479 matches found
The vulnerability of the pivot_root function (fs/namespace.c) in Linux operating system kernels, which allows a hacker to trigger a service failure
The vulnerability of the pivotroot function fs/namespace.c in Linux operating system kernels arises due to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the mptctl_ioctl function (drivers/message/fusion/mptctl.c) in the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the mptctlioctl function drivers/message/fusion/mptctl.c in the Linux kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected...
The vulnerability of the Python ECDSA cryptographic library, related to insufficient processing of exceptional states, allows a perpetrator to trigger a service failure.
The vulnerability of the Python ECDSA cryptographic library involves simultaneous operations using a shared resource with incorrect synchronization. Exploiting this vulnerability can allow a remote attacker to cause service failures...
The vulnerability of Xen hypervisors arises from synchronization errors when using shared resources, allowing a malicious actor to cause service failures or increase their privileges.
The vulnerability of Xen hypervisors arises due to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause service failures or increase their privileges by adding a device with persistent communication capabilities...
DEBIAN-CVE-2020-9543
OpenStack Manila =8.0.0 =9.0.0 9.1.1 allows attackers to view, update, delete, or share resources that do not belong to them, because of a context-free lookup of a UUID. Attackers may also create resources, such as shared file systems and groups of shares on such share networks...
PYSEC-2020-63
OpenStack Manila =8.0.0 =9.0.0 9.1.1 allows attackers to view, update, delete, or share resources that do not belong to them, because of a context-free lookup of a UUID. Attackers may also create resources, such as shared file systems and groups of shares on such share networks...
The vulnerability of the KVM virtualization subsystem in Linux operating systems allows a perpetrator to gain access to confidential data.
The vulnerability of the KVM virtualization subsystem in Linux operating systems is related to the simultaneous execution using shared resources with improper synchronization. Exploiting this vulnerability allows an attacker to gain access to confidential data...
MISP Competitive Conditions Issue Loophole
MISP is an open source software solution. The product is used to collect, store, distribute and share cybersecurity metrics and has features such as threat cybersecurity event analysis and malware analysis. MISP is vulnerable to a competitive conditions issue. The vulnerability arises from improp...
The vulnerability of the display driver (drivers/media/platform/vivid) in Linux operating systems, which allows a hacker to cause a service failure
The vulnerability of the display driver drivers/media/platform/vivid in Linux operating systems is related to the simultaneous execution using shared resources with incorrect synchronization. Exploiting this vulnerability can allow an attacker to cause service failures by blocking streams using t...
gs-gpl competitive conditions issue vulnerability
gs-gpl is a Ghostscript PostScript interpreter. A competing condition issue vulnerability exists in gs-gpl versions prior to 8.56, which arises from improper handling of concurrent access when concurrent code requires mutually exclusive access to shared resources during operation of a networked...
The vulnerability of Intel microprocessor microprogramming software arises from synchronization errors when using shared resources, allowing attackers to disclose protected information.
The vulnerability of Intel microprogramming software arises from synchronization errors when using a common resource. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information that is protected by the system...
cPanel Competitive Conditions Vulnerability
cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A Competing Conditions Issue vulnerability exists in versions of cPanel prior to 68.0.27. The vulnerability stems from improper...
Wind River Systems VxWorks Competitive Conditions Issue Vulnerability
Wind River Systems VxWorks is an embedded real-time operating system RTOS from Wind River Systems. A competitive conditions issue vulnerability exists in Wind River Systems VxWorks. The vulnerability arises from improper handling of concurrent access when concurrent code requires mutually exclusi...
The vulnerability in the implementation of the Siemens R3964 driver’s code in the Linux operating system’s kernel allows a hacker to cause a service failure.
The vulnerability of the Siemens R3964 driver implementation, located in the Linux kernel’s drivers/tty/nr3964.c file, is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause service failures...
GitLab Competitive Conditions Vulnerability
GitLab is a Ruby on Rails development , Git version control system project repository application . The program can be used to access the contents of the project's files, commit history, bug lists, and more. A competitive conditions vulnerability exists in GitLab versions 8.17 and later Community...
The vulnerability of VMware ESXi, VMware Fusion, and Vmware Workstation lies in synchronization errors when using shared resources (“Race Conditions”), allowing a attacker to execute arbitrary code.
The vulnerability of VMware ESXi, VMware Fusion, and Vmware Workstation hypervisors is related to synchronization errors when using shared resources. Exploiting this vulnerability allows an attacker to execute arbitrary code by using a virtual USB controller...
The vulnerability of the nginx web server module in Phusion Passenger, related to the simultaneous use of shared resources and synchronization errors, allows attackers to gain access to confidential data.
The vulnerability of the nginx web server module in Phusion Passenger is related to the simultaneous use of a shared resource and synchronization errors when the passengerinstanceregistrydir configuration is not set strictly enough. Exploiting this vulnerability can allow an attacker to gain acce...
The vulnerability of Systemd demons, related to the simultaneous use of shared resources and synchronization errors, allows a perpetrator to trigger a service failure.
The vulnerability of Systemd relates to the simultaneous use of shared resources and synchronization errors. Exploiting this vulnerability can allow a remote attacker to cause service failures...
Linux kernel competitive conditions issue vulnerability
Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. The kernel contains a Competitive Condition Problem vulnerability that arises from improper handling of concurrent access when concurrent code requires mutually...
Microsoft Windows BasicRender Driver Race Condition Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on vulnerable installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within processing of th...