CWE Code: 362
Vulnerability Type: privilege_escalation
CVSS Score: 7.2
CWE Name:  Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Summary: race condition in pulseaudio 0.9.9, 0.9.10, and 0.9.14 allows local users to gain privileges via vectors involving creation of a hard link, related to the application setting ld_bind_now to 1, and then calling execv on the target of the /proc/self/exe symlink.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: LOCAL
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2009-07-17
Last Modified Date: 2018-10-10