CWE-362: Race Condition
The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.
Also known as Concurrent Execution using Shared Resource with Improper Synchronization.
A kind of CWE-662 Improper Synchronization.
From the CWE List. © The MITRE Corporation.
Newest
- mariadb, oracle mysql, percona server +1 more +3 moreRace condition in Oracle MySQL before 5.5.52, 5.6.x before 5.6.33, 5.7.x before 5.7.15, and 8.x...7.0 High
- debian linux, linux kernel, canonical ubuntu linux +15 more +17 moreRace condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to...7.0 High
- google androidRace condition in providers/telephony/MmsProvider.java in Telephony in Android 4.x before 4.4.4,...7.8 High
- linux kernelMultiple race conditions in drivers/char/adsprpc.c and drivers/char/adsprpc_compat.c in the...7.0 High
- xenXen 4.7.x and earlier does not properly honor CR0.TS and CR0.EM, which allows local x86 HVM guest...6.3 Medium
- gnu wgetRace condition in wget 1.17 and earlier, when used in recursive or mirroring mode to download a...8.1 High
- pivotal operations managerPivotal Cloud Foundry (PCF) Ops Manager before 1.6.19 and 1.7.x before 1.7.10, when vCloud or...9.8 Critical
- linux kernelRace condition in the ioctl_file_dedupe_range function in fs/ioctl.c in the Linux kernel through...7.4 High
- linux kernelRace condition in the ioctl_send_fib function in drivers/scsi/aacraid/commctrl.c in the Linux...5.1 Medium
- linux kernelRace condition in the ec_device_ioctl_xcmd function in drivers/platform/chrome/cros_ec_dev.c in...5.1 Medium
- linux kernelRace condition in the audit_log_single_execve_arg function in kernel/auditsc.c in the Linux...4.7 Medium
- sudo project sudoThe SHA-2 digest support in the sudoers plugin in sudo after 1.8.7 allows local users with write...7.0 High
- apple webkit, webkitgtk webkitgtk\+ +1 moreWebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote...3.1 Low
- microsoft windows 10, windows 8.1, windows rt 8.1 +1 more +3 moreRace condition in the kernel in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows...4.7 Medium
- adobe flash player, flash player desktop runtime +1 moreRace condition in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on...5.3 Medium
- google androidBluetooth in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allows...7.5 High
- google androidBuffer overflow in the create_pbuf function in btif/src/btif_hh.c in Bluetooth in Android 4.x...7.5 High
- debian linux, linux kernel +1 moreRace condition in the sclp_ctl_ioctl_sccb function in drivers/s390/char/sclp_ctl.c in the Linux...4.7 Medium
- getsymphony symphonySession fixation vulnerability in Symphony CMS 2.6.7, when session.use_only_cookies is disabled,...7.5 High
- ntp, novell suse manager, opensuse leap +7 more +9 morentpd in NTP 4.x before 4.2.8p8, when autokey is enabled, allows remote attackers to cause a...5.9 Medium
- ntp, opensuse leap, opensuse +9 more +11 moreThe process_packet function in ntp_proto.c in ntpd in NTP 4.x before 4.2.8p8 allows remote...7.5 High
- phpmain/php_open_temporary_file.c in PHP before 5.5.28 and 5.6.x before 5.6.12 does not ensure...5.9 Medium
- redhat networkmanagerRace condition in Network Manager before 1.0.12 as packaged in Red Hat Enterprise Linux Desktop 7...6.2 Medium
- apple tvos, watchos, iphone os +1 more +3 moreRace condition in the Disk Images subsystem in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS...5.1 Medium
- google chrome, debian linux, opensuse +2 moreRace condition in the ResourceDispatcherHostImpl::BeginRequest function in content/browser/loader...5.3 Medium
- linux kernel, redhat enterprise linux compute node eus, enterprise linux for ibm z systems eus +3 more +5 moreRace condition in the ldsem_cmpxchg function in drivers/tty/tty_ldsem.c in the Linux kernel...4.7 Medium
- linux kernel, canonical ubuntu linux +1 moreMultiple race conditions in the ext4 filesystem implementation in the Linux kernel before 4.5...5.1 Medium
- mozilla firefoxRace condition in the get implementation in the ServiceWorkerManager class in the Service Worker...7.5 High
- google androidRace condition in Download Manager in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before...8.4 High
- juniper junosRace condition in the RPC functionality in Juniper Junos OS before 12.1X44-D55, 12.1X46 before 12...6.7 Medium
- apple iphone os, mac os x +1 moreRace condition in the kernel in Apple iOS before 9.3 and OS X before 10.11.4 allows attackers to...7.0 High
- mozilla firefox, webrtc project webrtc +1 moreMultiple race conditions in dom/media/systemservices/CamerasChild.cpp in the WebRTC...6.3 Medium
- linux kernelsound/core/timer.c in the Linux kernel before 4.4.1 employs a locking approach that does not...5.1 Medium
- linux kernelsound/core/timer.c in the Linux kernel before 4.4.1 uses an incorrect type of mutex, which allows...5.1 Medium
- linux kernelThe snd_timer_interrupt function in sound/core/timer.c in the Linux kernel before 4.4.1 does not...5.1 Medium
- linux kernelRace condition in the queue_delete function in sound/core/seq/seq_queue.c in the Linux kernel...5.1 Medium
- linux kernel, canonical ubuntu linux +1 moreRace condition in arch/x86/mm/tlb.c in the Linux kernel before 4.4.1 allows local users to gain...7.4 High
- linux kernelRace condition in the tty_ioctl function in drivers/tty/tty_io.c in the Linux kernel through 4.4...6.8 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 morenet/sctp/sm_sideeffect.c in the Linux kernel before 4.3 does not properly manage the relationship...6.2 Medium
- advantech webaccessRace condition in Advantech WebAccess before 8.1 allows remote attackers to execute arbitrary...8.1 High
- mozilla firefox osRace condition in the lockscreen feature in Mozilla Firefox OS before 2.5 allows physically...6.4 Medium
- linux kernelThe keyctl_read_key function in security/keys/keyctl.c in the Linux kernel before 4.3.4 does not...5.5 Medium
- isc bindRace condition in resolver.c in named in ISC BIND 9.9.8 before 9.9.8-P2 and 9.10.3 before 9.10.3...7.1 High
- google chromeRace condition in the MutationObserver implementation in Blink, as used in Google Chrome before...9.3 High
- artsproject arts, kde kdelibs +1 moreaRts 1.5.10 and kdelibs3 3.5.10 and earlier do not properly create temporary directories, which...7.0 High
- microsoft windows 10, windows 7, windows 8 +6 more +8 moreRace condition in the Pragmatic General Multicast (PGM) protocol implementation in Microsoft...7.2 High
- openssl, canonical ubuntu linux, debian linux +10 more +12 moressl/s3_clnt.c in OpenSSL 1.0.0 before 1.0.0t, 1.0.1 before 1.0.1p, and 1.0.2 before 1.0.2d, when...4.3 Medium
- ibm system networking switch center, lenovo switch center +1 moreRace condition in the administration-panel web service in IBM System Networking Switch Center ...7.1 High
- ibm system networking switch center, lenovo switch center +1 moreRace condition in the administration-panel web service in IBM System Networking Switch Center ...7.1 High
- linux kernelRace condition in the rds_sendmsg function in net/rds/sendmsg.c in the Linux kernel before 4.3.3...5.8 Medium
- Show moreLoading…