CWE-362: Race Condition
The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.
Also known as Concurrent Execution using Shared Resource with Improper Synchronization.
A kind of CWE-662 Improper Synchronization.
From the CWE List. © The MITRE Corporation.
Newest
- debian linux, linux kernel, canonical ubuntu linux +8 more +10 moreRace condition in the key_gc_unused_keys function in security/keys/gc.c in the Linux kernel...6.9 Medium
- linux kernel, suse linux enterprise server +1 moreRace condition in the ext4_file_write_iter function in fs/ext4/file.c in the Linux kernel through...4.7 Medium
- apple iphone osRace condition in the App Installation feature in Apple iOS before 8 allows local users to gain...1.9 Low
- apple iphone osRace condition in iMessage in Apple iOS before 8 allows attackers to obtain sensitive information...4.3 Medium
- puppet enterprise, puppetlabs mcollective +1 moreThe MCollective aes_security plugin, as used in Puppet Enterprise before 3.3.0 and Mcollective...4.4 Medium
- ayatana project unityUnity before 7.2.3 and 7.3.x before 7.3.1, as used in Ubuntu, does not properly take focus of the...7.2 High
- opensslRace condition in the ssl_parse_serverhello_tlsext function in t1_lib.c in OpenSSL 1.0.0 before 1...6.8 Medium
- kde kauth, kdelibs, canonical ubuntu linux +1 more +3 moreKDE kdelibs before 4.14 and kauth before 5.1 does not properly use D-Bus for communication with a...6.9 Medium
- canonical acpi-support, ubuntu linux +1 moreRace condition in the power policy functions in policy-funcs in acpi-support before 0.142 allows...6.9 Medium
- apache http server, debian linux, oracle enterprise manager ops center +2 more +4 moreRace condition in the mod_status module in the Apache HTTP Server before 2.4.10 allows remote...6.8 Medium
- linux kernel, redhat enterprise linux, enterprise mrg +2 moreThe Linux kernel through 3.14.5 does not properly consider the presence of hugetlb entries, which...4.0 Medium
- pythonRace condition in the _get_masked_mode function in Lib/os.py in Python 3.2 through 3.5, when...3.3 Low
- coreftp core ftpCore FTP Server 1.2 before build 515 allows remote attackers to cause a denial of service ...4.3 Medium
- openssl, fedoraproject fedora, mariadb +4 more +6 moreRace condition in the ssl3_read_bytes function in s3_pkt.c in OpenSSL through 1.0.1g, when...4.0 Medium
- tenable nessus, plugin-set +1 moreA race condition in the wmi_malware_scan.nbin plugin before 201402262215 for Nessus 5.2.1 allows...6.9 Medium
- linux kernelRace condition in the ath_tx_aggr_sleep function in drivers/net/wireless/ath/ath9k/xmit.c in the...7.1 High
- linux kernelRace condition in the inet_frag_intern function in net/ipv4/inet_fragment.c in the Linux kernel...9.3 High
- cisco wireless lan controller, wireless lan controller software +1 moreCisco Wireless LAN Controller (WLC) devices 7.4 before 7.4.110.0 distribute Aironet IOS software...10.0 High
- mediawikiincludes/User.php in MediaWiki before 1.19.12, 1.20.x and 1.21.x before 1.21.6, and 1.22.x before...5.8 Medium
- cisco firewall services module softwareRace condition in the cut-through proxy feature in Cisco Firewall Services Module (FWSM) Software...7.1 High
- postgresqlRace condition in the (1) CREATE INDEX and (2) unspecified ALTER TABLE commands in PostgreSQL...4.9 Medium
- parcimonie project parcimonieparcimonie before 0.8.1, when using a large keyring, sleeps for the same amount of time between...7.5 High
- mozilla firefox, network security services, seamonkey +10 more +12 moreRace condition in libssl in Mozilla Network Security Services (NSS) before 3.15.4, as used in...9.3 High
- linux kernel, oracle linux, suse linux enterprise high availability extension +2 more +4 moreRace condition in the mac80211 subsystem in the Linux kernel before 3.13.7 allows remote...7.1 High
