389-ds-base: SIGSEGV in sync_repl

A flaw was found In 389-ds-base. When the Content Synchronization plugin is enabled, an authenticated user can reach a NULL pointer dereference using a specially crafted query. This flaw allows an authenticated attacker to cause a denial of service...

CVE-2022-44676: Concurrent Execution using Shared Resource with Improper Synchronization

Windows Secure Socket Tunneling Protocol SSTP Remote Code Execution Vulnerability...

CVE-2022-44669: Concurrent Execution using Shared Resource with Improper Synchronization

Windows Error Reporting Elevation of Privilege Vulnerability...

389-ds-base: SIGSEGV in sync_repl

A flaw was found In 389-ds-base. When the Content Synchronization plugin is enabled, an authenticated user can reach a NULL pointer dereference using a specially crafted query. This flaw allows an authenticated attacker to cause a denial of service...

Windows ALPC Privilege Escalation

The vulnerability of the Advanced Local Procedure Call ALPC in the Windows operating system arises due to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to increase their privileges within the system...

PT-2022-7702

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the simultaneous execution of commands using a shared resource with incorrect synchronization in the Linux kernel's drm/vmwgfx component. This can lead to a crash...

Amazon Linux 2 : 389-ds-base (ALAS-2022-1879)

The version of 389-ds-base installed on the remote host is prior to 1.3.10.2-17. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2022-1879 advisory. A flaw was found In 389-ds-base. When the Content Synchronization plugin is enabled, an authenticated user can reach a NULL...

Mac OS input source not synchronized correctly to remote applications or desktops

With Citrix Workspace app for Mac 2212 or previous version on Mac OS 13, you might encounter problems that client input sources cannot be synchronized correctly to your remote applications or desktops. For example, for Mac OS 13, the default English input source is English - ABC, while in the pas...

Medium: 389-ds-base

Issue Overview: A flaw was found In 389-ds-base. When the Content Synchronization plugin is enabled, an authenticated user can reach a NULL pointer dereference using a specially crafted query. This flaw allows an authenticated attacker to cause a denial of service. CVE-2022-2850 Affected Packages...

PPTP Windows Code Execution

The vulnerability of the Point to Point Tunneling Protocol PPTP implementation in Windows operating systems is related to synchronization errors when using a shared resource “Race Situation”. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...

Microsoft Windows ALPC Privilege Escalation

The vulnerability of the Advanced Local Procedure Call ALPC in Microsoft Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow attackers to gain increased privileges...

PPTP Windows Code Execution

The vulnerability of the Point to Point Tunneling Protocol PPTP implementation in Windows operating systems is related to synchronization errors when using a shared resource “Race Situation”. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...

Firefox Synchronization Disclosure

The vulnerability of Firefox browsers is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to disclose sensitive information...

389-ds-base: SIGSEGV in sync_repl

A flaw was found In 389-ds-base. When the Content Synchronization plugin is enabled, an authenticated user can reach a NULL pointer dereference using a specially crafted query. This flaw allows an authenticated attacker to cause a denial of service...

PPTP Windows Code Execution

The vulnerability of the Point to Point Tunneling Protocol PPTP implementation in Windows operating systems is related to synchronization errors when using a shared resource “Race Situation”. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...

Potential PirexReward's producerTokens's rewardToken unsynced with PirexGmx rewardToken can miss calculate the actual reward for user

Lines of code Vulnerability details Impact Potential PirexReward's producerTokens's rewardToken unsynced with PirexGmx rewardToken can miss calculate the actual reward for user Proof of Concept PirexReward initialization does not include rewardToken initialization for producerTokens. Meanwhile...

Point-to-Point Tunneling Protocol Code Execution

The vulnerability of the Windows Point-to-Point Tunneling Protocol lies in synchronization errors when using a shared resource. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2022-45887: Concurrent Execution using Shared Resource with Improper Synchronization

An issue was discovered in the Linux kernel through 6.0.9. drivers/media/usb/ttusb-dec/ttusbdec.c has a memory leak because of the lack of a dvbfrontenddetach call...

CVE-2022-45886: Concurrent Execution using Shared Resource with Improper Synchronization

An issue was discovered in the Linux kernel through 6.0.9. drivers/media/dvb-core/dvbnet.c has a .disconnect versus dvbdeviceopen race condition that leads to a use-after-free...

Linux flush_to_ldisc Buffer Overflow DoS

The vulnerability of the flushtoldisc function in the Linux operating system’s kernel is related to the simultaneous execution using shared resources with incorrect synchronization. Exploiting this vulnerability allows an attacker to gain access to confidential data and also cause service failure...