CWE-362: Race Condition
The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.
Also known as Concurrent Execution using Shared Resource with Improper Synchronization.
A kind of CWE-662 Improper Synchronization.
From the CWE List. © The MITRE Corporation.
Newest
- mozilla firefoxRace condition in the JPEGEncoder function in Mozilla Firefox before 42.0 and Firefox ESR 38.x...6.8 Medium
- xenRace condition in the relinquish_memory function in arch/arm/domain.c in Xen 4.6.x and earlier...4.7 Medium
- openstack neutronOpenStack Neutron Race condition vulnerability3.5 Low
- ffmpeg, google chrome +1 moreThe update_dimensions function in libavcodec/vp8.c in FFmpeg through 2.8.1, as used in Google...6.8 Medium
- linux kernelRace condition in the IPC object implementation in the Linux kernel through 4.2.3 allows local...6.9 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 moreMultiple race conditions in the Advanced Union Filesystem (aufs) aufs3-mmap.patch and aufs4-mmap...4.4 Medium
- mozilla firefoxRace condition in the WorkerPrivate::NotifyFeatures function in Mozilla Firefox before 41.0...6.8 Medium
- pacemaker\/corosync configuration system project configuration systemRace condition in pcsd in PCS 0.9.139 and earlier uses a global variable to validate usernames,...4.9 Medium
- spice project spice, redhat enterprise linux, enterprise linux desktop +3 more +5 moreRace condition in the worker_update_monitors_config function in SPICE 0.12.4 allows a remote...6.9 Medium
- apple mac os xRace condition in runner in Install.framework in the Install Framework Legacy component in Apple...9.3 High
- mozilla firefox, opensuse, oracle solaris +2 moreRace condition in the Mozilla Maintenance Service in Mozilla Firefox before 40.0 and Firefox ESR...3.3 Low
- microsoft malicious software removal toolRace condition in Microsoft Malicious Software Removal Tool (MSRT) before 5.26 allows local users...6.9 Medium
- apple mac os xRace condition in kext tools in Apple OS X before 10.10.4 allows local users to bypass intended...6.9 Medium
- linux kernelRace condition in net/sctp/socket.c in the Linux kernel before 4.1.2 allows local users to cause...4.9 Medium
- cisco iosRace condition in the IPv6-to-IPv4 functionality in Cisco IOS 15.3S in the Performance Routing...7.1 High
- cisco iosRace condition in Cisco IOS 12.2SCH in the Performance Routing Engine (PRE) module on uBR10000...5.4 Medium
- canonical ubuntu linuxRace condition in Apport before 2.17.2-0ubuntu1.1 as packaged in Ubuntu 15.04, before 2.14...7.0 High
- mozilla firefox, opensuse +1 moreRace condition in the nsThreadManager::RegisterCurrentThread function in Mozilla Firefox before...6.8 Medium
- lenovo system updateRace condition in Lenovo System Update (formerly ThinkVantage System Update) before 5.06.0034...6.9 Medium
- ibm websphere application serverMultiple race conditions in IBM WebSphere Application Server (WAS) 8.5 Liberty Profile before 8.5...8.5 High
- mozilla firefoxRace condition in the AsyncPaintWaitEvent::AsyncPaintWaitEvent function in Mozilla Firefox before...6.8 Medium
- apple iphone os, mac os x, tvos +2 moreRace condition in the setreuid system-call implementation in the kernel in Apple iOS before 8.3,...4.0 Medium
- google chromeRace condition in gpu/command_buffer/service/gles2_cmd_decoder.cc in Google Chrome before 41.0...6.8 Medium
- cisco intrusion prevention systemRace condition in the TLS implementation in MainApp in the management interface in Cisco...7.1 High
- cisco ios, ios xe +1 moreRace condition in the Neighbor Discovery (ND) protocol implementation in Cisco IOS and IOS XE...5.7 Medium
- debian linux, linux kernel +1 moreRace condition in the handle_to_path function in fs/fhandle.c in the Linux kernel through 3.19.1...1.9 Low
- cisco ips sensor softwareRace condition in the SSL implementation on Cisco Intrusion Prevention System (IPS) devices...7.1 High
- cisco iosRace condition in the Common Classification Engine (CCE) in the Measurement, Aggregation, and...7.1 High
- redhat jboss weldInformation disclosure in JBoss Weld4.3 Medium
- ibm tivoli storage managerRace condition in the client in IBM Tivoli Storage Manager (TSM) 5.4.0.0 through 5.4.3.6, 5.5.0.0...6.9 Medium
- cisco iosRace condition in the object-group ACL feature in Cisco IOS 15.5(2)T and earlier allows remote...4.3 Medium
- cisco iosRace condition in the Measurement, Aggregation, and Correlation Engine (MACE) implementation in...7.1 High
- freedesktop dbus, opensuse +1 moreD-Bus 1.4.x through 1.6.x before 1.6.30, 1.8.x before 1.8.16, and 1.9.x before 1.9.10 does not...1.9 Low
- linux kernelRace condition in NVMap in NVIDIA Tegra Linux Kernel 3.10 allows local users to gain privileges...6.9 Medium
- pxz project pxzRace condition in pxz 4.999.99 Beta 3 uses weak file permissions for the output file when...2.1 Low
- mozilla firefox, seamonkey, opensuse +2 moreThe mozilla::dom::AudioParamTimeline::AudioNodeInputValue function in the Web Audio API...5.0 Medium
- linux kernelThe Btrfs implementation in the Linux kernel before 3.19 does not ensure that the visible xattr...6.9 Medium
- puppet serverRace condition in Puppet Server 0.2.0 allows local users to obtain sensitive information by...1.9 Low
- adobe acrobat, acrobat reader +1 moreRace condition in the MoveFileEx call hook feature in Adobe Reader and Acrobat 11.x before 11.0...6.4 Medium
- cisco ios xrRace condition in the lighttpd module in Cisco IOS XR 5.1 and earlier on Network Convergence...5.0 Medium
- adobe air, air sdk, flash player +1 more +3 moreRace condition in Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on...4.3 Medium
- debian linux, linux kernel, canonical ubuntu linux +1 more +3 moreRace condition in the __kvm_migrate_pit_timer function in arch/x86/kvm/i8254.c in the KVM...4.7 Medium
- cisco intrusion prevention systemRace condition in the IP logging feature in Cisco Intrusion Prevention System (IPS) Software 7.1...7.1 High
- apple mac os xRace condition in LoginWindow in Apple OS X before 10.10 allows physically proximate attackers to...6.9 Medium
- openstack novaRace condition in the VMware driver in OpenStack Compute (Nova) before 2014.1.4 and 2014.2 before...6.5 Medium
- cisco asaRace condition in the Health and Performance Monitoring (HPM) for ASDM feature in Cisco ASA...7.8 High
- fishshell fishThe funced function in fish (aka fish-shell) 1.23.0 before 2.1.1 does not properly create...7.0 High
- fishshell fishThe psub function in fish (aka fish-shell) 1.16.0 before 2.1.1 does not properly create temporary...7.0 High
- plone, zope +1 morePlone and Zope2 affected by Race Condition4.3 Medium
- debian linux, linux kernel +1 moreRace condition in the prepare_binprm function in fs/exec.c in the Linux kernel before 3.19.6...6.2 Medium
- Show moreLoading…