CWE-362: Race Condition
The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.
Also known as Concurrent Execution using Shared Resource with Improper Synchronization.
A kind of CWE-662 Improper Synchronization.
From the CWE List. © The MITRE Corporation.
Newest
- beegoIncorrect Default Permissions in Beego5.5 Medium
- beegoBeego has a file creation race condition4.7 Medium
- mozilla firefox, firefox esr +1 moreThe Mozilla Maintenance Service does not guard against files being hardlinked to another file in...7.0 High
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition before 11.8.9, 11.9.x before...5.3 Medium
- google android, opensuse leap +1 moreIn the Android kernel in the video driver there is a use after free due to a race condition. This...7.0 High
- google androidIn the Android kernel in the FingerTipS touchscreen driver there is a possible memory corruption...6.4 Medium
- google androidIn the Android kernel in the mnh driver there is a race condition due to insufficient locking....6.4 Medium
- libgcrypt20 project libgcrypt20, canonical ubuntu linux, opensuse leap +3 more +5 moreIt was discovered that there was a ECDSA timing attack in the libgcrypt20 cryptographic library....6.3 Medium
- freebsd, netapp clustered data ontap +1 moreIn FreeBSD 12.0-STABLE before r351264, 12.0-RELEASE before 12.0-RELEASE-p10, 11.3-STABLE before...7.5 High
- comodo antivirusA use-after-free flaw in the sandbox container implemented in cmdguard.sys in Comodo Antivirus 12...4.7 Medium
- google androidIn ActivityManagerService.attachApplication of ActivityManagerService, there is a possible race...7.0 High
- linux kernelAn issue was discovered in drivers/net/ethernet/arc/emac_main.c in the Linux kernel before 4.5. A...7.0 High
- dell alienware digital delivery, digital delivery +1 moreDell/Alienware Digital Delivery versions prior to 4.0.41 contain a privilege escalation...7.8 High
- windriver vxworks, belden garrettcom magnum dx940e firmware, hirschmann hios +9 more +11 moreWind River VxWorks 6.9.4 and vx7 has a Buffer Overflow in the TCP component (issue 4 of 4). There...8.1 High
- cpanelcPanel before 58.0.4 allows a file-ownership change (to nobody) via rearrangeacct (SEC-134).6.8 Medium
- cpanelcPanel before 68.0.27 allows attackers to read root's crontab file during a short time interval...3.3 Low
- elastic elasticsearchConcurrent Execution using Shared Resource with Improper Synchronization in Elasticsearch5.9 Medium
- qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm msm8909w firmware, msm8996au firmware +20 more +22 moreRace condition while accessing DMA buffer in jpeg driver in Snapdragon Auto, Snapdragon...7.0 High
- qualcomm, inc. snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm msm8909w firmware, qcs405 firmware +22 more +24 morePossible race condition that will cause a use-after-free when writing to two sysfs entries at...7.0 High
- facebook zstandardA race condition in the one-pass compression functions of Zstandard prior to version 1.3.8 could...8.1 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +37 more +39 moreA race condition occurs while processing perf-event which can lead to a use after free condition...7.0 High
- gitlabGitLab CE 8.17 and later and EE 8.3 and later have a symlink time-of-check-to-time-of-use race...5.9 Medium
- deepin deepin-clone, fedoraproject fedora +1 moredeepin-clone before 1.1.3 uses a predictable path /tmp/.deepin-clone/mount/<block-dev-basename>...7.0 High
- linux kernelIn arch/x86/lib/insn-eval.c in the Linux kernel before 5.1.9, there is a use-after-free for...7.0 High
- f5 ssl orchestratorOn F5 SSL Orchestrator 14.1.0-14.1.0.5, on rare occasions, specific to a certain race condition,...5.9 Medium
- calamaresmodules/luksbootkeyfile/main.py in Calamares through 3.2.4 has a race condition between the time...8.1 High
- google androidIn createEffect of AudioFlinger.cpp, there is a possible memory corruption due to a race...7.5 High
- google androidIn serviceDied of HalDeathHandlerHidl.cpp, there is a possible memory corruption due to a use...9.8 Critical
- isc bind, bind 9, f5 big-ip access policy manager +15 more +17 moreA race condition when discarding malformed packets can cause BIND to exit with an assertion failure5.9 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreIncorrect security UI in popup blocker in Google Chrome on iOS prior to 75.0.3770.80 allowed a...4.3 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm mdm9206 firmware, mdm9607 firmware +28 more +30 moreMetadata verification and partial hash system calls by bootloader may corrupt parallel hashing...7.0 High
- intel open cloud integrity tehnology, openattestation +1 moreInsufficient password protection in the attestation database for Open CIT may allow an...3.6 Low
- androidIn callGenIDChangeListeners and related functions of SkPixelRef.cpp, there is a possible use...7.0 High
- huawei honor v10, honor 10, honor play, honor 10 firmware, honor play firmware +1 more +3 moreThere is a race condition vulnerability on Huawei Honor V10 smartphones versions earlier than...7.0 High
- mozilla firefox, firefox esr, thunderbird +2 moreA race condition is present in the crash generation server used to generate data for the crash...8.3 High
- gnome glib, canonical ubuntu linux, debian linux +6 more +8 morefile_copy_fallback in gio/gfile.c in GNOME GLib 2.15.0 through 2.61.1 does not properly restrict...9.8 Critical
- gnome gvfsAn issue was discovered in GNOME gvfs 1.29.4 through 1.41.2. daemon/gvfsbackendadmin.c has race...8.1 High
- freeradius, fedoraproject fedora, redhat enterprise linux +2 moreIt was discovered freeradius up to and including version 3.0.19 does not correctly configure...6.4 Medium
- dockerIn Docker through 18.06.1-ce-rc2, the API endpoints behind the 'docker cp' command are vulnerable...7.5 High
- mozilla firefoxA use-after-free vulnerability can occur in AssertWorkerThread due to a race condition with...8.1 High
- intel graphics driverA race condition in Intel(R) Graphics Drivers before version 10.18.14.5067 (aka 15.36.x.5067) and...4.7 Medium
- ellucian banner enterprise identity services, banner web tailor +1 moreAn improper authentication vulnerability can be exploited through a race condition that occurs in...8.1 High
- debian linux, linux kernel, canonical ubuntu linux +11 more +13 moreAn issue was discovered in rds_tcp_kill_sock in net/rds/tcp.c in the Linux kernel before 5.0.8....8.1 High
- debian linux, linux kernel, canonical ubuntu linux +10 more +12 moreAn issue was discovered in the Linux kernel before 4.20. There is a race condition in...8.1 High
- groonga groonga-httpdThe groonga-httpd package 6.1.5-1 for Debian sets the /var/log/groonga ownership to the groonga...7.0 High
- debian linux, linux kernel, netapp active iq +7 more +9 moreThe Siemens R3964 line discipline driver in drivers/tty/n_r3964.c in the Linux kernel before 5.0...7.0 High
- canonical lxdchmod race in doUidshiftIntoContainer7.0 High
- linux kernel, redhat enterprise linux +1 moreIt was found that the net_dma code in tcp_recvmsg() in the 2.6.32 kernel as shipped in RHEL6 is...6.1 Medium
- linux kernel** DISPUTED ** The Linux kernel through 5.0.7, when CONFIG_IA32_AOUT is enabled and ia32_aout is...2.5 Low
- linux kernelThe Linux kernel before 4.8 allows local users to bypass ASLR on setuid programs (such as /bin/su...4.7 Medium
- Show moreLoading…