Privilege escalation

An issue was discovered in the spin crate before 0.5.2 for Rust, when RwLock is used. Because memory ordering is mishandled, two writers can acquire the lock at the same time, violating mutual exclusion...

CVE-2019-16137

CVE-2019-16137 affects the spin crate for Rust (before version 0.5.2) where the RwLock memory ordering is mishandled. The underlying issue can allow two writers to acquire the lock simultaneously, violating mutual exclusion. This is documented across multiple sources (NVD, Red Hat, SUSE, OSV, Git...

CVE-2019-16137

An issue was discovered in the spin crate before 0.5.2 for Rust, when RwLock is used. Because memory ordering is mishandled, two writers can acquire the lock at the same time, violating mutual exclusion...

CVE-2019-16137: Improper Synchronization

An issue was discovered in the spin crate before 0.5.2 for Rust, when RwLock is used. Because memory ordering is mishandled, two writers can acquire the lock at the same time, violating mutual exclusion...

RUSTSEC-2019-0013 Wrong memory orderings in RwLock potentially violates mutual exclusion

Wrong memory orderings inside the RwLock implementation allow for two writers to acquire the lock at the same time. The drop implementation used Ordering::Relaxed, which allows the compiler or CPU to reorder a mutable access on the locked data after the lock has been yielded. Only users of the...

alloc-cortex-m (>=0.3.0, <=0.3.2), alloc-fmt (>=0.1.0, <=0.2.0) +66 more potentially affected by CVE-2019-16137 via spin (>=0.3.5, <=0.4.10)

spin CARGO version =0.3.5, =0.3.0, =0.1.0, =0.1.0, =0.1.0, =0.1.1, =0.1.2, =0.1.3, =0.0.1, =0.2.0, =0.2.1, =0.1.0, =0.1.1, =0.3.0, =0.4.0 and more Source cves: CVE-2019-16137 Source advisory: OSV:RUSTSEC-2019-0013...

PT-2019-14533

Name of the Vulnerable Software and Affected Versions spin crate versions prior to 0.5.2 Description An issue was discovered in the spin crate for Rust, where wrong memory orderings inside the RwLock implementation allow for two writers to acquire the lock at the same time, violating mutual...

anime-spin.net XSS vulnerability

Open Bug Bounty ID: OBB-484422 Description| Value ---|--- Affected Website:| anime-spin.net Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosure base...

CVE-2015-3229

fedora-cloud-atomic.ks in spin-kickstarts allows remote attackers to conduct man-in-the-middle attacks by leveraging use of HTTP to download Fedora Atomic updates...

CVE-2015-3229

CVE-2015-3229 affects fedora-cloud-atomic.ks within spin-kickstarts. The vulnerability arises from downloading Fedora Atomic updates over HTTP, which enables remote attackers to perform man-in-the-middle attacks. Impact is exposure of update integrity/authenticity, potentially allowing tampered u...

CVE-2015-3229

fedora-cloud-atomic.ks in spin-kickstarts allows remote attackers to conduct man-in-the-middle attacks by leveraging use of HTTP to download Fedora Atomic updates...

CVE-2015-3229: Undefined Security Weakness

fedora-cloud-atomic.ks in spin-kickstarts allows remote attackers to conduct man-in-the-middle attacks by leveraging use of HTTP to download Fedora Atomic updates...

CVE-2017-8071: Improper Resource Shutdown or Release

drivers/hid/hid-cp2112.c in the Linux kernel 4.9.x before 4.9.9 uses a spinlock without considering that sleeping is possible in a USB HID request callback, which allows local users to cause a denial of service deadlock via unspecified vectors...

Important: Red Hat Security Advisory: kernel-rt security and bug fix update

An update for kernel-rt is now available for Red Hat Enterprise MRG 2.5. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

World Spin - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application World Spin published at the 'play' market has multiple vulnerabilities...

Snow Spin: Snowboard Adventure - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Snow Spin: Snowboard Adventure published at the 'play' market has multiple vulnerabilities...

Glow Spin Art - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Glow Spin Art published at the 'play' market has multiple vulnerabilities...

Ainsworth King Spin Slots - External URLs, Native code usage, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Ainsworth King Spin Slots published at the 'play' market has multiple vulnerabilities...

Spin To Win Slots - Dangerous filesystem permissions, MIT license, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Spin To Win Slots published at the 'play' market has multiple vulnerabilities...

Spin-Tops - Base64 encoded String, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Spin-Tops published at the 'play' market has multiple vulnerabilities...