CWE-362: Race Condition
The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.
Also known as Concurrent Execution using Shared Resource with Improper Synchronization.
A kind of CWE-662 Improper Synchronization.
From the CWE List. © The MITRE Corporation.
Newest
- apple itunes, tvos, watchos +2 more +4 moreA race condition was addressed with additional validation. This issue affected versions prior to...7.0 High
- apache http server, canonical ubuntu linux, debian linux +10 more +12 moreIn Apache HTTP Server 2.4 release 2.4.38 and prior, a race condition in mod_auth_digest when...7.5 High
- google chrome, opensuse backports sle, leap +2 moreData race in extensions guest view in Google Chrome prior to 73.0.3683.75 allowed a remote...7.5 High
- capmon access managerAn issue was discovered in CapMon Access Manager 5.4.1.1005. CALRunElevated.exe attempts to...7.0 High
- webargs project webargsWebargs mishandles concurrent JSON parsing8.1 High
- tibco jasperreports server, jaspersoft, jaspersoft reporting and analytics +4 more +6 moreTIBCO JasperReports Server Privilege Escalation Via Race Condition8.8 High
- androidIn bta_hl_sdp_query_results of bta_hl_main.cc, there is a possible use-after-free due to a race...7.5 High
- debian linux, linux kernel, canonical ubuntu linux +21 more +23 moreIn the Linux kernel before 4.20.8, kvm_ioctl_create_device in virt/kvm/kvm_main.c mishandles...8.1 High
- androidIn run of InstallPackageTask.java in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0,...7.0 High
- metinfoAn issue was discovered in Metinfo 6.x. An attacker can leverage a race condition in the backend...8.1 High
- debian linux, linux kernel +1 moreIn the Linux kernel before 4.9.3, fs/xfs/xfs_aops.c allows local users to cause a denial of...4.7 Medium
- qualcomm mdm9206 firmware, mdm9607 firmware, sd 205 firmware +13 more +15 moreWhile processing a packet decode request in MQTT, Race condition can occur leading to an out-of...7.5 High
- polkit project polkit, canonical ubuntu linux, debian linux +6 more +8 moreIn PolicyKit (aka polkit) 0.115, the "start time" protection mechanism can be bypassed because...6.7 Medium
- debian tmpreaper, linux +1 moreDebian tmpreaper version 1.6.13+nmu1 has a race condition when doing a (bind) mount via rename()...7.0 High
- google chromeInappropriate symlink handling and a race condition in the stateful recovery feature...7.0 High
- elastic elasticsearchExposure of Sensitive Information to an Unauthorized Actor in Elasticsearch6.5 Medium
- wizvera veraport, veraport g3 +1 moreWIZVERA Veraport Race Condition Vulnerability8.0 High
- qemu, canonical ubuntu linux, debian linux +2 more +4 morev9fs_wstat in hw/9pfs/9p.c in QEMU allows guest OS users to cause a denial of service (crash)...4.7 Medium
- qemu, [unknown] qemu:, canonical ubuntu linux +1 more +3 moreA flaw was found in qemu Media Transfer Protocol (MTP) before version 3.1.0. A path traversal in...7.0 High
- google androidIn easelcomm_hw_build_scatterlist, there is a possible out of bounds write due to a race...6.4 Medium
- f5 big-ip access policy manager, big-ip access policy manager client, f5 networks, inc. big-ip (apm), big-ip apm clients, big-ip edge client +2 moreThe svpn component of the F5 BIG-IP APM client prior to version 7.1.7.2 for Linux and macOS runs...7.0 High
- yoast seoA Race condition vulnerability in unzip_file in admin/import/class-import-settings.php in the...6.6 Medium
- google androidIn the ClearKey CAS descrambler, there is a possible use after free due to a race condition. This...7.0 High
- systemd, canonical ubuntu linux +1 moresystemd: chown_one() can dereference symlinks7.8 High
- linux kernel, redhat enterprise linux desktop, enterprise linux server +6 more +8 moreIn the Linux kernel through 4.19, a use-after-free can occur due to a race condition between...8.1 High
- hewlett packard enterprise hpe service governance framework (sgf), hpe service governance framework +1 moreA remote unauthorized disclosure of information vulnerability was identified in HPE Service...5.9 Medium
- cisco ios xe software, ios xe +1 moreCisco IOS XE Software Errdisable Denial of Service Vulnerability6.1 Medium
- debian linux, linux kernel, canonical ubuntu linux +6 more +8 moreAn issue was discovered in the proc_pid_stack function in fs/proc/base.c in the Linux kernel...5.5 Medium
- lenovo group ltd ideapad, hp 310s-14isk firmware, 320-15ikbra firmware +66 more +68 moreBIOS Write Protection Race Condition5.9 Medium
- otcmsOTCMS 3.61 allows remote attackers to execute arbitrary PHP code via the accBackupDir parameter.8.1 High
- qualcomm msm8996au firmware, sd425 firmware, sd427 firmware +17 more +19 moreIn Snapdragon (Automobile ,Mobile) in version MSM8996AU, SD 425, SD 427, SD 430, SD 435, SD 450,...4.7 Medium
- google androidIn all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the...7.0 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the...7.0 High
- gitoliteGitolite before 3.6.9 does not (in certain configurations involving @all or a regex) properly...8.1 High
- st stm32f030c6 firmware, stm32f030c8 firmware, stm32f030cc firmware +69 more +71 moreIncorrect access control in RDP Level 1 on STMicroelectronics STM32F0 series devices allows...4.6 Medium
- [unknown] kernel, debian linux, canonical ubuntu linux +2 moreA flaw was found in the Linux Kernel where an attacker may be able to have an uncontrolled read...5.3 Medium
- google chrome, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreA race condition between permission prompts and navigations in Prompts in Google Chrome prior to...5.3 Medium
- gearsoftware gearaspiwdmGEAR Software products that include GEARAspiWDM.sys, 2.2.5.0, allow local users to cause a denial...4.7 Medium
- openbsd openssh, canonical ubuntu linux, debian linux +19 more +21 moreOpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for...5.3 Medium
- apple icloud, itunes, safari +3 more +5 moreA race condition was addressed with additional validation. This issue affected versions prior...5.9 Medium
- charlesproxy charlesRace condition in the Charles Proxy Settings suid binary in Charles Proxy before 4.2.1 allows...7.0 High
- apache tomcat, debian linux +1 moreApache Tomcat Race Condition vulnerability5.9 Medium
- openstack neutron, red hat openstack-neutron, redhat openstack +2 moreOpenStack Neutron Race Condition vulnerability5.3 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreA race condition in Oilpan in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to...7.5 High
- htslibIn HTSlib 1.8, a race condition in cram/cram_io.c might allow local users to overwrite arbitrary...4.7 Medium
- google android, linux kernel, qualcomm, inc. android for msm, firefox os for msm, qrd android +2 moreAn issue was discovered in the __ns_get_path function in fs/nsfs.c in the Linux kernel before 4...7.0 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreDue to a race condition in the MDSS MDP driver in all Android releases from CAF using the Linux...7.0 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreA race condition exists in a driver in all Android releases from CAF using the Linux kernel ...7.0 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreDue to a race condition in a camera driver ioctl handler in Android releases from CAF using the...7.0 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreDue to a race condition while processing the power stats debug file to read status, a double free...7.0 High
- Show moreLoading…