CVE-2019-16779
In RubyGem excon before 0.71.0, there was a race condition around persistent connections, where a connection which is interrupted (such as b
CVSS
5.8
Medium
EPSS
1.4%
p70
KEV
—
Exploit Today
21
0-100
Published: Dec 16, 2019 · Last modified: Jul 28, 2026 · CWE-664 · CWE-362
1.4%EPSS · 30 days1.4%
2026-06-302026-07-27
In RubyGem excon before 0.71.0, there was a race condition around persistent connections, where a connection which is interrupted (such as by a timeout) would leave data on the socket. Subsequent requests would then read this data, returning content from the previous response. The race condition window appears to be short, and it would be difficult to purposefully exploit this.
- lists.opensuse.orghttp://lists.opensuse.org/opensuse-security-announce/2020-01/msg00021.html
- lists.opensuse.orghttp://lists.opensuse.org/opensuse-security-announce/2020-01/msg00062.html
- github.comhttps://github.com/excon/excon/commit/ccb57d7a422f020dc74f1de4e8fb505ab46d8a29
- github.comhttps://github.com/excon/excon/security/advisories/GHSA-q58g-455p-8vw9
- lists.debian.orghttps://lists.debian.org/debian-lts-announce/2020/01/msg00015.html
- lists.opensuse.orghttp://lists.opensuse.org/opensuse-security-announce/2020-01/msg00021.html
- lists.opensuse.orghttp://lists.opensuse.org/opensuse-security-announce/2020-01/msg00062.html
- github.comhttps://github.com/excon/excon/commit/ccb57d7a422f020dc74f1de4e8fb505ab46d8a29
- github.comhttps://github.com/excon/excon/security/advisories/GHSA-q58g-455p-8vw9
- lists.debian.orghttps://lists.debian.org/debian-lts-announce/2020/01/msg00015.html
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-624366.5 MED—
———[This CNA information record relates to multiple CVEs; the
text explains which aspects/vulnerabilities correspond to which CVE.]
With the introduction of Grant Table v2 came the requirement to be able to
switch between versions. Switching from v1 to v2 reduces the number of
valid grant references, as a bigger shared entry structure is then needed
while the shared table doesn't change size. Switching from v2 back to v1
the status frames, which are separate in v2, go away.
Code holding, but intermediately dropping and then re-acquiring the grant
table lock, sometimes wrongly assumes that said properties wouldn't change
across the window in time where the lock is not being held.
The v1 -> v2 issue is CVE-2026-62435.
The v2 -> v1 issue is CVE-2026-62436.19hCVE-2026-624356.5 MED—
———[This CNA information record relates to multiple CVEs; the
text explains which aspects/vulnerabilities correspond to which CVE.]
With the introduction of Grant Table v2 came the requirement to be able to
switch between versions. Switching from v1 to v2 reduces the number of
valid grant references, as a bigger shared entry structure is then needed
while the shared table doesn't change size. Switching from v2 back to v1
the status frames, which are separate in v2, go away.
Code holding, but intermediately dropping and then re-acquiring the grant
table lock, sometimes wrongly assumes that said properties wouldn't change
across the window in time where the lock is not being held.
The v1 -> v2 issue is CVE-2026-62435.
The v2 -> v1 issue is CVE-2026-62436.19hCVE-2026-624327.3 HIG—
———The EVTCHNOP_expand_array hypercall checks for whether FIFO event
channels are enabled, but without holding the correct lock. It can race
with EVTCHNOP_reset, resulting in dereferencing a NULL pointer.18hCVE-2026-624307.5 HIG—
———Accesses to the CMOS memory contents are done using an indirect IO port
pair. Therefore Xen needs to cache the guest chosen index, and one of
the usages of the index didn't take the necessary locking to avoid
concurrent changes. As a result, a guest could change the index after
it being checked, causing a subsequent out-of-bound read access to the
contents of an array.18hCVE-2026-624296.5 MED—
———Accessing the vNUMA configuration data of a guest is still possible when
domain destruction has already started. The cleaning up of that
configuration information is not synchronized with its retrieval by a
device model controlling the guest.18hCVE-2026-647215.5 MED—
——0This issue was addressed through improved state management. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to access sensitive user data.15h