4.7

CVE-2007-6216

Race condition in the Fibre Channel protocol (fcp) driver and Devices filesystem (devfs) in Sun Solaris 10 allows local users to cause a denial of service (system hang) via some programs that access hardware resources, as demonstrated by the (1) cfgadm and (2) format programs.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Sun ≫ Solaris Version10 Editionx86
Sun ≫ Sunos Version5.10
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.26% 0.175
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4.7 3.4 6.9
AV:L/AC:M/Au:N/C:N/I:N/A:C
CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.

http://osvdb.org/40826
http://osvdb.org/40827
http://secunia.com/advisories/27867
Vendor Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102947-1
Patch
http://sunsolve.sun.com/search/document.do?assetkey=1-66-200182-1
http://www.securityfocus.com/bid/26653
Patch
http://www.securitytracker.com/id?1019025
http://www.vupen.com/english/advisories/2007/4043
https://exchange.xforce.ibmcloud.com/vulnerabilities/38767