2392 matches found
SUSE CVE-2022-42318
Xenstore: guests can let run xenstored out of memory This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. Malicious guests can cause xenstored to allocate vast amounts of memory, eventually resulting in a Denial of Service...
Apple Security Update: watchOS 9.3.1
Apple recommends to install security update watchOS 9.3.1 on devices Apple Watch Series 4 and later...
Security Advisory - Identity Authentication Bypass Vulnerability in The Huawei Children Smart Watch (Simba-AL00)
The Huawei Children Smart Watch Simba-AL00 has an identity authentication bypass vulnerability. Successful exploitation of this vulnerability may cause the access control function of specific applications to fail.Vulnerability ID:HWPSIRT-2022-18770 This vulnerability has been assigned a CVE ID:...
GHSA-4Q83-7CQ4-P6WG vulnerabilities
Vulnerabilities for packages: pulumi-watch...
GHSA-4Q83-7CQ4-P6WG vulnerabilities
Vulnerabilities for packages: pulumi-watch...
AlmaLinux 9 : kpatch-patch (ALSA-2023:0348)
The remote AlmaLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2023:0348 advisory. - A race condition was found in the Linux kernel's watch queue due to a missing lock in piperesizering. The specific flaw exists within the handling of pi...
kernel: watch queue race condition can lead to privilege escalation
A race condition was found in the Linux kernel's watch queue due to a missing lock in the piperesizering. The race condition occurs when a thread uses ioctlIOCWATCHQUEUESETSIZE to resize the pipe buffer and free the old pipe buffer, while another thread uses keyctl to trigger a notification in th...
kernel: watch queue race condition can lead to privilege escalation
A race condition was found in the Linux kernel's watch queue due to a missing lock in the piperesizering. The race condition occurs when a thread uses ioctlIOCWATCHQUEUESETSIZE to resize the pipe buffer and free the old pipe buffer, while another thread uses keyctl to trigger a notification in th...
kernel: watch queue race condition can lead to privilege escalation
A race condition was found in the Linux kernel's watch queue due to a missing lock in the piperesizering. The race condition occurs when a thread uses ioctlIOCWATCHQUEUESETSIZE to resize the pipe buffer and free the old pipe buffer, while another thread uses keyctl to trigger a notification in th...
PT-2023-21429 · Apple · Macos Monterey +6
Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.3 macOS Monterey versions prior to 12.6.3 iOS versions prior to 16.4 iPadOS versions prior to 16.4 macOS Big Sur versions prior to 11.7.3 tvOS versions prior to 16.4 watchOS versions prior to 9.4 Description: An app...
RHEL 9 : kernel (RHSA-2023:0334)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:0334 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: watch queue race condition can...
PT-2023-5598 · Apple · Ipados +4
Name of the Vulnerable Software and Affected Versions: Apple macOS versions prior to 13.2 Apple macOS versions prior to 12.6.8 Apple macOS versions prior to 11.7.9 Apple iOS versions prior to 16.3 Apple iOS versions prior to 15.7.8 Apple iPadOS versions prior to 16.3 Apple iPadOS versions prior t...
The vulnerability of the System Preferences component in operating systems such as Mac OS, iOS, iPadOS, tvOS, and watchOS allows attackers to escalate their privileges.
The vulnerability of the System Preferences component in operating systems such as Mac OS, iOS, iPadOS, tvOS, and watchOS is related to synchronization errors when using a shared resource “Race Condition”. Exploiting this vulnerability can allow an attacker to gain increased privileges...
Exploit for Out-of-bounds Write in Linux Linux_Kernel
This is a PoC exploit for CVE-2022-0995, a heap out-of-bounds write in the watchqueue Linux kernel component. The exploit targets Ubuntu 21.10 with kernel 5.13.0-37. It uses the same technique described in a Google Security Research writeup for CVE-2021-22555. The exploit is not 100% reliable and...
GHSA-7RRJ-XR53-82P7 vulnerabilities
Vulnerabilities for packages: pulumi-watch...
GHSA-7RRJ-XR53-82P7 vulnerabilities
Vulnerabilities for packages: pulumi-watch...
CVE-2023-22466 vulnerabilities
Vulnerabilities for packages: pulumi-watch...
CVE-2023-22466 vulnerabilities
Vulnerabilities for packages: pulumi-watch...
