Linux kernel mptctl_ioctl Buffer Overflow

The vulnerability of the mptctlioctl function drivers/message/fusion/mptctl.c in the Linux kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected...

PDF Viewer Synchronization Code Execution

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are caused by synchronization errors when using a shared resource. Exploiting these...

Xen Hypervisor Synchronization Error Privilege Escalation

The vulnerability of Xen hypervisors arises due to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause service failures or increase their privileges by adding a device with persistent communication capabilities...

QEMU Media Transfer Protocol Unauthorized Access

The vulnerability of the QEMU implementation of the Media Transfer Protocol is caused by synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to information...

Linux driver file.c DoS

The vulnerability in the drivers/usb/core/file.c file of the Linux operating system arises due to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause a service failure...

Privilege Escalation

The vulnerability of the compatibility subsystem for running Linux applications stems from synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to increase their privileges through a specially created application...

Oilpan Component Google Chrome Data Compromise

The vulnerability of the Oilpan component in the Google Chrome browser is caused by synchronization errors when using a common resource. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information through a...

Apache HTTP Server Auth Bypass

The vulnerability of the modauthdigest component in the Apache HTTP Server arises due to synchronization errors when using a shared resource. Exploiting this vulnerability allows a malicious actor to perform authentication using a different username...

Google Chrome Omnibox Component Replacement

The vulnerability of Google Chrome arises due to synchronization errors when using a common resource. Exploiting this vulnerability allows an attacker to replace the content of the Omnibox component URL by using a specially created HTML page...

Apache Tomcat Sensitive Information Disclosure

The vulnerability of the Apache Tomcat application server arises due to synchronization errors when using a shared resource. Exploiting this vulnerability allows a malicious actor to disclose sensitive information remotely...

Android libgui Privilege Escalation

The vulnerability of the Android operating system’s libgui library arises due to synchronization errors when using a shared resource. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...

Intel microprocessor Synchronization Disclosure

The vulnerability of Intel microprogramming software arises from synchronization errors when using a common resource. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information that is protected by the system...

Eclipse OpenJ9 Memory Corruption

The vulnerability of the Eclipse OpenJ9 virtual machine is related to synchronization errors when using a shared resource “Race Condition”. Exploiting this vulnerability can allow an attacker operating remotely to cause memory corruption...

Zstandard Compression Code Execution

The vulnerability of the compression function in the Zstandard library for data compression is related to synchronization errors when using a shared resource “Race Condition”. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

PT-2019-4471

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.2.10 Description The issue is caused by synchronization errors when accessing a shared resource in the Linux kernel's USB character device driver layer. This can be exploited by a malicious USB device,...

Intel Graphics Driver Synchronization Error

The vulnerability of Intel Graphics Drivers stems from synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause service failures...

nginx Phusion Passenger Confidential Data Access

The vulnerability of the nginx web server module in Phusion Passenger is related to the simultaneous use of a shared resource and synchronization errors when the passengerinstanceregistrydir configuration is not set strictly enough. Exploiting this vulnerability can allow an attacker to gain acce...

Systemd DoS

The vulnerability of Systemd relates to the simultaneous use of shared resources and synchronization errors. Exploiting this vulnerability can allow a remote attacker to cause service failures...

Linux Kernel Heap Buffer Overflow DoS

The vulnerability of the kvmioctlcreatedevice function in Linux operating systems arises due to synchronization errors when using shared resources. Exploiting this vulnerability can allow a remote attacker to cause service failures...

SUSE-SU-2018:3467-1 Security update for smt

SMT was updated to version 3.0.38. Following security issue was fixed: - CVE-2018-12472: Harden hostname check during sibling check by forcing double reverse lookup bsc1104076 Following non security issues were fixed: - Add migration path check when registration sharing is enabled - Fix sibling...