cve.bz

CWE-412: Unrestricted Externally Accessible Lock

Filter

The product properly checks for the existence of a lock, but the lock can be externally controlled or influenced by an actor that is outside of the intended sphere of control.

What the weakness is: CWE-412 at MITRE. All weaknesses

Related attack patterns (CAPEC): 1
  • CAPEC-25 Forced Deadlock Likelihood: Low · Severity: High

The attack patterns MITRE's CAPEC relates to CWE-412, as MITRE names them. Credits.

Ask an AI about CWE-412

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-412: Unrestricted Externally Accessible Lock and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/412.html and https://cve.bz/cve/cwe/412?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 1.8CVE-2026-82312EPSS 0.1%

    OpenVPN 2.0.0 through 2.6.22 and 2.7_alpha1 through 2.7.6 on Windows allows local authenticated users to cause a denial of service via a NULL DACL on named IPC objects

  2. 8.8CVE-2026-62426EPSS 0.2%

    [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] To manage the system, sysctl and platform operations are used by the control domain or a possible Xenstore do…

  3. 7.1CVE-2026-25612EPSS 0.2%

    The internal locking mechanism of the MongoDB server uses an internal encoding of the resources in order to choose what lock to take. Collections may inadvertently collide with one another in this representation causing unavailability betw…

  4. 7.5CVE-2023-38505EPSS 0.8%

    DietPi-Dashboard is a web dashboard for the operating system DietPi. The dashboard only allows for one TLS handshake to be in process at a given moment. Once a TCP connection is established in HTTPS mode, it will assume that it should be w…

  5. 7.5CVE-2023-22318EPSS 0.5%

    Denial of service in Webconf in Tribe29 Checkmk Appliance before 1.6.5.

  6. 3.3CVE-2019-11485EPSS 0.3%

    Sander Bos discovered Apport's lock file was in a world-writable directory which allowed all users to prevent crash handling.

  7. 9.8CVE-2019-18269EPSS 1.0%

    Omron’s CS and CJ series PLCs have an unrestricted externally accessible lock vulnerability.