Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a fallback operation and unsynchronized decision making that could lead to a race condition...

Race Condition

Overview Affected versions of this package are vulnerable to Race Condition due to unsynchronized calls to newvertex that resize internal std::vectors outside of a mutex, this can result in potential memory corruption or application crashes. Remediation Upgrade libigl to version 2.5.0 or higher...

Race Condition

Overview Affected versions of this package are vulnerable to Race Condition due to unsynchronized calls to newvertex that resize internal std::vectors outside of a mutex, this can result in potential memory corruption or application crashes. Remediation Upgrade libigl/libigl to version 2.5.0 or...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an unsynchronized instruction cache, which could lead to the execution of erroneous instructions...

The vulnerability of the net/core/dev.c component in the Linux operating system’s kernel allows a hacker to gain access to confidential data.

The vulnerability in the net/core/dev.c component of the Linux operating system’s kernel involves the simultaneous execution using shared resources with incorrect synchronization. Exploiting this vulnerability can allow an attacker to gain access to confidential data...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from unsynchronized probing of the dummy regulator driver, which could lead to null pointer dereferencing...

Race Condition

Overview pyFFTW is an A pythonic wrapper around FFTW, the FFT library, presenting a unified interface for all the supported transforms. Affected versions of this package are vulnerable to Race Condition due to improper synchronization when accessing shared resources. This can lead to memory...

UBUNTU-CVE-2022-48983

In the Linux kernel, the following vulnerability has been resolved: iouring: Fix a null-ptr-deref in iotctxexitcb Syzkaller reports a NULL deref bug as follows: BUG: KASAN: null-ptr-deref in iotctxexitcb+0x53/0xd3 Read of size 4 at addr 0000000000000138 by task file1/1955 CPU: 1 PID: 1955 Comm:...

The vulnerability of the T.38 discanner, a traffic analysis tool for computer networks used by Wireshark, allows a hacker to cause a service failure.

The vulnerability of the T.38 discapper, a traffic analysis tool for computer networks developed by Wireshark, is related to unsynchronized memory management. Exploiting this vulnerability can allow an attacker to cause a service failure by sending a specially crafted file or packet...

Siemens SCALANCE Family Products Unsynchronized Access to Shared Data in a Multithreaded Context (CVE-2023-44374)

A vulnerability has been identified in RUGGEDCOM RM1224 LTE4G EU, RUGGEDCOM RM1224 LTE4G NAM, SCALANCE M804PB, SCALANCE M812-1 ADSL- Router Annex A, SCALANCE M812-1 ADSL-Router Annex B, SCALANCE M816-1 ADSL-Router Annex A, SCALANCE M816-1 ADSL-Router Annex B, SCALANCE M826-2 SHDSL-Router, SCALANC...

Unsynchronized Access to Shared Data Vulnerability in Multiple Siemens Products in a Multi-Threaded Context

The SCALANCE M-800, MUM-800 and S615 and the RUGGEDCOM RM1224 are industrial routers.The SCALANCE W products are wireless communication devices for connecting industrial components, such as Programmable Logic Controllers PLCs or Human Machine Interfaces HMIs, that comply with the IEEE 802.11...

PT-2023-6996 · Siemens · Scalance M812-1 +15

Name of the Vulnerable Software and Affected Versions: RUGGEDCOM RM1224 LTE4G EU versions V8.0 RUGGEDCOM RM1224 LTE4G NAM versions V8.0 SCALANCE M804PB versions V8.0 SCALANCE M812-1 ADSL-Router versions V8.0 SCALANCE M816-1 ADSL-Router versions V8.0 SCALANCE M826-2 SHDSL-Router versions V8.0...

The vulnerability of the Wireshark traffic analyzer, related to unsynchronized memory management, allows a hacker to cause a service failure.

The vulnerability of the Wireshark traffic analyzer relates to unsynchronized memory management. Exploiting this vulnerability can allow a hacker to cause a service failure...

Denial Of Service (DoS)

github.com/cometbft/cometbft is vulnerable to Denial of Service DoS attacks. A list and a map are the two data structures that the mempool utilizes to keep track of unfinished transactions. The same transaction may occur several times if these structures are out of sync, even though they should b...

CometBFT 安全漏洞

CometBFT is a Byzantine Fault Tolerant BFT middleware that employs state transducers written in any programming language and can be safely replicated on many machines. A security vulnerability exists in CometBFT versions prior to v0.37.0, v0.37.1, and v0.34.28, which stems from the fact that the...

The vulnerability of the UDPv6 network protocol implementation in Linux operating systems allows attackers to cause service failures.

The vulnerability of the UDPv6 network protocol implementation in Linux operating systems is related to concurrent access to the dstentry structure during a race condition, due to the lack of synchronization in the sksetupcaps function within the net/core/sock.c module. Exploiting this...

DEBIAN-CVE-2022-42333

x86/HVM pinned cache attributes mis-handling This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. To allow cachability control for HVM guests with passed through devices, an interface exists to explicitly override defaults...

SUSE CVE-2020-25668

A flaw was found in Linux Kernel because access to the global variable fgconsole is not properly synchronized leading to a use after free in confontop...

SUSE CVE-2022-1734

A flaw in Linux Kernel found in nfcmrvlnciunregisterdev in drivers/nfc/nfcmrvl/main.c can lead to use after free both read or write when non synchronized between cleanup routine and firmware download routine...

The vulnerability of Crossbeam Utils, a parallel programming tool, on 32-bit systems arises from the simultaneous execution using a shared resource with improper synchronization. This allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of CrossbeamUtils, a parallel programming tool, on 32-bit systems is related to the inconsistency between the arithmetic operations i,u64 and AtomicI,U64. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause...