cve.bz

CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition, page 13

Filter

The product checks the state of a resource before using that resource, but the resource's state can change between the check and the use in a way that invalidates the results of the check.

What the weakness is: CWE-367 at MITRE

Related attack patterns (CAPEC): 2
  • CAPEC-27 Leveraging Race Conditions via Symbolic Links Likelihood: Medium · Severity: High
  • CAPEC-29 Leveraging Time-of-Check and Time-of-Use (TOCTOU) Race Conditions Likelihood: High · Severity: High

The attack patterns MITRE's CAPEC relates to CWE-367, as MITRE names them. Credits.

Ask an AI about CWE-367

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/367.html and https://cve.bz/cve/cwe/367?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 4.1CVE-2024-27361EPSS 0.1%

    A vulnerability was discovered in Samsung Mobile Processor Exynos 980, Exynos 990, Exynos 1080, Exynos 2100, Exynos 2200, Exynos 1280, Exynos 1380, and Exynos 2400 that involves a time-of-check to time-of-use (TOCTOU) race condition, which…

  2. 4.7CVE-2024-6601EPSS 0.4%

    A race condition could lead to a cross-origin container obtaining permissions of the top-level origin. This vulnerability affects Firefox < 128, Firefox ESR < 115.13, Thunderbird < 115.13, and Thunderbird < 128.

  3. 5.9CVE-2024-39936EPSS 0.5%

    An issue was discovered in HTTP2 in Qt before 5.15.18, 6.x before 6.2.13, 6.3.x through 6.5.x before 6.5.7, and 6.6.x through 6.7.x before 6.7.3. Code to make security-relevant decisions about an established connection may execute too earl…

  4. 7.5CVE-2024-39894EPSS 1.6%

    OpenSSH 9.5 through 9.7 before 9.8 sometimes allows timing attacks against echo-off password entry (e.g., for su and Sudo) because of an ObscureKeystrokeTiming logic error. Similarly, other timing attacks against keystroke entry could occu…

  5. 7.8CVE-2022-27540EPSS 0.1%

    A potential Time-of-Check to Time-of Use (TOCTOU) vulnerability has been identified in the HP BIOS for certain HP PC products, which might allow arbitrary code execution, denial of service, and information disclosure. HP is releasing BIOS …

  6. 5.3CVE-2024-0171EPSS 0.10%

    Dell PowerEdge Server BIOS contains an TOCTOU race condition vulnerability. A local low privileged attacker could potentially exploit this vulnerability to gain access to otherwise unauthorized resources.

  7. 6.4CVE-2024-5558EPSS 0.1%

    CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability exists that could cause escalation of privileges when an attacker abuses a limited admin account.

  8. 7.0CVE-2024-35265EPSS 0.4%

    Windows Perception Service Elevation of Privilege Vulnerability

  9. 7.0CVE-2024-30099EPSS 0.5%

    Windows Kernel Elevation of Privilege Vulnerability

  10. 7.0CVE-2024-30088KEVEPSS 68%

    Windows Kernel Elevation of Privilege Vulnerability

  11. 7.0CVE-2024-30084EPSS 5.9%

    Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

  12. 7.0CVE-2024-36304EPSS 0.4%

    A Time-of-Check Time-Of-Use vulnerability in the Trend Micro Apex One and Apex One as a Service agent could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability …

  13. 7.8CVE-2021-3899EPSS 0.4%

    There is a race condition in the 'replaced executable' detection that, with the correct local configuration, allow an attacker to execute arbitrary code as root.

  14. 7.0CVE-2021-47280EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: drm: Fix use-after-free read in drm_getunique() There is a time-of-check-to-time-of-use error in drm_getunique() due to retrieving file_priv->master prior to locking the…

  15. 8.2CVE-2024-3292EPSS 0.2%

    A race condition vulnerability exists where an authenticated, local attacker on a Windows Nessus Agent host could modify installation parameters at installation time, which could lead to the execution of arbitrary code on the Nessus host. …

  16. 8.2CVE-2024-3290EPSS 0.2%

    A race condition vulnerability exists where an authenticated, local attacker on a Windows Nessus host could modify installation parameters at installation time, which could lead to the execution of arbitrary code on the Nessus host

  17. 4.7CVE-2024-21792EPSS 0.1%

    Time-of-check Time-of-use race condition in Intel(R) Neural Compressor software before version 2.5.0 may allow an authenticated user to potentially enable information disclosure via local access.

  18. 7.8CVE-2024-28137EPSS 0.3%

    A local attacker with low privileges can perform a privilege escalation with an init script due to a TOCTOU vulnerability.

  19. 7.4CVE-2024-29149EPSS 0.2%

    An issue was discovered in Alcatel-Lucent ALE NOE deskphones through 86x8_NOE-R300.1.40.12.4180 and SIP deskphones through 86x8_SIP-R200.1.01.10.728. Because of a time-of-check time-of-use vulnerability, an authenticated attacker is able t…

  20. 6.5CVE-2024-2913EPSS 0.3%

    A race condition vulnerability exists in the mintplex-labs/anything-llm repository, specifically within the user invite acceptance process. Attackers can exploit this vulnerability by sending multiple concurrent requests to accept a single…

  21. 7.0CVE-2023-33119EPSS 0.08%

    Memory corruption while loading a VM from a signed VM image that is not coherent in the processor cache.

  22. 7.7CVE-2024-34528EPSS 0.2%

    WordOps through 3.20.0 has a wo/cli/plugins/stack_pref.py TOCTOU race condition because the conf_path os.open does not use a mode parameter during file creation.

