alpine 3.6
race weakness #14

A race condition occurs within concurrent environments. It may be in the form of a function call, a small number of instructions, a series of program invocations and more.

5

Weakness Breakdown


Warning code(s):

This accepts filename arguments; if an attacker can move those files, a race condition results..

File Name:

./src/GConf-3.2.6/backends/markup-tree.c

Context:
if (chown (new_filename, st.st_uid, st.st_gid) < 0)

The registered trademark Linux® is used pursuant to a sublicense from the Linux Foundation, the exclusive licensee of Linus Torvalds, owner of the mark on a world­wide basis.