processing. If the send file processing completed quickly, it was possible for the Processor to be added to the processor cache twice. This could result in t...

7.5CVSS0.9AI score0.06144EPSS
Exploits0References1
RedHat Linux
RedHat Linux
added 2019/05/14 7:11 p.m.0 views

hardware: Microarchitectural Fill Buffer Data Sampling (MFBDS)

A flaw was found in the implementation of the "fill buffer", a mechanism used by modern CPUs when a cache-miss is made on L1 CPU cache. If an attacker can generate a load operation that would create a page fault, the execution will continue speculatively with incorrect data from the fill buffer...

5.9CVSS7AI score0.00577EPSS
Exploits0References5
Tenable Nessus
Tenable Nessus
added 2017/11/01 12:0 a.m.56 views

EulerOS 2.0 SP2 : tomcat (EulerOS-SA-2017-1262)

According to the versions of the tomcat packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A vulnerability was discovered in Tomcat's handling of pipelined requests when 'Sendfile' was used. If sendfile processing completed quickly, it...

8.1CVSS7.5AI score0.9438EPSS
Exploits35References5
Tenable Nessus
Tenable Nessus
added 2017/11/01 12:0 a.m.60 views

EulerOS 2.0 SP1 : tomcat (EulerOS-SA-2017-1261)

According to the versions of the tomcat packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A vulnerability was discovered in Tomcat's handling of pipelined requests when 'Sendfile' was used. If sendfile processing completed quickly, it...

8.1CVSS7.5AI score0.9438EPSS
Exploits35References5
RedHat Linux
RedHat Linux
added 2017/10/30 12:26 a.m.2 views

tomcat: Incorrect handling of pipelined requests when send file was used

A vulnerability was discovered in Tomcat's handling of pipelined requests when "Sendfile" was used. If sendfile processing completed quickly, it was possible for the Processor to be added to the processor cache twice. This could lead to invalid responses or information disclosure...

7.5CVSS7.3AI score0.02275EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2017/10/30 12:15 a.m.2 views

tomcat: Incorrect handling of pipelined requests when send file was used

A vulnerability was discovered in Tomcat's handling of pipelined requests when "Sendfile" was used. If sendfile processing completed quickly, it was possible for the Processor to be added to the processor cache twice. This could lead to invalid responses or information disclosure...

7.5CVSS7.3AI score0.02275EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2017/08/21 3:33 p.m.3 views

tomcat: Incorrect handling of pipelined requests when send file was used

A vulnerability was discovered in Tomcat's handling of pipelined requests when "Sendfile" was used. If sendfile processing completed quickly, it was possible for the Processor to be added to the processor cache twice. This could lead to invalid responses or information disclosure...

7.5CVSS7.3AI score0.02275EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2017/07/25 5:46 p.m.2 views

tomcat: Incorrect handling of pipelined requests when send file was used

A vulnerability was discovered in Tomcat's handling of pipelined requests when "Sendfile" was used. If sendfile processing completed quickly, it was possible for the Processor to be added to the processor cache twice. This could lead to invalid responses or information disclosure...

7.5CVSS7.3AI score0.02275EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2017/07/25 4:44 p.m.0 views

tomcat: Incorrect handling of pipelined requests when send file was used

A vulnerability was discovered in Tomcat's handling of pipelined requests when "Sendfile" was used. If sendfile processing completed quickly, it was possible for the Processor to be added to the processor cache twice. This could lead to invalid responses or information disclosure...

7.5CVSS7.3AI score0.02275EPSS
Exploits0References4
Broadcom
Broadcom
added 2017/06/23 12:0 a.m.6 views

BSA-2017-317

Security Advisory ID : BSA-2017-317 Component : Apache Tomcat Revision : 2.0: Interim In Apache Tomcat 9.0.0.M1 to 9.0.0.M18 and 8.5.0 to 8.5.12, the refactoring of the HTTP connectors introduced a regression in the send file processing. If the send file processing completed quickly, it was...

9.8CVSS8.6AI score0.06144EPSS
Exploits0
Prion
Prion
added 2017/04/17 4:59 p.m.20 views

Design/Logic Flaw

In Apache Tomcat 9.0.0.M1 to 9.0.0.M18 and 8.5.0 to 8.5.12, the refactoring of the HTTP connectors introduced a regression in the send file processing. If the send file processing completed quickly, it was possible for the Processor to be added to the processor cache twice. This could result in t...

7.5CVSS9.1AI score0.06144EPSS
Exploits0References15Affected Software1
UbuntuCve
UbuntuCve
added 2017/04/17 4:59 p.m.21 views

CVE-2017-5651

In Apache Tomcat 9.0.0.M1 to 9.0.0.M18 and 8.5.0 to 8.5.12, the refactoring of the HTTP connectors introduced a regression in the send file processing. If the send file processing completed quickly, it was possible for the Processor to be added to the processor cache twice. This could result in t...

9.8CVSS7.2AI score0.06144EPSS
Exploits0References2
Rows per page
Query Builder