race condition vulnerabilities and exploits

(subscribe to this query)

Race condition in the xpcom library, as used by web browsers such as Firefox, Mozilla, Netscape, and Galeon, allows remote malicious users to cause a denial of service (application crash) via a large HTML file that loads a DOM call from within nested DIV tags, which causes part o...

1 EDB exploit

In the Linux kernel, the following vulnerability has been resolved: mm/mremap: fix move_normal_pmd/retract_page_tables race In mremap(), move_page_tables() looks at the type of the PMD entry and the specified address range to figure out by which method the next chunk of page tabl...

Linux Linux Kernel 6.12 Linux Linux Kernel

periodic in FreeBSD 4.1.1 and previous versions, and possibly other operating systems, allows local users to overwrite arbitrary files via a symlink attack.

Freebsd Freebsd 6.2

Race condition in the pkexec utility and polkitd daemon in PolicyKit (aka polkit) 0.96 allows local users to gain privileges by executing a setuid program from pkexec, related to the use of the effective user ID instead of the real user ID.

Redhat Policykit 0.96

3 EDB exploits1 Github repository

Check_mk versions 1.2.8p25 and below suffer from a save_users() race condition that leads to sensitive information disclosure.

The kk Star Ratings WordPress plugin prior to 5.4.6 does not implement atomic operations, allowing one user vote multiple times on a poll due to a Race Condition.

Kamalkhan Kk Star Ratings

A Privilege Escalation Vulnerability exists in Sprite Software Spritebud 1.3.24 and 1.3.28 and Backup 2.5.4105 and 2.5.4108 on LG Android smartphones due to a race condition in the spritebud daemon, which could let a local malicious user obtain root privileges.

Spritesoftware Spritebackup 2.5.4105 Spritesoftware Spritebackup 2.5.4108 Spritesoftware Spritebud 1.3.24 Spritesoftware Spritebud 1.3.28

1 Github repository

Testtrack For Linux Race Condition

Check_mk versions 1.2.8p25 and below suffer from a save_users() race condition that leads to sensitive information disclosure.

The init.d script for the X.Org X11 xfs font server on various Linux distributions might allow local users to change the permissions of arbitrary files via a symlink attack on the /tmp/.font-unix temporary file.

Fedoraproject Fedora Core 6.0 Redhat Linux Redhat Enterprise Linux Desktop 4.0 Redhat Enterprise Linux 4.0

1 EDB exploit

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook