The vulnerability of Qualcomm’s TrustZone microprogramming software technology allows for breaches of the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the TrustZone technology snooping mode of Qualcomm’s Secure Execution Environment for Android, as found in the CAF repository, stems from synchronization errors when using a common resource. Exploiting this vulnerability could allow a malicious actor, operating remotely, to...

The vulnerability of Qualcomm’s TrustZone microprogramming software technology allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the TrustZone technology’s authentication mode for Qualcomm Secure Execution Environment for Android, as found in the CAF repository, stems from synchronization errors when using a common resource. Exploiting this vulnerability could allow an attacker operating remotely to...

The vulnerability of the TrustZone technology (QFPROM mode of Qualcomm Secure Execution Environment) allows for breaches of the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the TrustZone technology QFPROM mode of Qualcomm Secure Execution Environment for Android from the CAF repository arises due to synchronization errors when using a common resource. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality,...

Update Rollup 13 for System Center 2012 R2 Data Protection Manager

Update Rollup 13 for System Center 2012 R2 Data Protection Manager Introduction This article describes the issues that are fixed in Update Rollup 13 for Microsoft System Center 2012 R2 Data Protection Manager. It also contains the installation instructions for this update. Note Existing Data...

Fatal vulnerability will allow an attacker to bypass Apple's OTR signature verification and steal your iCloud keychain information-vulnerability warning-the black bar safety net

! Background content In the analysis of the iOS platform and sandbox escape about the attack surface when we in the iCloud keychain sync feature of OTR implementation has discovered a serious security vulnerability. iCloud keychain sync feature allows users in a secure manner across the device to...

Race condition

All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer nvlddmkm.sys where user can trigger a race condition due to lack of synchronization in two functions leading to a denial of service or potential escalation of privileges...

CVE-2017-0343

CVE-2017-0343 affects the NVIDIA Windows GPU Display Driver (kernel mode layer nvlddmkm.sys). The connected sources confirm a race condition due to lack of synchronization in the nvlddmkm.sys handler, which can lead to denial of service or potential privilege escalation. Affected component is the...

Security Bulletin: NVIDIA GPU Display driver contains multiple vulnerabilities in the kernel mode layer handler

Vulnerability Details The following sections summarize the vulnerabilities and lists their CVSS risk assessments. CVE-2017-0341 NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgDdiEscape, where user provided input can trigger an acces...

EulerOS 2.0 SP2 : ntp (EulerOS-SA-2017-1024)

According to the versions of the ntp packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - It was found that when ntp is configured with rate limiting for all associations the limits are also applied to responses received from its...

Based on jemalloc Android exploit skills----CENSUS-bug warning-the black bar safety net

Background description jemalloc-related research argp and huku in 2012 in Phrack published on: jemalloc memory allocator a separate use of themade-based on FreeBSD libc POC. argp and huku in 2012 BlackHat published: in Firefo play bad jemalloc metadata. argp in 2015 INFILTRATE on jemalloc exploit...

EulerOS 2.0 SP1 : ntp (EulerOS-SA-2017-1023)

According to the versions of the ntp packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - It was found that when ntp is configured with rate limiting for all associations the limits are also applied to responses received from its...

[SECURITY] Fedora 24 Update: ntp-4.2.6p5-44.fc24

The Network Time Protocol NTP is used to synchronize a computer's time with another reference time source. This package includes ntpd a daemon which continuously adjusts system time and utilities used to query and configure the ntpd daemon. Perl scripts ntp-wait and ntptrace are in the ntp-perl...

SAP SQL Anywhere Buffer Overflow Vulnerability

SAP SQL Anywhere is a data management and enterprise synchronization solution from SAP, Germany. The solution provides database management and data movement technology for rapid development and deployment of database-enabled applications. A buffer overflow vulnerability exists in the MobiLink...

The vulnerability of the OpenBSD operating system, which allows a hacker to trigger a service failure

The vulnerability of the thrsleep function in the kernel/kernsynch.c file of the OpenBSD operating system exists due to insufficient checking of input data. Exploiting this vulnerability could allow a local attacker to cause a kernel panic by using a specially crafted value as the tsp parameter i...

Vulnerabilities of iOS and Mac OS X operating systems, allowing attackers to execute arbitrary code in a privileged context

The vulnerability of the Kernel component in iOS and Mac OS X operating systems arises due to synchronization errors when using a shared resource. Exploiting this vulnerability allows an attacker to execute arbitrary code in a privileged context racing environment through a specially created...

CVE-2016-10310

Buffer overflow in the MobiLink Synchronization Server component in SAP SQL Anywhere 17 and possibly earlier allows remote authenticated users to cause a denial of service resource consumption and process crash by sending a crafted packet several times, aka SAP Security Note 2308778...

CVE-2016-10310

Buffer overflow in the MobiLink Synchronization Server component in SAP SQL Anywhere 17 and possibly earlier allows remote authenticated users to cause a denial of service resource consumption and process crash by sending a crafted packet several times, aka SAP Security Note 2308778...

Design Flaw Vulnerability in Tencent PC Butler's Synchronized Objects for Marking Protection Status

Tencent PC Manager Tencent PC Manager/formerly known as QQ PC Manager is a free security software from Tencent. A design flaw exists in the synchronization object used by Tencent PC Manager to mark the protection state, which is caused by not properly setting the access control of the...

The vulnerability of the QEMU hardware emulation software allows a hacker to trigger a service failure or increase their privileges in the guest operating system.

The vulnerability of the QEMU hardware emulation software arises from synchronization errors when using a shared resource. Exploiting this vulnerability can allow a remote attacker to cause service failures or increase their privileges in the guest operating system...

Sync Breeze v9.5.16 - Buffer Overflow Vulnerabilities

Document Title: =============== Sync Breeze v9.5.16 - Buffer Overflow Vulnerabilities References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2045 Video: https://www.vulnerability-lab.com/getcontent.php?id=2049 Release Date: ============= 2017-03-28 Vulnerabili...