Fallos del tipo CWE-364

20 resultados

Condição de corrida em manipulador de sinal

Ocorre quando um manipulador de sinal (signal handler) acessa ou modifica dados compartilhados sem sincronização adequada, enquanto o programa principal está usando os mesmos dados. O sinal pode interromper a execução a qualquer momento, causando corrupção de estado, inconsistência de dados ou comportamento imprevisto.

Ejemplo

Um servidor web usa um manipulador SIGCHLD para limpar processos filhos. Se esse handler escreve em uma lista global de conexões abertas sem lock, enquanto a thread principal lê a mesma lista, a lista pode ficar corrompida, causando crash ou uso de ponteiros inválidos.

Cómo mitigar

Use apenas funções async-signal-safe dentro de manipuladores (write, kill, exit, etc.). Evite acessar estruturas de dados complexas; prefira sinalizar um atomic flag e fazer o trabalho real fora do handler. Considere usar mecanismos modernos (eventfd, signalfd) em vez de signal handlers quando possível.

CVE-2024-6387HIGHOpenssh: regresshion - race condition in ssh allows rce/dosEPSS 99.5%CVE-2024-6409HIGHOpenssh: possible remote code execution due to a race condition in signal handling affecting red hat enterprise linux 9EPSS 27.9%CVE-2024-7589HIGHOpenSSH pre-authentication async signal safety issueEPSS 2.0%CVE-1999-0035MEDIUMRace condition in signal handling routine in ftpd, allowing read/write arbitrary files.EPSS 0.8%CVE-2025-4598MEDIUMSystemd-coredump: race condition that allows a local attacker to crash a suid program and gain read access to the resulting core dumpEPSS 0.7%CVE-2023-1285HIGHSignal Handler Race Condition vulnerability in Mitsubishi Electric India GC-ENET-COM whose first 2 digits of 11-digit serial number of unit EPSS 0.7%CVE-2026-24792HIGHweb_webview has a Race Condition vulnerabilityEPSS 0.4%CVE-2023-5676MEDIUMEclipse OpenJ9 possible infinite busy hangEPSS 0.4%CVE-2026-4684HIGHRace condition, use-after-free in the Graphics: WebRender componentEPSS 0.4%CVE-2026-34771HIGHElectron: Use-after-free in WebContents fullscreen, pointer-lock, and keyboard-lock permission callbacksEPSS 0.3%CVE-2025-53092MEDIUMStrapi core vulnerable to sensitive data exposure via CORS misconfigurationEPSS 0.3%CVE-2026-42002MEDIUMConcurrency and locking defects in GSS-TSIGEPSS 0.3%CVE-2020-14317—It was found that the issue for security flaw CVE-2019-3805 appeared again in a further version of JBoss Enterprise Application Platform - CEPSS 0.2%CVE-2019-3805MEDIUMA flaw was discovered in wildfly versions up to 16.0.0.Final that would allow local users who are able to execute init.d script to terminateEPSS 0.2%CVE-2026-52910HIGHbpf: Free reuseport cBPF prog after RCU grace period.EPSS 0.2%CVE-2026-31474HIGHcan: isotp: fix tx.buf use-after-free in isotp_sendmsg()EPSS 0.1%CVE-2026-27766MEDIUMmultimedia_audio_framework has a Race Condition vulnerabilityEPSS 0.1%CVE-2026-46090HIGHALSA: aloop: Fix peer runtime UAF during format-change stopEPSS 0.1%CVE-2026-53185HIGHzram: fix use-after-free in zram_bvec_write_partial()EPSS 0.1%CVE-2026-33565LOWkernel_linux_common_modules has a Race Condition vulnerabilityEPSS 0.1%