4243 matches found
Rust futures-util crate security vulnerability
Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A security vulnerability exists in futures-util crate before 0.3.2 for Rust, which stems from the fact that FuturesUnordered may result in data corruption due to improper synchronization handling...
The vulnerability of the Ansible configuration management system, related to synchronization errors when using a shared resource, allows a perpetrator to escalate their privileges and execute arbitrary code.
The vulnerability of the Ansible configuration management system is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to increase their privileges and execute arbitrary code...
The vulnerability of the Junos operating system arises from synchronization errors when using shared resources, allowing a attacker to trigger an extended denial-of-service attack.
The vulnerability of the Multiservices PIC Management Daemon mspmand implementation in the Junos operating system arises due to synchronization errors when using a shared resource. Exploiting this vulnerability can allow a malicious actor to initiate an extended denial-of-service attack from a...
openGauss: Configuring an NTP Server
The Network Time Protocol NTP is used to synchronize time between clients and servers on the network. By configuring an NTP, you can synchronize the clock of a PC to the Coordinated Universal Time UTC and synchronize system clocks of multiple OSs. Copyright C 2020 Greenbone Networks GmbH Some tex...
Philips Hue Resource Management Error Vulnerability
Philips Hue is a smart lighting device from the Chinese company Philips. A security vulnerability exists in Philips Hue, the vulnerability stems from a SYN flood sent on tcp port 80 will freeze the Philips Hue's hub and it will stop responding...
PT-2020-17627 · Rust · V9 Crate
Name of the Vulnerable Software and Affected Versions: v9 crate through 2020-12-18 Description: An issue was discovered in the v9 crate, where affected versions unconditionally implement Sync for SyncRef. This definition allows data races if &T is accessible through &SyncRef. The SyncRef derives...
Metasploit Wrap-Up
In case you missed it, this past weekend the Metasploit team hosted the latest Metasploit CTF. We saw 1903 users register in this round and some excellent writeups have been published on what they found. If you participated but haven’t had a chance to fill out our feedback survey you can find it...
The vulnerability of the ImageBurner browser component in Google Chrome allows a hacker to execute arbitrary code.
The vulnerability of the ImageBurner browser component in Google Chrome arises due to synchronization errors when using a shared resource. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
NewStart CGSL CORE 5.04 / MAIN 5.04 : ntp Vulnerability (NS-SA-2020-0083)
The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has ntp packages installed that are affected by a vulnerability: - ntpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows an off-path attacker to block unauthenticated synchronization via a server mode packet with a spoofe...
The vulnerability of Junos operating system’s MX series routers, related to synchronization errors when using shared resources, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of Junos operating system’s MX series routers is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information...
The vulnerability of Xen hypervisors arises from the simultaneous execution using a shared resource with incorrect synchronization. This “race condition” allows a malicious actor to cause a service failure or increase their privileges.
The vulnerability of Xen hypervisors arises from the simultaneous execution using a shared resource with incorrect synchronization. Exploiting this vulnerability can allow an attacker to cause service failures or increase their privileges...
Vulnerability in the Microprogramming Software of the Intel Converged Security and Manageability Engine (CSME) and the Intel Server Platform Services (SPS) allows attackers to enhance their privileges.
The vulnerability in the Microprogramming Software of the Intel Converged Security and Manageability Engine CSME and the Microprogramming Software of the Intel Server Platform Services SPS is caused by synchronization errors when using a shared resource. Exploiting this vulnerability can allow an...
CVE-2020-3471
A vulnerability in Cisco Webex Meetings and Cisco Webex Meetings Server could allow an unauthenticated, remote attacker to maintain bidirectional audio despite being expelled from an active Webex session. The vulnerability is due to a synchronization issue between meeting and media services on a...
CVE-2020-3471
A vulnerability in Cisco Webex Meetings and Cisco Webex Meetings Server could allow an unauthenticated, remote attacker to maintain bidirectional audio despite being expelled from an active Webex session. The vulnerability is due to a synchronization issue between meeting and media services on a...
Design/Logic Flaw
A vulnerability in Cisco Webex Meetings and Cisco Webex Meetings Server could allow an unauthenticated, remote attacker to maintain bidirectional audio despite being expelled from an active Webex session. The vulnerability is due to a synchronization issue between meeting and media services on a...
CVE-2020-3471 Cisco Webex Meetings and Cisco Webex Meetings Server Unauthorized Audio Information Exposure Vulnerability
A vulnerability in Cisco Webex Meetings and Cisco Webex Meetings Server could allow an unauthenticated, remote attacker to maintain bidirectional audio despite being expelled from an active Webex session. The vulnerability is due to a synchronization issue between meeting and media services on a...
RUSTSEC-2020-0116 PinSlab<T> and Unordered<T, S> need bounds on their Send/Sync traits
Affected versions of this crate unconditionally implemented Send & Sync for types PinSlab & Unordered. This allows sending non-Send types to other threads and concurrently accessing non-Sync types from multiple threads. This can result in a data race & memory corruption when types that provide...
EulerOS Virtualization 3.0.6.6 : ntp (EulerOS-SA-2020-2450)
According to the version of the ntp packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - ntpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows an off-path attacker to block unauthenticated synchronization via a server...
kernel: padata: fix UAF in padata_reorder
A use-after-free vulnerability was found in the Linux kernel's padata subsystem, in the padatareorder function. Caused by improper synchronization controls, this vulnerability can occur when a reference-counted data structure pd is decremented in one thread, freeing it, while another thread still...
