CVE-2017-0161: Concurrent Execution using Shared Resource with Improper Synchronization

The Windows NetBT Session Services component on Microsoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a remote code execution vulnerability when it fails to maintain...

CVE-2017-0794: Concurrent Execution using Shared Resource with Improper Synchronization

A elevation of privilege vulnerability in the Upstream kernel scsi driver. Product: Android. Versions: Android kernel. Android ID: A-35644812...

The vulnerability of the Crypto-NAK packages, the demon program ntpd, the Network Time Protocol NTP, allows a perpetrator to bypass the authentication process.

The vulnerability of the Crypto-NAK packages, the demon program ntpd, and the Network Time Protocol NTP are related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to bypass authentication procedures...

Moderate: Red Hat Security Advisory: satellite and spacewalk security and bug fix update

An update for satellite-schema, spacewalk-backend, spacewalk-java, and spacewalk-schema is now available for Red Hat Satellite 5.8 and Red Hat Satellite 5.8 ELS. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base...

CVE-2015-5947: Concurrent Execution using Shared Resource with Improper Synchronization

SuiteCRM before 7.2.3 allows remote attackers to execute arbitrary code...

CVE-2015-5948: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition in SuiteCRM before 7.2.3 allows remote attackers to execute arbitrary code. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-5947...

Cyrus IMAP Arbitrary File Write Vulnerability

Cyrus IMAP is a free, open source Unix and Linux-based operating system for supporting IMAP Interactive Mail Access Protocol protocol mail server . A security vulnerability exists in Cyrus IMAP versions prior to 3.0.3. The vulnerability can be exploited by a remote attacker to overwrite arbitrary...

Important: Red Hat Bug Fix Advisory: redhat-virtualization-host bug fix, and enhancement update for RHV 4.1.5

Updated redhat-virtualization-host packages are now available. The ovirt-node-ng packages provide the Red Hat Virtualization Host. These packages include redhat-release-virtualization-host, ovirt-node, and rhev-hypervisor. Red Hat Virtualization Hosts RHVH are installed using a special build of R...

Virtuozzo 7 : readykernel-patch (VZA-2017-071)

According to the version of the vzkernel package and the readykernel-patch installed, the Virtuozzo installation on the remote host is affected by the following vulnerabilities : - A race condition issue leading to a use-after-free flaw was found in the way the raw packet sockets are implemented ...

CVE-2017-8257: Concurrent Execution using Shared Resource with Improper Synchronization

In all Qualcomm products with Android releases from CAF using the Linux kernel, when accessing the sderotator debug interface for register reading with multiple processes, one process can free the debug buffer while another process still has the debug buffer in use...

CVE-2017-1000111

A race condition issue was found in the way the raw packet socket implementation in the Linux kernel networking subsystem handled synchronization. A local user able to open a raw packet socket requires the CAPNETRAW capability could use this to waste resources in the kernel's ring buffer or...

Citrix Hypervisor unable to sync to NTP server

Unable to sync to NTP server...

CVE-2017-0727: Concurrent Execution using Shared Resource with Improper Synchronization

A elevation of privilege vulnerability in the Android media framework libgui. Product: Android. Versions: 7.0, 7.1.1, 7.1.2. Android ID: A-33004354...

Juniper Junos SRX Cluster Synchronization Failover Errors (JSA10806)

According to its self-reported version number and configuration, the remote Juniper Junos device is affected by a flaw in the handling of cluster synchronization and failover operations whenever the root account has been locked out. An unauthenticated, remote attacker can exploit this, via a seri...

CVE-2015-7543: Concurrent Execution using Shared Resource with Improper Synchronization

aRts 1.5.10 and kdelibs3 3.5.10 and earlier do not properly create temporary directories, which allows local users to hijack the IPC by pre-creating the temporary directory...

CVE-2017-11353: Concurrent Execution using Shared Resource with Improper Synchronization

yadm yet another dotfile manager 1.10.0 has a race condition related to the behavior of git commands in setting permissions for new files and directories, which potentially allows access to SSH and PGP keys...

The vulnerability of the software interface of the TimeZone component in the Android operating system allows a hacker to modify general resources.

The vulnerability of the TimeZone component’s software interface in the Android operating system arises from synchronization errors when using a common resource. Exploiting this vulnerability allows a remote attacker to modify the common resource...

The vulnerability of the android operating system’s sound driver ioctl handler allows a hacker to cause the device to freeze or fail to function properly.

The vulnerability of the Android operating system’s sound driver ioctl handler arises due to synchronization errors when using shared resources. Exploiting this vulnerability can allow a malicious actor to cause the device to become unresponsive or to fail to function properly...

The vulnerability of the Secure Display component in the Android operating system allows a hacker to modify the common resources.

The vulnerability of the Secure Display component in the Android operating system arises due to synchronization errors when using a shared resource. Exploiting this vulnerability allows a remote attacker to modify the shared resource...

Enterprise Plus license is required error on dashboards and reports

Cause Veeam MP license is synchronized to the Data Warehouse then reports load this information. If license is invalid in the Data Warehouse due to Synchronization server having issue this error will occur. Solution 1. Open SCOM Operations Manager Console. 2. Select Discovered Inventory 3. Filter...