CWE-362: Race Condition vulnerabilities

Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability

CVE-2024-12747 is a race condition vulnerability in rsync's handling of symbolic links. Rsync normally skips symbolic links by default, but an attacker can exploit a timing window to replace a regular file with a symbolic link, bypassing this behavior. This can lead to sensitive information disclosure and potential privilege escalation depending on the rsync process privileges. The vulnerability has a medium severity with a CVSS score of 5.6. A fix is available in Red Hat Enterprise Linux 10 updates.

CVE-2024-48991 is a race condition vulnerability in needrestart before version 3.8 that allows local attackers to execute arbitrary code as root by tricking needrestart into running a malicious Python interpreter. An initial fix introduced a regression, which was later resolved.

CVE-2024-50135 addresses a race condition vulnerability in the Linux kernel's nvme-pci driver. The issue occurs between the reset operation and the nvme_dev_disable() function, which modifies the device's online_queues field. Without proper synchronization, this can lead to invalid values being passed to blk_mq_update_nr_hw_queues(), potentially causing system instability or crashes. The fix involves locking a mutex to prevent concurrent access during shutdown operations.

Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability

The Object Request Broker (ORB) in IBM SDK, Java Technology Edition 7.1.0.0 through 7.1.5.18 and 8.0.0.0 through 8.0.8.26 is vulnerable to remote denial of service, caused by a race condition in the management of ORB listener threads.

CVE-2024-27983 is a race condition vulnerability in the Node.js HTTP/2 server. An attacker can cause a denial of service by sending a small number of HTTP/2 frames, including CONTINUATION frames, and then abruptly closing the TCP connection. This triggers a race condition in the Http2Session destructor, leaving data in memory and making the server unavailable.

A race condition was found in the Linux kernel's net/bluetooth device driver in conn_info_{min,max}_age_set() function. This can result in integrity overflow issue, possibly leading to bluetooth connection abnormality or denial of service.

A race condition was found in the Linux kernel's net/bluetooth in {conn,adv}_{min,max}_interval_set() function. This can result in I2cap connection or broadcast abnormality issue, possibly leading to denial of service.

A race condition was found in the Linux kernel's net/bluetooth in sniff_{min,max}_interval_set() function. This can result in a bluetooth sniffing exception issue, possibly leading denial of service.

BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Two malicious build steps running in parallel sharing the same cache mounts with subpaths could cause a race condition that can lead to files from the host system being accessible to the build container. The issue has been fixed in v0.12.5. Workarounds include, avoiding using BuildKit frontend from an untrusted source or building an untrusted Dockerfile containing cache mounts with --mount=type=cache,source=... options.

A race condition exists in Audited 4.0.0 before 5.3.3 that can result in an authenticated user to cause audit log entries to be attributed to another user.

Windows Search Remote Code Execution Vulnerability