CWE-362: Race Condition
The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.
Also known as Concurrent Execution using Shared Resource with Improper Synchronization.
A kind of CWE-662 Improper Synchronization.
From the CWE List. © The MITRE Corporation.
Newest
- microsoft windows xp, windows server 2003, windows server 2008 +1 more +3 moreMicrosoft Windows XP, Server 2003 and 2008, and Vista exposes I/O activity measurements of all...4.0 Medium
- sun opensolaris, solaris +1 moreRace condition in the pseudo-terminal (aka pty) driver module in Sun Solaris 8 through 10, and...4.9 Medium
- linux kernelRace condition in the do_setlk function in fs/nfs/file.c in the Linux kernel before 2.6.26 allows...4.0 Medium
- perl file\Race condition in the rmtree function in File::Path 1.08 (lib/File/Path.pm) in Perl 5.8.8 allows...6.9 Medium
- perl file\Race condition in the rmtree function in File::Path 1.08 and 2.07 (lib/File/Path.pm) in Perl 5.8...6.9 Medium
- apple iphone osRace condition in the Passcode Lock feature in Apple iPhone OS 2.0 through 2.1 and iPhone OS for...3.7 Low
- linux kernelThe inotify functionality in Linux kernel 2.6 before 2.6.28-rc5 might allow local users to gain...6.9 Medium
- mozilla firefox, seamonkey, thunderbird +10 more +12 morensFrameManager in Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2...9.3 High
- microsoft windows server 2003, windows vista +1 moreRace condition in Microsoft Windows Server 2003 and Vista allows local users to cause a denial of...4.0 Medium
- sun solstice x.25Race condition in the s_xout kernel module in Sun Solstice X.25 9.2, when running on a multiple...4.0 Medium
- apple mac os xThe Postfix configuration file in Mac OS X 10.5.5 causes Postfix to be network-accessible when...6.8 Medium
- checkinstallRace condition in (1) checkinstall 1.6.1 and (2) installwatch allows local users to overwrite...4.4 Medium
- apple mac os x, mac os x server +1 moreLaunch Services in Apple Mac OS X before 10.5, when Open Safe Files is enabled, allows remote...7.6 High
- linux kernel, redhat enterprise linux, enterprise linux desktop +2 moreRace condition in the ptrace and utrace support in the Linux kernel 2.6.9 through 2.6.25, as used...4.7 Medium
- sun solarisUnspecified vulnerability in crontab on Sun Solaris 8 through 10, and OpenSolaris before snv_93,...6.9 Medium
- sun solarisRace condition in the STREAMS Administrative Driver (sad) in Sun Solaris 10 allows local users to...4.7 Medium
- linux kernelLinux kernel before 2.6.25.2 does not apply a certain protection mechanism for fcntl...6.9 Medium
- debian linux, linux kernel, canonical ubuntu linux +5 more +7 moreRace condition in the directory notification subsystem (dnotify) in Linux kernel 2.6.x before 2.6...6.9 Medium
- sun solarisinetd on Sun Solaris 10, when debug logging is enabled, allows local users to write to arbitrary...4.7 Medium
- policyd-weightRace condition in the create_lockpath function in policyd-weight 0.1.14 beta-16 allows local...6.9 Medium
- apple mac os x, mac os x server +1 moreRace condition in NSXML in Foundation for Apple Mac OS X 10.4.11 allows context-dependent...5.8 Medium
- apple mac os x, mac os x server +1 moreRace condition in the NSURLConnection cache management functionality in Foundation for Apple Mac...5.8 Medium
- apple mac os x, mac os x server +1 moreFoundation in Apple Mac OS X 10.4.11 creates world-writable directories while NSFileManager...7.2 High
- sun solarisMultiple race conditions in the CPU Performance Counters (cpc) subsystem in the kernel in Sun...4.7 Medium
