cbcvebase.
CVE-2009-1238
published 2009-04-02

CVE-2009-1238: Race condition in the HFS vfs sysctl interface in XNU 1228.8.20 and earlier on Apple Mac OS X 10.5.6 and earlier allows local users to cause a denial of…

PriorityP427high7.2CVSS 2.0
AVLACLAuNCCICAC
EXPLOIT
EPSS
0.62%
46.1th percentile
Race condition in the HFS vfs sysctl interface in XNU 1228.8.20 and earlier on Apple Mac OS X 10.5.6 and earlier allows local users to cause a denial of service (kernel memory corruption) by simultaneously executing the same HFS_SET_PKG_EXTENSIONS code path in multiple threads, which is problematic because of lack of mutex locking for an unspecified global variable.

Affected

110 ranges· showing 25
VendorProductVersion rangeFixed in
applemac_os_x<= 10.5.6—
applemac_os_x——
applemac_os_x——
applemac_os_x——
applemac_os_x——
applemac_os_x——
applemac_os_x——
applemac_os_x——
applemac_os_x——
applemac_os_x——
applemac_os_x——
applemac_os_x——
applemac_os_x——
applemac_os_x——
applemac_os_x——
applemac_os_x——
applemac_os_x——
applemac_os_x——
applemac_os_x——
applemac_os_x——
applemac_os_x——
applemac_os_x——
applemac_os_x——
applemac_os_x——
applemac_os_x——
CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.