Race Condition — CVEs by weakness type

Adaptive Security Appliance Software HIGH 7.1

CVE-2013-5512

Race condition in the HTTP Deep Packet Inspection (DPI) feature in Cisco Adaptive Security Appliance (ASA) Software 8.2.x before 8.2(5.46), 8.3.x bef…

Mitigation only

Fix from $1,950 2013-10-13

Ubuntu Linux HIGH 7.2

CVE-2013-4288

Race condition in PolicyKit (aka polkit) allows local users to bypass intended PolicyKit restrictions and gain privileges by starting a setuid or pke…

Fix: 0.112.1+

Fix from $1,950 2013-10-03

Debian Linux MEDIUM 6.9

CVE-2013-4327

systemd does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by lev…

Fix: after 207

Fix from $1,600 2013-10-03

Chrome MEDIUM 6.8

CVE-2013-2906

Multiple race conditions in the Web Audio implementation in Blink, as used in Google Chrome before 30.0.1599.66, allow remote attackers to cause a de…

Fix: after 30.0.1599.65

Fix from $1,600 2013-10-02

iOS HIGH 7.8

CVE-2013-5474

Race condition in the IPv6 virtual fragmentation reassembly (VFR) implementation in Cisco IOS 12.2 through 12.4 and 15.0 through 15.3 allows remote a…

Mitigation only

Fix from $1,950 2013-09-27

Linux Kernel HIGH 7.1

CVE-2011-4348

Race condition in the sctp_rcv function in net/sctp/input.c in the Linux kernel before 2.6.29 allows remote attackers to cause a denial of service (s…

Fix: after 2.6.28.10

Fix from $1,950 2013-06-08

Chrome MEDIUM 6.8

CVE-2013-2847

Race condition in the workers implementation in Google Chrome before 27.0.1453.93 allows remote attackers to cause a denial of service (use-after-fre…

Fix: after 27.0.1453.91

Fix from $1,600 2013-05-22

5500 Adaptive Security Appliance MEDIUM 5.4

CVE-2012-5415

Race condition on Cisco Adaptive Security Appliances (ASA) devices allows remote attackers to cause a denial of service (CPU consumption or device re…

Mitigation only

Fix from $1,600 2013-04-16

iOS HIGH 7.8

CVE-2013-1142

Race condition in the VRF-aware NAT feature in Cisco IOS 12.2 through 12.4 and 15.0 through 15.2 allows remote attackers to cause a denial of service…

Fix: after 15.2

Fix from $1,950 2013-03-28

Automatic Bug Reporting Tool MEDIUM 6.9

CVE-2012-5660

abrt-action-install-debuginfo in Automatic Bug Reporting Tool (ABRT) 2.0.9 and earlier allows local users to set world-writable permissions for arbit…

Fix: after 2.0.9

Fix from $1,600 2013-03-12

Essex MEDIUM 5.5

CVE-2013-0266

A flaw was found in the `puppetlabs-cinder` module, as used in PackStack. This vulnerability is due to incorrect file permissions, specifically world…

Patch available

Fix from $1,600 2013-03-08

Chrome HIGH 7.5

CVE-2013-0907

Race condition in Google Chrome before 25.0.1364.152 allows remote attackers to cause a denial of service or possibly have unspecified other impact v…

Fix: after 25.0.1364.126

Fix from $1,950 2013-03-05

Chrome MEDIUM 6.8

CVE-2013-0900

Race condition in the International Components for Unicode (ICU) functionality in Google Chrome before 25.0.1364.97 on Windows and Linux, and before …

Fix: 25.0.1364.97 / 25.0.1364.99+

Fix from $1,600 2013-02-23

Chrome MEDIUM 6.8

CVE-2013-0893

Race condition in Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, allows remote attackers to cause a den…

Fix: 25.0.1364.97 / 25.0.1364.99+

Fix from $1,600 2013-02-23

Linux Kernel MEDIUM 6.9

CVE-2013-0871

Race condition in the ptrace functionality in the Linux kernel before 3.7.5 allows local users to gain privileges via a PTRACE_SETREGS ptrace system …

Fix: 3.7.5+

Fix from $1,600 2013-02-18

Springsource Spring Security MEDIUM 5.1

CVE-2011-2731

Race condition in the RunAsManager mechanism in VMware SpringSource Spring Security before 2.0.7 and 3.0.x before 3.0.6 stores the Authentication obj…

Fix: after 3.0.5

Fix from $1,600 2012-12-05

Chrome MEDIUM 6.8

CVE-2012-5119

Race condition in Pepper, as used in Google Chrome before 23.0.1271.64, allows remote attackers to cause a denial of service or possibly have unspeci…

Fix: after 23.0.1271.62

Fix from $1,600 2012-11-07

Safari MEDIUM 5.1

CVE-2012-3748EPSS 17%

Race condition in WebKit in Apple iOS before 6.0.1 and Safari before 6.0.2 allows remote attackers to execute arbitrary code or cause a denial of ser…

Fix: after 6.0.1

Fix from $1,600 2012-11-03

Chrome HIGH 9.3

CVE-2012-5108

Race condition in Google Chrome before 22.0.1229.92 allows remote attackers to execute arbitrary code via vectors related to audio devices.

Fix: after 22.0.1229.91

Fix from $1,950 2012-10-09

Linux Kernel MEDIUM 6.2

CVE-2012-3511

Multiple race conditions in the madvise_remove function in mm/madvise.c in the Linux kernel before 3.4.5 allow local users to cause a denial of servi…

Fix: after 3.4.4

Fix from $1,600 2012-10-04

Linux Kernel MEDIUM 5.9

CVE-2012-3552

Race condition in the IP implementation in the Linux kernel before 3.0 might allow remote attackers to cause a denial of service (slab corruption and…

Fix: 3.0+

Fix from $1,600 2012-10-03

Chrome HIGH 7.5

CVE-2012-2880

Race condition in Google Chrome before 22.0.1229.79 allows remote attackers to cause a denial of service or possibly have unspecified other impact vi…

Fix: after 22.0.1229.78

Fix from $1,950 2012-09-26

Chrome MEDIUM 6.8

CVE-2012-2868

Race condition in Google Chrome before 21.0.1180.89 allows remote attackers to cause a denial of service or possibly have unspecified other impact vi…

Fix: after 21.0.1180.88

Fix from $1,600 2012-08-31

Tunnelblick MEDIUM 6.2

CVE-2012-3483

Race condition in the runScript function in Tunnelblick 3.3beta20 and earlier allows local users to gain privileges by replacing a script file.

Fix: after 3.3beta20

Fix from $1,600 2012-08-26

Zonealarm Extreme Security MEDIUM 6.2

CVE-2010-5184

Race condition in ZoneAlarm Extreme Security 9.1.507.000 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous …

Mitigation only