Skip to content
OpenAdvisories

Weakness (CWE)

CWE-363: Race Condition Enabling Link Following

Base Draft

The product checks the status of a file or directory before accessing it, which produces a race condition in which the file can be replaced with a link before the access is performed, causing the product to access the wrong file.

Source: MITRE CWE-363

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.6
    CVE-2024-45310

    runc can be confused to create empty files/directories on the host

    runc is a CLI tool for spawning and running containers according to the OCI specification. runc 1.1.13 and earlier, as well as 1.2.0-rc2 and earlier, can be tricked into creating empty files or directories in arbitrary locations in the host filesystem by shar…

    opencontainers runc runc github.com/opencontainers/runc Debian Ubuntu Alpine Go