CWE-362: Race Condition
The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.
Also known as Concurrent Execution using Shared Resource with Improper Synchronization.
A kind of CWE-662 Improper Synchronization.
From the CWE List. © The MITRE Corporation.
Newest
- google android, qualcomm, inc. all qualcomm products +1 moreIn TrustZone in all Android releases from CAF using the Linux kernel, a Time-of-Check Time-of-Use...7.0 High
- google android, qualcomm, inc. all qualcomm products +1 moreIn the Embedded File System in all Android releases from CAF using the Linux kernel, a Time-of...7.0 High
- canonical ubuntu linux, debian linux, file\ \ +2 moreRace condition in the rmtree and remove_tree functions in the File-Path module before 2.13 for...5.9 Medium
- sudo project sudoTodd Miller's sudo version 1.8.20 and earlier is vulnerable to an input validation (embedded...6.4 Medium
- apple tvos, watchos, iphone os +1 more +3 moreAn issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10...7.0 High
- apple mac os xAn issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue...7.0 High
- apple tvos, watchos, iphone os +1 more +3 moreAn issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10...7.0 High
- google android, qualcomm, inc. all qualcomm products +1 moreA time-of-check time-of-use race condition could potentially exist in the secure file system in...7.0 High
- google android, qualcomm, inc. all qualcomm products +1 moreIn TrustZone a time-of-check time-of-use race condition could potentially exist in a listener...7.0 High
- google android, qualcomm, inc. all qualcomm products +1 moreIn TrustZone a time-of-check time-of-use race condition could potentially exist in a QFPROM...7.0 High
- google android, qualcomm, inc. all qualcomm products +1 moreIn TrustZone a time-of-check time-of-use race condition could potentially exist in an...7.0 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn core_info_read and inst_info_read in all Android releases from CAF using the Linux kernel,...7.0 High
- nvidia gpu display driver, gpu driver +1 moreAll versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode...7.0 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +8 more +10 moreIn F5 BIG-IP 12.1.0 through 12.1.2, permissions enforced by iControl can lag behind the actual...7.5 High
- google chrome, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreIncorrect handling of picture ID in WebRTC in Google Chrome prior to 58.0.3029.96 for Mac,...7.5 High
- radicaleRadicale is vulnerable to timing oracles and simple bruteforce attacks8.1 High
- google chrome, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreA race condition in navigation in Google Chrome prior to 58.0.3029.81 for Linux, Windows, and Mac...5.3 Medium
- cisco ios xe, ios xe software +1 moreA vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS XE 3.16...6.3 Medium
- pulpproject pulpPulp before 2.8.3 creates a temporary directory during CA key generation in an insecure manner.5.3 Medium
- google android, linux kernel +1 moreAn elevation of privilege vulnerability in the Qualcomm Seemp driver could enable a local...7.0 High
- backintime project backintimeThe _checkPolkitPrivilege function in serviceHelper.py in Back In Time (aka backintime) 1.1.18...8.1 High
- apple tvos, watchos, iphone os +1 more +3 moreAn issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10...7.0 High
- apple tvos, watchos, iphone os +1 more +3 moreAn issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10...7.0 High
- apple mac os xAn issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue...7.8 High
- s-nail project s-nailDirectory traversal vulnerability in the setuid root helper binary in S-nail (later S-mailx)...7.0 High
- qemuLocal privilege escalation vulnerability in the Gentoo QEMU package before 2.5.0-r1.10.0 Critical
- samba, debian linux, redhat enterprise linux +2 moreSamba before versions 4.6.1, 4.5.7 and 4.4.11 are vulnerable to a malicious client using a...7.5 High
- vmware toolsVMware Tools prior to 10.0.9 contains multiple file system races in libDeployPkg, related to the...6.7 Medium
- linux kernelRace condition in kernel/ucount.c in the Linux kernel through 4.10.2 allows local users to cause...7.0 High
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreGoogle Chrome prior to 57.0.2987.98 for Windows and Mac had a race condition, which could cause...8.1 High
- debian linux, linux kernel +1 moreRace condition in drivers/tty/n_hdlc.c in the Linux kernel through 4.10.1 allows local users to...7.0 High
- mozilla firefoxA non-existent chrome.manifest file will attempt to be loaded during startup from the primary...5.5 Medium
- linux kernel, google android +1 moreRace condition in the L2TPv3 IP Encapsulation feature in the Linux kernel before 4.8.14 allows...7.0 High
- veritas netbackup, netbackup appliance +1 moreAn issue was discovered in Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and...7.0 High
- linux kernelRace condition in net/packet/af_packet.c in the Linux kernel before 4.9.13 allows local users to...7.0 High
- debian linux, linux util-linux, redhat enterprise linux desktop +4 more +6 moreA race condition was found in util-linux before 2.32.1 in the way su handled the management of...5.5 Medium
- linux kernelRace condition in kernel/events/core.c in the Linux kernel before 4.9.7 allows local users to...7.0 High
- linux kernelRace condition in the sctp_wait_for_sndbuf function in net/sctp/socket.c in the Linux kernel...5.5 Medium
- linux kernel, google android +1 moreRace condition in the ip4_datagram_release_cb function in net/ipv4/datagram.c in the Linux kernel...7.8 High
- dockerInformation Exposure in RunC6.4 Medium
- igniterealtime smack, fedoraproject fedora +1 moreSmack allows the bypass of TLS protections5.9 Medium
- apache tomcatConcurrent Execution using Shared Resource with Improper Synchronization in Apache Tomcat7.5 High
- linux kernelRace condition in the netlink_dump function in net/netlink/af_netlink.c in the Linux kernel...7.8 High
- linux kernelRace condition in the snd_pcm_period_elapsed function in sound/core/pcm_lib.c in the ALSA...7.8 High
- linux kernel, canonical ubuntu linux +1 moreRace condition in net/packet/af_packet.c in the Linux kernel through 4.8.12 allows local users to...7.8 High
- qemu, citrix xenserver +1 moreRace condition in QEMU in Xen allows local x86 HVM guest OS administrators to gain privileges by...7.5 High
- mozilla firefoxCanvas allows the use of the "feDisplacementMap" filter on images loaded cross-origin. The...7.0 High
- linux kernelRace condition in the environ_read function in fs/proc/base.c in the Linux kernel before 4.5.4...5.5 Medium
- linux kernelRace condition in the get_task_ioprio function in block/ioprio.c in the Linux kernel before 4.6.6...7.8 High
- linux kernelRace condition in kernel/events/core.c in the Linux kernel before 4.4 allows local users to gain...7.0 High
- Show moreLoading…