Race Condition Enabling Link Following
CWE-363
The product checks the status of a file or directory before accessing it, which produces a race condition in which the file can be replaced with a link before the access is performed, causing the product to access the wrong file.
We track 8 vulnerabilities of this type. 100% are rated high or critical, and the average CVSS score is 8.2.
Latest Race Condition Enabling Link Following vulnerabilities
- 7.1 High severity
filelock: Improper Link Resolution Before File Access
filelock is a platform-independent file lock for Python. From 3.20.4 until 4.2.1, ReadWriteLock let SQLite reopen the database and side files by name; on POSIX systems an attacker with rename access in a non-sticky parent can swap those names to cause overwrit
- 7.0 High severity
HP Image Assistant: Race Condition Enabling Link Following
A potential security vulnerability has been identified in HP Image Assistant for versions prior to 5.3.3. The vulnerability could potentially allow a local attacker to escalate privileges via a race condition when installing packages.
- 7.5 High severity
runc: UNIX Symbolic Link (Symlink) Following
runc is a CLI tool for spawning and running containers according to the OCI specification. In versions 1.2.7, 1.3.2 and 1.4.0-rc.2, an attacker can trick runc into misdirecting writes to /proc to other procfs files through the use of a racing container with sh
- 7.5 High severity
runc: UNIX Symbolic Link (Symlink) Following
runc is a CLI tool for spawning and running containers according to the OCI specification. Versions 1.0.0-rc3 through 1.2.7, 1.3.0-rc.1 through 1.3.2, and 1.4.0-rc.1 through 1.4.0-rc.2, due to insufficient checks when bind-mounting `/dev/pts/$n` to `/dev/conso
- 7.8 High severity
runc: UNIX Symbolic Link (Symlink) Following
runc is a CLI tool for spawning and running containers according to the OCI specification. In versions 1.2.7 and below, 1.3.0-rc.1 through 1.3.1, 1.4.0-rc.1 and 1.4.0-rc.2 files, runc would not perform sufficient verification that the source of the bind-mount
- 10.0 Critical severity
youki: UNIX Symbolic Link (Symlink) Following
Youki is a container runtime written in Rust. In versions 0.5.6 and below, youki’s apparmor handling performs insufficiently strict write-target validation, and when combined with path substitution during pathname resolution, can allow writes to unintended pro
- 10.0 Critical severity
youki: UNIX Symbolic Link (Symlink) Following
Youki is a container runtime written in Rust. In versions 0.5.6 and below, the initial validation of the source /dev/null is insufficient, allowing container escape when youki utilizes bind mounting the container's /dev/null as a file mask. This issue is fixed
- 8.5 High severity
wings: Improper Limitation of a Pathname to a Restricted Directory
Wings is the server control plane for Pterodactyl Panel. This vulnerability impacts anyone running the affected versions of Wings. The vulnerability can potentially be used to access files and directories on the host system. The full scope of impact is exactly