Race condition

An issue was discovered in the Linux kernel through 6.2.0-rc2. drivers/tty/vcc.c has a race condition and resultant use-after-free if a physically proximate attacker removes a VCC device while calling open, aka a race condition between vccopen and vccremove...

UBUNTU-CVE-2023-23039

An issue was discovered in the Linux kernel through 6.2.0-rc2. drivers/tty/vcc.c has a race condition and resultant use-after-free if a physically proximate attacker removes a VCC device while calling open, aka a race condition between vccopen and vccremove...

CVE-2023-23039

An issue was discovered in the Linux kernel through 6.2.0-rc2. drivers/tty/vcc.c has a race condition and resultant use-after-free if a physically proximate attacker removes a VCC device while calling open, aka a race condition between vccopen and vccremove...

CVE-2023-23039

An issue was discovered in the Linux kernel through 6.2.0-rc2. drivers/tty/vcc.c has a race condition and resultant use-after-free if a physically proximate attacker removes a VCC device while calling open, aka a race condition between vccopen and vccremove...

CVE-2023-23039

An issue was discovered in the Linux kernel through 6.2.0-rc2. drivers/tty/vcc.c has a race condition and resultant use-after-free if a physically proximate attacker removes a VCC device while calling open, aka a race condition between vccopen and vccremove...

CVE-2023-23039

An issue was discovered in the Linux kernel through 6.2.0-rc2. drivers/tty/vcc.c has a race condition and resultant use-after-free if a physically proximate attacker removes a VCC device while calling open, aka a race condition between vccopen and vccremove...

PT-2022-6243 · Vinteo · Vinteo Vcc

Name of the Vulnerable Software and Affected Versions: Vinteo VCC version 2.36.4 Description: The issue is related to the lack of protection for the web page structure, allowing a remote attacker to conduct a cross-site scripting XSS attack. This vulnerability enables attackers to inject arbitrar...

CVE-2021-43327

An issue was discovered on Renesas RX65 and RX65N devices. With a VCC glitch, an attacker can extract the security ID key from the device. Then, the protected firmware can be extracted...

Design/Logic Flaw

An issue was discovered on Renesas RX65 and RX65N devices. With a VCC glitch, an attacker can extract the security ID key from the device. Then, the protected firmware can be extracted...

CVE-2021-43327

CVE-2021-43327 concerns Renesas RX65/RX65N microcontrollers. The connected sources confirm a hardware fault-based vulnerability where a VCC glitch enables an attacker to extract the device’s security ID key, which then allows access to the protected firmware. The risk is materialized via local fa...

Renesas Electronics Renesas RX65和RX65N 安全漏洞

The Renesas Electronics Renesas Rx65 and Renesas Rx65N are both a mainstream Rx microcontroller from Renesas Electronics, Japan. The Renesas Electronics Renesas RX65 and RX65N devices have a security vulnerability that allows an attacker to extract a security ID key from the device via a VCC faul...

PT-2021-23814 · Renesas · Renesas Rx65

Name of the Vulnerable Software and Affected Versions: Renesas RX65 and RX65N devices affected versions not specified Description: An issue was discovered in Renesas RX65 and RX65N devices, where an attacker can extract the security ID key from the device using a VCC glitch. This allows the...

8x8: xss(r) vcc-na11.8x8.com

The "oem" parameter in the vcc-na11.8x8.com endpoint was vulnerable to Reflected Cross Site Scripting XSS attacks. This allowed attackers to execute malicious code and potentially steal non-secure cookies...

8x8: Cross-site Scripting (XSS) - Reflected

The password reset page of the managers portal of VCC reflected input of the tenant parameter without proper encoding considerations. Just wanted to disclose as it's my first ever report on h1...

Kernel: atm: update msg_namelen in vcc_recvmsg()

The vccrecvmsg function in net/atm/common.c in the Linux kernel before 3.9-rc7 does not initialize a certain length variable, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call...

Linux Kernel 'atm module' Local Denial of Service

net/atm/svc.c in the ATM subsystem in the Linux kernel 2.6.27.8 and earlier allows local users to cause a denial of service kernel infinite loop by making two calls to svclisten for the same socket, and then reading a /proc/net/atm/vc file, related to corruption of the vcc table...

Linux Kernel 'atm module' Local Denial of Service

net/atm/svc.c in the ATM subsystem in the Linux kernel 2.6.27.8 and earlier allows local users to cause a denial of service kernel infinite loop by making two calls to svclisten for the same socket, and then reading a /proc/net/atm/vc file, related to corruption of the vcc table...

Linux Kernel 'atm module' Local Denial of Service

net/atm/svc.c in the ATM subsystem in the Linux kernel 2.6.27.8 and earlier allows local users to cause a denial of service kernel infinite loop by making two calls to svclisten for the same socket, and then reading a /proc/net/atm/vc file, related to corruption of the vcc table...

Linux Kernel 2.6.27.8 - ATMSVC Local Denial of Service

Linux Kernel 2.6.27.8 - ATMSVC Local Denial of Service / cve-2008-5079.c Linux Kernel http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5079: net/atm/svc.c in the ATM subsystem in the Linux kernel 2.6.27.8 and earlier allows local users to cause a denial of service kernel infinite loop b...

Linux Kernel <= 2.6.27.8 ATMSVC Local Denial of Service Exploit

Exploit for linux platform in category dos / poc =============================================================== Linux Kernel http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5079: net/atm/svc.c in the ATM subsystem in the Linux kernel 2.6.27.8 and earlier allows local users to cause a...