- businessobjects crystal reports xiRace condition in the Enterprise Tree ActiveX control (EnterpriseControls.dll 11.5.0.313) in...9.3 High
- x.org evi, mit-shm, xserver +2 moreMultiple integer overflows in X.Org Xserver before 1.4.1 allow context-dependent attackers to...9.3 High
- openafs, debian linux +1 moreRace condition in fileserver in OpenAFS 1.3.50 through 1.4.5 and 1.5.0 through 1.5.27 allows...4.3 Medium
- apple mac os xRace condition in the CFURLWriteDataAndPropertiesToResource API in Core Foundation in Apple Mac...6.6 Medium
- sun solaris, sunos +1 moreRace condition in the Fibre Channel protocol (fcp) driver and Devices filesystem (devfs) in Sun...4.7 Medium
- sun solarisRace condition in the Remote Procedure Call kernel module (rpcmod) in Sun Solaris 8 through 10...7.6 High
- rubyonrails railssession fixation protection mechanism in cgi_process.rb in Rails6.8 Medium
- apple mac os x, mac os x server +1 moreRace condition in WebCore in Apple Mac OS X 10.4 through 10.4.10 allows remote attackers to...4.3 Medium
- nss ldap ldapRace condition in nss_ldap, when used in applications that are linked against the pthread library...4.3 Medium
- aimluck aipo, aipo asp +1 moreSession fixation vulnerability in Aipo and Aipo ASP 3.0.1.0 and earlier allows remote attackers...5.8 Medium
- sun solarisRace condition in the kernel in Sun Solaris 8 through 10 allows local users to cause a denial of...4.9 Medium
- linux kernelRace condition in the tee (sys_tee) system call in the Linux kernel 2.6.17 through 2.6.17.6 might...6.9 Medium
- eset nod32 antivirusRace condition in ESET NOD32 Antivirus before 2.2289 allows remote attackers to execute arbitrary...7.6 High
- gd graphics library gdlibRace condition in gdImageStringFTEx (gdft_draw_bitmap) in gdft.c in the GD Graphics Library ...4.3 Medium
- apple safari, iphone os +1 moreRace condition in Apple Safari 3 Beta before 3.0.2 on Mac OS X, Windows XP, Windows Vista, and...4.3 Medium
- microsoft internet explorer, windows xp, windows 2000 +3 more +5 moreRace condition in Microsoft Internet Explorer 6 SP1; 6 and 7 for Windows XP SP2 and SP3; 6 and 7...7.1 High
- xfsdump, suse opensuse, linux +4 more +6 morexfs_fsr in xfsdump creates a .fsr temporary directory with insecure permissions, which allows...4.4 Medium
- apache http serverMultiple race conditions in suexec in Apache HTTP Server (httpd) 2.2.3 between directory and file...6.2 Medium
- contelligent c1 financial servicesMoveSortedContentAction in C1 Financial Services Contelligent 9.1.4 does not check "the...6.8 Medium
- microsoft internet explorer, xml core services +1 moreRace condition in the msxml3 module in Microsoft XML Core Services 3.0, as used in Internet...9.3 High
- sun solaris, sunos +1 moreRace condition in the kernel in Sun Solaris 8 through 10 allows local users to cause a denial of...4.7 Medium
- phpRace condition in the symlink function in PHP 5.1.6 and earlier allows local users to bypass the...6.2 Medium
- openbsd openssh, apple mac os x, mac os x server +1 more +3 moreSignal handler race condition in OpenSSH before 4.4 allows remote attackers to cause a denial of...8.1 High
- roxio toastRace condition in Deja Vu, as used in Roxio Toast Titanium 7 and possibly other products, allows...6.2 Medium
- linux kernelRace condition in the do_add_counters function in netfilter for Linux kernel 2.6.16 allows local...4.7 Medium
- microsoft ie, internet explorer +1 moreMicrosoft Internet Explorer before Windows XP Service Pack 2 and Windows Server 2003 Service Pack...5.1 Medium
- Show moreLoading…