  23. 8.8CVE-2023-32156EPSS 0.4%

    Tesla Model 3 Gateway Firmware Signature Validation Bypass Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected Tesla Model 3 vehicles. An attacker must first obtain the ability to execu…

  24. 7.5CVE-2023-27327EPSS 0.4%

    Parallels Desktop Toolgate Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop. An attacker must first obtain t…

  25. 7.8CVE-2023-27323EPSS 0.2%

    Parallels Desktop Updater Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop. An attacker must first obtain th…

  26. 7.0CVE-2024-26974EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: crypto: qat - resolve race condition during AER recovery During the PCI AER system's error recovery process, the kernel driver may encounter a race condition with freein…

  27. 8.1CVE-2024-23463EPSS 0.4%

    Anti-tampering protection of the Zscaler Client Connector can be bypassed under certain conditions when running the Repair App functionality. This affects Zscaler Client Connector on Windows prior to 4.2.1

  28. 6.0CVE-2022-48682EPSS 0.2%

    In deletefiles in FDUPES before 2.2.0, a TOCTOU race condition allows arbitrary file deletion via a symlink.

  29. 2.2CVE-2024-32482EPSS 0.1%

    The Tillitis TKey signer device application is an ed25519 signing tool. A vulnerability has been found that makes it possible to disclose portions of the TKey’s data in RAM over the USB interface. To exploit the vulnerability an attacker n…

  30. 5.9CVE-2024-2440EPSS 0.5%

    A race condition in GitHub Enterprise Server allowed an existing admin to maintain permissions on a detached repository by making a GraphQL mutation to alter repository permissions while the repository is detached. This vulnerability affec…

  31. 7.5CVE-2024-24995EPSS 2.4%

    A Race Condition (TOCTOU) vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker to execute arbitrary commands as SYSTEM.

  32. 7.5CVE-2024-24993EPSS 2.4%

    A Race Condition (TOCTOU) vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker to execute arbitrary commands as SYSTEM.

  33. 9.8CVE-2024-28718EPSS 1.1%

    An issue in OpenStack magnum yoga-eom version allows a remote attacker to execute arbitrary code via the cert_manager.py. component.

  34. 7.2CVE-2024-29066EPSS 1.3%

    Windows Distributed File System (DFS) Remote Code Execution Vulnerability

  35. 7.1CVE-2024-29062EPSS 0.7%

    Secure Boot Security Feature Bypass Vulnerability

  36. 7.8CVE-2024-26218EPSS 13%

    Windows Kernel Elevation of Privilege Vulnerability

  37. 5.9CVE-2024-1729EPSS 0.5%

    A timing attack vulnerability exists in the gradio-app/gradio repository, specifically within the login function in routes.py. The vulnerability arises from the use of a direct comparison operation (`app.auth[username] == password`) to val…

  38. 5.7CVE-2024-28183EPSS 0.2%

    ESP-IDF is the development framework for Espressif SoCs supported on Windows, Linux and macOS. A Time-of-Check to Time-of-Use (TOCTOU) vulnerability was discovered in the implementation of the ESP-IDF bootloader which could allow an attack…

  39. 7.0CVE-2021-33632EPSS 0.1%

    Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in openEuler iSulad on Linux allows Leveraging Time-of-Check and Time-of-Use (TOCTOU) Race Conditions. This vulnerability is associated with program files https://gitee.Com/op…

  40. 7.2CVE-2023-32282EPSS 0.1%

    Race condition in BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.

  41. 4.7CVE-2024-24692EPSS 0.1%

    Race condition in the installer for Zoom Rooms Client for Windows before version 5.17.5 may allow an authenticated user to conduct a denial of service via local access.

  42. 6.3CVE-2024-0163EPSS 0.1%

    Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain a TOCTOU race condition vulnerability. A local low privileged attacker could potentially exploit this vulnerability to gain access to otherwise unauthorized resources.

  43. 7.0CVE-2024-21433EPSS 5.1%

    Windows Print Spooler Elevation of Privilege Vulnerability

  44. 5.9CVE-2024-27297EPSS 0.6%

    Nix is a package manager for Linux and other Unix systems. A fixed-output derivations on Linux can send file descriptors to files in the Nix store to another program running on the host (or another fixed-output derivation) via Unix domain …

  45. 6.2CVE-2023-52556EPSS 0.1%

    In OpenBSD 7.4 before errata 009, a race condition between pf(4)'s processing of packets and expiration of packet states may cause a kernel panic.

  46. 4.7CVE-2023-52478EPSS 0.3%

    In the Linux kernel, the following vulnerability has been resolved: HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect hidpp_connect_event() has *four* time-of-check vs time-of-use (TOCTOU) races when it races with itself. …

  47. 6.7CVE-2023-6917EPSS 0.2%

    A vulnerability has been identified in the Performance Co-Pilot (PCP) package, stemming from the mixed privilege levels utilized by systemd services associated with PCP. While certain services operate within the confines of limited PCP use…

  48. 8.1CVE-2024-1563EPSS 0.4%

    An attacker could have executed unauthorized scripts on top origin sites using a JavaScript URI when opening an external URL with a custom Firefox scheme and a timeout race condition. This vulnerability affects Focus for iOS < 122.

  49. 7.5CVE-2022-23084EPSS 0.2%

    The total size of the user-provided nmreq to nmreq_copyin() was first computed and then trusted during the copyin. This time-of-check to time-of-use bug could lead to kernel memory corruption. On systems configured to include netmap in t…

  50. 7.0CVE-2024-21371EPSS 11%

    Windows Kernel Elevation of Privilege Vulnerability