CWE-363: Race Condition Enabling Link Following
The product checks the status of a file or directory before accessing it, which produces a race condition in which the file can be replaced with a link before the access is performed, causing the product to access the wrong file.
A kind of CWE-367 TOCTTOU.
From the CWE List. © The MITRE Corporation.
Newest
- tox-dev filelock filelock: StrictSoftFileLock follows a symbolic link swapped in at <path>.filelock and creates claim files in a directory another local user chooses 5.8 Medium
- tox-dev filelock filelock ReadWriteLock: SQLite reopens the lock database by name, so a planted symlink or journal file makes the lock user's process overwrite or unlink its own files 7.1 High
- tox-dev filelock filelock: SoftFileLock stale-break restore follows a swapped-in symbolic link and hard-links a file of the user running the lock into the lock directory 5.3 Medium
- red hat enterprise linux 10, enterprise linux 9 +1 more Cockpit-files: cockpit-files: arbitrary file ownership and permission modification via symlink race condition 6.0 Medium
- red hat enterprise linux 10, enterprise linux 9 +1 more Cockpit-files: cockpit-files: local attacker can hijack file ownership via symlink race 6.0 Medium
- oracle vm virtualbox Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). ... 6.1 Medium
- hp image assistant HP Image Assistant - Potential Escalation of Privilege 5.4 Medium
- youki-dev youki youki container escape and denial of service due to arbitrary write gadgets and procfs write redirects 7.3 High
- youki-dev youki youki container escape via "masked path" abuse due to mount race conditions 7.3 High
- linuxfoundation runc runc: LSM labels can be bypassed with malicious config using dummy procfs files 7.3 High
- linuxfoundation runc container escape due to /dev/console mount and related races 8.4 High
- linuxfoundation runc runc container escape via "masked path" abuse due to mount race conditions 7.3 High
- linuxfoundation runc runc can be confused to create empty files/directories on the host 3.6 Low
- pterodactyl wings Improper isolation of server file access in github.com/pterodactyl/wings 10.0 Critical
- apple macos, rust-lang rust, apple ipados +4 more +6 more Race condition in std::fs::remove_dir_all in rustlang 7.3 High
- mcafee endpoint security for linux threat prevention (ensltp), endpoint security for linux threat prevention, endpoint security linux threat prevention +2 more Endpoint Security for Linux Threat Prevention (ENSLTP) privilege escalation vulnerability 5.6 Medium