Vulnerabilities > Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

DATE CVE VULNERABILITY TITLE RISK
2018-02-23 CVE-2017-15829 Race Condition vulnerability in Google Android
In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition exists in a GPU Driver which can potentially lead to a Use After Free condition.
local
google CWE-362
6.9
2018-02-23 CVE-2018-7441 Race Condition vulnerability in Leptonica
Leptonica through 1.75.3 uses hardcoded /tmp pathnames, which might allow local users to overwrite arbitrary files or have unspecified other impact by creating files in advance or winning a race condition, as demonstrated by /tmp/junk_split_image.ps in prog/splitimage2pdf.c.
local
high complexity
leptonica CWE-362
7.0
2018-02-21 CVE-2015-6569 Race Condition vulnerability in Atlassian Floodlight
Race condition in the LoadBalancer module in the Atlassian Floodlight Controller before 1.2 allows remote attackers to cause a denial of service (NULL pointer dereference and thread crash) via a state manipulation attack.
network
atlassian CWE-362
4.3
2018-02-16 CVE-2018-1049 Race Condition vulnerability in multiple products
In systemd prior to 234 a race condition exists between .mount and .automount units such that automount requests from kernel may not be serviced by systemd resulting in kernel holding the mountpoint and any processes that try to use said mount will hang.
4.3
2018-02-09 CVE-2015-1862 Race Condition vulnerability in Abrt Project Abrt
The crash reporting feature in Abrt allows local users to gain privileges by leveraging an execve by root after a chroot into a user-specified directory in a namedspaced environment.
6.9
2018-01-24 CVE-2017-1000503 Race Condition vulnerability in Jenkins
A race condition during Jenkins 2.81 through 2.94 (inclusive); 2.89.1 startup could result in the wrong order of execution of commands during initialization.
network
jenkins CWE-362
6.8
2018-01-19 CVE-2017-7326 Race Condition vulnerability in Yandex Browser
Race condition issue in Yandex Browser for Android before 17.4.0.16 allowed a remote attacker to potentially exploit memory corruption via a crafted HTML page
network
high complexity
yandex CWE-362
5.1
2018-01-18 CVE-2017-3158 Race Condition vulnerability in Apache Guacamole
A race condition in Guacamole's terminal emulator in versions 0.9.5 through 0.9.10-incubating could allow writes of blocks of printed data to overlap.
network
high complexity
apache CWE-362
8.1
2018-01-16 CVE-2018-1000004 Race Condition vulnerability in Linux Kernel
In the Linux kernel 4.12, 3.10, 2.6 and possibly earlier versions a race condition vulnerability exists in the sound system, this can lead to a deadlock and denial of service condition.
network
linux CWE-362
7.1
2018-01-12 CVE-2017-13183 Race Condition vulnerability in Google Android 8.1
In the OMXNodeInstance::useBuffer and IOMX::freeBuffer functions, there is a possible use after free due to a race condition if the user frees the buffer while it's being used in another thread.
local
high complexity
google CWE-362
6.2