- redhat libvirtRace condition in the virNetServerClientStartKeepAlive function in libvirt before 1.2.1 allows...3.3 Low
- redhat libvirtMultiple race conditions in the (1) virDomainBlockStats, (2) virDomainGetBlockInf, (3)...6.8 Medium
- juniper junosJuniper Junos 10.4 before 10.4R16, 11.4 before 11.4R10, 12.1R before 12.1R8-S2, 12.1X44 before 12...7.1 High
- libreswanRace condition in the libreswan.spec files for Red Hat Enterprise Linux (RHEL) and Fedora...9.3 High
- linux kernelMultiple race conditions in ipc/shm.c in the Linux kernel before 3.12.2 allow local users to...4.7 Medium
- novell suse linux enterprise for sap applicationsRace condition in sap_suse_cluster_connector before 1.0.0-0.8.1 in SUSE Linux Enterprise for SAP...7.2 High
- scientificlinux luci, redhat enterprise linux +1 moreRace condition in Luci 0.26.0 creates /var/lib/luci/etc/luci.ini with world-readable permissions...1.9 Low
- qualcomm quic mobile station modem kernelgoodix_tool.c in the Goodix gt915 touchscreen driver for the Linux kernel 3.x, as used in...6.9 Medium
- apple iphone osMultiple race conditions in the Phone app in Apple iOS before 7.0.3 allow physically proximate...3.3 Low
- cisco adaptive security appliance softwareRace condition in the HTTP Deep Packet Inspection (DPI) feature in Cisco Adaptive Security...7.1 High
- systemd project systemd, canonical ubuntu linux, debian linux +2 moresystemd does not properly use D-Bus for communication with a polkit authority, which allows local...6.9 Medium
- polkit project polkit, canonical ubuntu linux, opensuse +1 more +3 moreRace condition in PolicyKit (aka polkit) allows local users to bypass intended PolicyKit...7.2 High
- google chromeMultiple race conditions in the Web Audio implementation in Blink, as used in Google Chrome...6.8 Medium
- cisco iosRace condition in the IPv6 virtual fragmentation reassembly (VFR) implementation in Cisco IOS 12...7.8 High
- apple iphone osPasscode Lock in Apple iOS before 7 does not properly manage the lock state, which allows...3.7 Low
- htmlcleaner project htmlcleaner, open-xchange appsuite +1 moreMultiple race conditions in HtmlCleaner before 2.6, as used in Open-Xchange AppSuite 7.2.2 before...4.9 Medium
- canonical ubuntu linuxRace condition in the post-installation script (mysql-server-5.5.postinst) for MySQL Server 5.5...1.9 Low
- redhat enterprise linuxA certain Red Hat patch to the KVM subsystem in the kernel package before 2.6.32-358.11.1.el6 on...5.7 Medium
- linux kernelRace condition in the sctp_rcv function in net/sctp/input.c in the Linux kernel before 2.6.29...7.1 High
- google chromeRace condition in the workers implementation in Google Chrome before 27.0.1453.93 allows remote...6.8 Medium
- linux kernelRace condition in the smb_send_rqst function in fs/cifs/transport.c in the Linux kernel before 3...4.4 Medium
- cisco adaptive security appliance, adaptive security appliance clientless ssl vpn, adaptive security appliance software +2 moreRace condition in the CIFS implementation in the rewriter module in the Clientless SSL VPN...4.9 Medium
- cisco adaptive security appliance, 5500 adaptive security appliance, 5500 series adaptive security appliance +2 moreRace condition on Cisco Adaptive Security Appliances (ASA) devices allows remote attackers to...5.4 Medium
- microsoft windows 7, windows 8, windows rt +5 more +7 moreRace condition in the kernel in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2,...4.9 Medium
- microsoft windows 7, windows 8, windows rt +3 more +5 moreRace condition in win32k.sys in the kernel-mode drivers in Microsoft Windows Vista SP2, Windows...6.9 Medium
- microsoft windows 8, windows rt, windows server 2012 +2 moreRace condition in the kernel in Microsoft Windows 8, Windows Server 2012, and Windows RT allows...4.9 Medium
- Show moreLoading…