Moderate: Red Hat Security Advisory: RHUI 4.5.0 release - Security, Bug Fixes, and Enhancements

An updated version of Red Hat Update Infrastructure RHUI is now available. RHUI 4.5 fixes several security and operational bugs and also adds several new features. Red Hat Update Infrastructure RHUI offers a highly scalable, highly redundant framework that enables you to manage repositories and...

LOLBAS in the Wild: 11 Living-Off-The-Land Binaries That Could Be Used for Malicious Purposes

Cybersecurity researchers have discovered a set of 11 living-off-the-land binaries-and-scripts LOLBAS that could be maliciously abused by threat actors to conduct post-exploitation activities. "LOLBAS is an attack method that uses binaries and scripts that are already part of the system for...

Linux Kernel Heap Buffer Overflow DoS

The vulnerability of the skcipherrecvmsg function in the Linux operating system’s kernel code is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause service failures...

PT-2023-4386 · Microsoft · Windows Ldap +1

Name of the Vulnerable Software and Affected Versions: Windows Lightweight Directory Access Protocol LDAP affected versions not specified Description: The issue is caused by synchronization errors when using a shared resource in the Windows Lightweight Directory Access Protocol LDAP implementatio...

PT-2023-4369 · Microsoft · Windows Projected File System +1

Name of the Vulnerable Software and Affected Versions: Windows Projected File System affected versions not specified Description: The issue is caused by synchronization errors when using a shared resource in the Windows Projected File System component. Exploitation of this issue may allow an...

PT-2023-5630 · Mediatek · Mediatek Microcode

Name of the Vulnerable Software and Affected Versions: MediaTek microcode affected versions not specified Description: The issue is related to a possible use after free due to a race condition in the thermal component, which could lead to local escalation of privilege. System execution privileges...

PT-2023-5631 · Mediatek · Mediatek Microcode

Name of the Vulnerable Software and Affected Versions: MediaTek microcode affected versions not specified Description: The issue is related to a possible use after free due to a race condition in thermal management, which could lead to local escalation of privilege. System execution privileges ar...

Portmapper Service B&R Automation Runtime DoS

The vulnerability of the Portmapper service in B&R Automation Runtime software for process control and management involves initialization errors. Exploiting this vulnerability can allow a malicious actor to trigger a service failure by sending SYN requests...

Network Load Balancing Windows Code Execution

The vulnerability of Network Load Balancing NLB for Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Bluetooth Unisoc Chipset Synchronization Error DoS

The vulnerability of the Bluetooth microprogramming software-based Unisoc chipsets is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow attackers to cause service failures...

DNS Server Windows Code Execution

The vulnerability of the DNS Server component of the Windows operating system is related to synchronization errors when using a shared resource. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Active Directory Certificate Services Code Execution

The vulnerability of the Active Directory Certificate Services AD CS service, which manages the distribution and usage of certificates on Windows operating systems, is related to synchronization errors when using a shared resource. Exploiting this vulnerability allows an attacker to execute...

DNS Server Windows Code Execution

The vulnerability of the DNS Server component of the Windows operating system is related to synchronization errors when using a shared resource. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

DNS Server Windows Code Execution

The vulnerability of the DNS Server component of the Windows operating system is related to synchronization errors when using a shared resource. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

DNS Server Windows Code Execution

The vulnerability of the DNS Server component of the Windows operating system is related to synchronization errors when using a shared resource. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2023-37904: Concurrent Execution using Shared Resource with Improper Synchronization

Discourse is an open source discussion platform. Prior to version 3.0.6 of the stable branch and version 3.1.0.beta7 of the beta and tests-passed branches, more users than permitted could be created from invite links. The issue is patched in version 3.0.6 of the stable branch and version...

Data Synchronization Application Disclosure Information

The vulnerability of the data synchronization application, Issue Sync – Synchronization for Jira, is related to the disclosure of information. Exploiting this vulnerability allows a malicious actor to obtain user credentials through a request at /rest/synchronizer/1.0/technicalUser...

Windows kernel Unauthorized Access

The vulnerability of the Windows operating system’s kernel is related to synchronization errors when using a shared resource „Race Condition“. Exploiting this vulnerability can allow an attacker to gain unauthorized access to the device...

vmwgfx Driver Disclosure

The vulnerability of the vmwgfx driver in the Linux operating system arises due to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security measures...

Microsoft Excel Synchronization Unauthorized Access

The vulnerability of Microsoft Excel editors arises due to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to gain unauthorized access to the device...