Intel Unison Security Vulnerability

Intel Unison is an application from Intel Corporation USA used to synchronize various data before PCs and smartphones. A security vulnerability exists in Intel Unison software. An attacker exploiting this vulnerability could cause elevation of privilege, information disclosure, or denial of servi...

CVE-2023-46132: Concurrent Execution using Shared Resource with Improper Synchronization

Hyperledger Fabric is an open source permissioned distributed ledger framework. Combining two molecules to one another, called "cross-linking" results in a molecule with a chemical formula that is composed of all atoms of the original two molecules. In Fabric, one can take a block of transactions...

PT-2023-6950

Name of the Vulnerable Software and Affected Versions Windows Kernel affected versions not specified Description The issue is related to synchronization errors when using a shared resource in the Windows operating system kernel. This can allow an attacker to elevate their privileges. The estimate...

Intel Unison Security Vulnerability

Intel Unison is an application from Intel Corporation USA used to synchronize various data before PCs and smartphones. A security vulnerability exists in Intel Unison software. An attacker exploiting this vulnerability could cause elevation of privilege, information disclosure, or denial of servi...

Intel Unison Security Vulnerability

Intel Unison is an application from Intel Corporation USA used to synchronize various data before PCs and smartphones. A security vulnerability exists in Intel Unison software. An attacker exploiting this vulnerability could cause elevation of privilege, information disclosure, or denial of servi...

Linux kernel resource management error vulnerability

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the fact that the function nfttransgccatchall does not remove the catchall collection element from the...

CVE-2023-36405: Concurrent Execution using Shared Resource with Improper Synchronization

Windows Kernel Elevation of Privilege Vulnerability...

Linux kernel setsockopt getsockopt

The vulnerability of the setsockopt and getsockopt functions in the Linux operating system’s kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, or accessibility of...

The Transfer event is emitted successfully in MinterContract#mintAndAuction() even when the transaction has failed, leading to inaccurate accounting in off-chain systems.

Lines of code Vulnerability details Impact The airDropTokens function in the NextGenCore contract is responsible for minting and transferring an NFT to a user, exclusively called by the MinterContract. However, the execution of airDropTokens within MinterContractmintAndAuction prior to critical...

CVE-2023-20902: Concurrent Execution using Shared Resource with Improper Synchronization

A timing condition in Harbor 2.6.x and below, Harbor 2.7.2 and below, Harbor 2.8.2 and below, and Harbor 1.10.17 and below allows an attacker with network access to create jobs/stop job tasks and retrieve job task information...

CVE-2022-48613: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition vulnerability in the kernel module. Successful exploitation of this vulnerability may cause variable values to be read with the condition evaluation bypassed...

CVE-2023-47111: Concurrent Execution using Shared Resource with Improper Synchronization

ZITADEL provides identity infrastructure. ZITADEL provides administrators the possibility to define a Lockout Policy with a maximum amount of failed password check attempts. On every failed password check, the amount of failed checks is compared against the configured maximum. Exceeding the limit...

kernel: Linux kernel KVM: Denial of Service due to incorrect kvm_arm_init failure handling in finalize_pkvm

A flaw was found in the Linux kernel's Kernel-based Virtual Machine KVM for arm64 architectures. This vulnerability arises from a lack of synchronization between the finalizepkvm and kvmarminit initialization calls. A local attacker with low privileges could exploit this by triggering a scenario...

kernel: nfc: pn533: Fix use-after-free bugs caused by pn532_cmd_timeout

In the Linux kernel, the following vulnerability has been resolved: nfc: pn533: Fix use-after-free bugs caused by pn532cmdtimeout When the pn532 uart device is detaching, the pn532uartremove is called. But there are no functions in pn532uartremove that could delete the cmdtimeout timer, which wil...

kernel: drm/amdkfd: Add sync after creating vram bo

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Add sync after creating vram bo There will be data corruption on vram allocated by svm if the initialization is not complete and application is writting on the memory. Adding sync to wait for the initialization...

Rocky Linux 9 : 389-ds-base (RLSA-2022:8162)

The remote Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2022:8162 advisory. - A vulnerability was discovered in the 389 Directory Server that allows an unauthenticated attacker with network access to the LDAP port to cause a...

CVE-2023-5088: Incorrect Synchronization

A bug in QEMU could cause a guest I/O operation otherwise addressed to an arbitrary disk offset to be targeted to offset 0 instead potentially overwriting the VM's boot code. This could be used, for example, by L2 guests with a virtual disk vdiskL2 stored on a virtual disk of an L1 vdiskL1...

Linux kernel Synchronization Code Execution

The vulnerability of the Linux operating system’s kernel arises from synchronization errors when using shared resources. Exploiting this vulnerability allows an attacker to execute arbitrary code...

Android kernel Privilege Escalation

The vulnerability of Android operating system kernels is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow attackers to increase their privileges...

VMware Fusion Privilege Escalation

The vulnerability of VMware Fusion relates to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to increase their privileges...