The vulnerability in the socket implementation with address mapping AF_VSOCK in Linux kernel allows attackers to escalate their privileges.

The vulnerability in the socket implementation with AFVSOCK addressing net/vmwvsock/afvsock.c in the Linux kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to gain increased privileges...

High Availability Synchronization on NetScaler Appliance

This article contains information about synchronization between appliances that are part of a high availability setup. Background High availability synchronization is the process by which configurations are kept identical between the appliances. It is not the process that runs individual commands...

PT-2021-3220

Name of the Vulnerable Software and Affected Versions LOTCMAN:PLM affected versions not specified Description The issue is related to the data synchronization module, which can be exploited at any time on demand by a user or by a special utility scheduler. This vulnerability allows for unlimited...

Directory Traversal

isync is vulnerable to directory traversal. The vulnerability exists as validations of the mailbox names returned by IMAP LIST/LSUB do not occur allowing a malicious or compromised server to use specially crafted mailbox names containing .. path components to access data outside the designated...

[ASA-202102-38] isync: directory traversal

Arch Linux Security Advisory ASA-202102-38 ========================================== Severity: High Date : 2021-02-27 CVE-ID : CVE-2021-20247 Package : isync Type : directory traversal Remote : Yes Link : https://security.archlinux.org/AVG-1598 Summary ======= The package isync before version...

CVE-2021-20247

A flaw was found in mbsync before v1.3.5 and v1.4.1. Validations of the mailbox names returned by IMAP LIST/LSUB do not occur allowing a malicious or compromised server to use specially crafted mailbox names containing '..' path components to access data outside the designated mailbox on the...

CVE-2021-26933: Undefined Security Weakness

An issue was discovered in Xen 4.9 through 4.14.x. On Arm, a guest is allowed to control whether memory accesses are bypassing the cache. This means that Xen needs to ensure that all writes such as the ones during scrubbing have reached the memory before handing over the page to a guest...

Squid 5.x < 5.0.3 Multiple Vulnerabilities

According to its self-reported version number, the version of Squid installed on the remote host is 5.x 5.0.3 or prior to 4.12. It is, therefore, affected by multiple vulnerabilities: - Due to an incorrect synchronization, Squid is vulnerable to a denial of service attack when processing objects ...

Alibaba otter manager distributed database synchronization system suffers from information leakage vulnerability

Alibaba otter manager distributed database synchronization system is based on database incremental log parsing , quasi real-time synchronization to the mysql/oracle database in this server room or off-site server room , a distributed database synchronization system . Alibaba otter manager...

Browser sync—what are the risks of turning it on?

Modern browsers include synchronization features like Google Chromes Sync so that all your browsers, on all your devices, share the same tabs, passwords, plugins, and other features. While this is certainly convenient, particularly when youre migrating to a new device, synchronizing browsers also...

Command Execution Vulnerability in Yitoa's Office Drawing Software

Yitoa Graph is a simple and easy-to-use graphical expression workbench that enables the drawing of hundreds of graphical charts in professional fields such as flowcharts, architecture diagrams, engineering diagrams, mind maps, etc., and also provides a whiteboard for brainstorming and arbitrary...

Rust 安全漏洞

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A security vulnerability in Rust rusb crate before 0.7.0, which stems from a lack of send and synchronization restrictions, can be exploited by an attacker to cause data contention and memory corruption...

Rust 安全漏洞

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A security vulnerability exists in Rust im crate through 2020-11-09, which stems from a limitation that TreeFocus does not have a send feature or a synchronization feature, resulting in a data contention...

Rust 安全漏洞

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. rust mayqueue crate through 2020-11-10 A security vulnerability exists due to a limitation in the queue's lack of send feature or synchronization feature, which could be exploited by an attacker to cause a memor...

Rust 安全漏洞

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A security vulnerability exists in Rust hashconsing crate before 1.1.0, which stems from a limitation in HConsed's lack of sending or synchronization features, and could be exploited by an attacker to cause a...

NICER Protocol Deep Dive: Internet Exposure of NTP

Welcome to the NICER Protocol Deep Dive blog series! When we started researching what all was out on the internet way back in January, we had no idea we'd end up with a hefty, 137-page tome of a research report. The sheer length of such a thing might put off folks who might otherwise learn a thin...

Issues with Workspace Environment Management (WEM) after deprecation of the legacy sync framework

Microsoft Sync Framework 2.1 reached End of Life on January 12, 2021. So, WEM has removed the legacy sync service based on that framework, and instead uses a new sync framework, Dotmim.Sync, an open-source sync framework. By default, the legacy sync service uses the port 8285, and the new sync...

CVE-2020-36208: Improper Synchronization

An issue was discovered in the conquer-once crate before 0.3.2 for Rust. Thread crossing can occur for a non-Send but Sync type, leading to memory corruption...

CVE-2020-36217: Improper Synchronization

An issue was discovered in the mayqueue crate through 2020-11-10 for Rust. Because Queue does not have bounds on its Send trait or Sync trait, memory corruption can occur...

CVE-2020-11152

Race condition in HAL layer while processing callback objects received from HIDL due to lack of synchronization between accessing objects in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...