7.2
CVE-2009-1238
- EPSS 0.62%
- Veröffentlicht 02.04.2009 17:30:00
- Zuletzt bearbeitet 16.06.2026 23:06:50
- Erkennungen
LoginRace condition in the HFS vfs sysctl interface in XNU 1228.8.20 and earlier on Apple Mac OS X 10.5.6 and earlier allows local users to cause a denial of service (kernel memory corruption) by simultaneously executing the same HFS_SET_PKG_EXTENSIONS code path in multiple threads, which is problematic because of lack of mutex locking for an unspecified global variable.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Apple ≫ macOS X Server Version <= 10.5.6
Apple ≫ macOS X Server Version 10.0
Apple ≫ macOS X Server Version 10.0.0
Apple ≫ macOS X Server Version 10.0.1
Apple ≫ macOS X Server Version 10.0.2
Apple ≫ macOS X Server Version 10.0.3
Apple ≫ macOS X Server Version 10.0.4
Apple ≫ macOS X Server Version 10.1
Apple ≫ macOS X Server Version 10.1.0
Apple ≫ macOS X Server Version 10.1.1
Apple ≫ macOS X Server Version 10.1.2
Apple ≫ macOS X Server Version 10.1.3
Apple ≫ macOS X Server Version 10.1.4
Apple ≫ macOS X Server Version 10.1.5
Apple ≫ macOS X Server Version 10.2
Apple ≫ macOS X Server Version 10.2.0
Apple ≫ macOS X Server Version 10.2.1
Apple ≫ macOS X Server Version 10.2.2
Apple ≫ macOS X Server Version 10.2.3
Apple ≫ macOS X Server Version 10.2.4
Apple ≫ macOS X Server Version 10.2.5
Apple ≫ macOS X Server Version 10.2.6
Apple ≫ macOS X Server Version 10.2.7
Apple ≫ macOS X Server Version 10.2.8
Apple ≫ macOS X Server Version 10.3
Apple ≫ macOS X Server Version 10.3.0
Apple ≫ macOS X Server Version 10.3.1
Apple ≫ macOS X Server Version 10.3.2
Apple ≫ macOS X Server Version 10.3.3
Apple ≫ macOS X Server Version 10.3.4
Apple ≫ macOS X Server Version 10.3.5
Apple ≫ macOS X Server Version 10.3.6
Apple ≫ macOS X Server Version 10.3.7
Apple ≫ macOS X Server Version 10.3.8
Apple ≫ macOS X Server Version 10.3.9
Apple ≫ macOS X Server Version 10.4
Apple ≫ macOS X Server Version 10.4.0
Apple ≫ macOS X Server Version 10.4.1
Apple ≫ macOS X Server Version 10.4.2
Apple ≫ macOS X Server Version 10.4.3
Apple ≫ macOS X Server Version 10.4.4
Apple ≫ macOS X Server Version 10.4.5
Apple ≫ macOS X Server Version 10.4.6
Apple ≫ macOS X Server Version 10.4.7
Apple ≫ macOS X Server Version 10.4.8
Apple ≫ macOS X Server Version 10.4.9
Apple ≫ macOS X Server Version 10.4.10
Apple ≫ macOS X Server Version 10.4.11
Apple ≫ macOS X Server Version 10.5
Apple ≫ macOS X Server Version 10.5.0
Apple ≫ macOS X Server Version 10.5.1
Apple ≫ macOS X Server Version 10.5.2
Apple ≫ macOS X Server Version 10.5.3
Apple ≫ macOS X Server Version 10.5.4
Apple ≫ macOS X Server Version 10.5.5
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.62% | 0.45 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 7.2 | 3.9 | 10 |
AV:L/AC:L/Au:N/C:C/I:C/A:C
|
CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.
http://secunia.com/advisories/34424
http://www.informationweek.com/news/hardware/mac/showArticle.jhtml?articleID=216401181
http://www.securityfocus.com/bid/34202
http://www.digit-labs.org/files/exploits/xnu-vfssysctl-dos.c
https://www.exploit-db.com/exploits/8265