268 matches found
CVE-2021-0244: Concurrent Execution using Shared Resource with Improper Synchronization
A signal handler race condition exists in the Layer 2 Address Learning Daemon L2ALD of Juniper Networks Junos OS due to the absence of a specific protection mechanism to avoid a race condition which may allow an attacker to bypass the storm-control feature on devices. This issue is a corner case...
CVE-2021-0244
A signal handler race condition exists in the Layer 2 Address Learning Daemon L2ALD of Juniper Networks Junos OS due to the absence of a specific protection mechanism to avoid a race condition which may allow an attacker to bypass the storm-control feature on devices. This issue is a corner case...
term-handler (0.1.0) potentially affected by CVE-2020-36446 via signal-simple (0.1.1)
signal-simple CARGO version 0.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on signal-simple and may be impacted: - term-handler 0.1.0 Source cves: CVE-2020-36446 Source advisory: OSV:RUSTSEC-2020-0126...
Updated gcc packages fix security vulnerability
This update provides gcc 8.4.0 stable release, containing important fixes for regressions and serious bugs in GCC 8.3 with more than 209 bugs fixed since the previous release. It also fixes at least the following security issue: every time the collect2 process is interrupted via a signal it can...
PT-2020-22795
Name of the Vulnerable Software and Affected Versions GCC versions prior to 8.4.0 Description The issue arises when the collect2 process is interrupted via a signal, potentially causing the deletion of random files from the hard drive. This occurs because the signal handler may use the path name...
RUSTSEC-2020-0004 sigstack allocation bug can cause memory corruption or leak
An embedding using affected versions of lucet-runtime configured to use non-default Wasm globals sizes of more than 4KiB, or compiled in debug mode without optimizations, could leak data from the signal handler stack to guest programs. This can potentially cause data from the embedding host to le...
PT-2020-17491
Name of the Vulnerable Software and Affected Versions lucet-runtime-internals versions prior to 0.5.1 Description The issue is related to the mishandling of sigstack allocation in the lucet-runtime-internals crate. This can potentially allow guest programs to obtain sensitive information or...
Huawei EulerOS: Security Advisory for gdm (EulerOS-SA-2017-1173)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2019-19602
A flaw was found in the Linux kernel. When compiled with GCC 9, a vector register corruption occurs on return from a signal handler where the top page of the signal stack had not yet been paged in which can allow a local attacker with special user privilege or root to leak kernel internal...
NewStart CGSL MAIN 4.05 : openssh-latest Multiple Vulnerabilities (NS-SA-2019-0146)
The remote NewStart CGSL host, running version MAIN 4.05, has openssh-latest packages installed that are affected by multiple vulnerabilities: - scp in OpenSSH 4.2p1 allows attackers to execute arbitrary commands via filenames that contain shell metacharacters or spaces, which are expanded twice...
CVE-2019-3805: Signal Handler Race Condition
A flaw was discovered in wildfly versions up to 16.0.0.Final that would allow local users who are able to execute init.d script to terminate arbitrary processes on the system. An attacker could exploit this by modifying the PID file in /var/run/jboss-eap/ allowing the init.d script to terminate a...
EulerOS 2.0 SP2 : gdm (EulerOS-SA-2017-1174)
According to the version of the gdm package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - It was found that gdm could crash due to a signal handler dispatched to an invalid conversation. An attacker could crash gdm by holding the escape key...
Updated gdm packages fix security vulnerability
It was found that gdm could crash due to a signal handler dispatched to an invalid conversation. An attacker could crash gdm by holding the escape key when the screen is locked, possibly bypassing the locked screen CVE-2015-7496...
RedHat Update for gdm and gnome-session RHSA-2017:2128-01
The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
gdm: Crash when holding Escape in log screen
It was found that gdm could crash due to a signal handler dispatched to an invalid conversation. An attacker could crash gdm by holding the escape key when the screen is locked, possibly bypassing the locked screen...
Design/Logic Flaw
The signal handler implementations in socat before 1.7.3.0 and 2.0.0-b8 allow remote attackers to cause a denial of service process freeze or crash...
CVE-2015-1379
The signal handler implementations in socat before 1.7.3.0 and 2.0.0-b8 allow remote attackers to cause a denial of service process freeze or crash...
CVE-2015-1379
The signal handler implementations in socat before 1.7.3.0 and 2.0.0-b8 allow remote attackers to cause a denial of service process freeze or crash...