CWE-667: Improper Locking, page 16
Filter
The product does not properly acquire or release a lock on a resource, leading to unexpected resource state changes and behaviors.
What the weakness is: CWE-667 at MITRE. All weaknesses
Related attack patterns (CAPEC): 3
- CAPEC-25 Forced Deadlock Likelihood: Low · Severity: High
- CAPEC-26 Leveraging Race Conditions Likelihood: High · Severity: High
- CAPEC-27 Leveraging Race Conditions via Symbolic Links Likelihood: Medium · Severity: High
The attack patterns MITRE's CAPEC relates to CWE-667, as MITRE names them. Credits.
Ask an AI about CWE-667
Show the prompt
Explain CWE-667: Improper Locking and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/667.html and https://cve.bz/cve/cwe/667?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.
- 7.5CVE-2009-2699EPSS 14%
The Solaris pollset feature in the Event Port backend in poll/unix/port.c in the Apache Portable Runtime (APR) library before 1.3.9, as used in the Apache HTTP Server before 2.2.14 and other products, does not properly handle errors, which…
- 5.5CVE-2009-2857EPSS 0.3%
The kernel in Sun Solaris 8, 9, and 10, and OpenSolaris before snv_103, does not properly handle interaction between the filesystem and virtual-memory implementations, which allows local users to cause a denial of service (deadlock and sys…
- 5.5CVE-2009-1388EPSS 0.4%
The ptrace_start function in kernel/ptrace.c in the Linux kernel 2.6.18 does not properly handle simultaneous execution of the do_coredump function, which allows local users to cause a denial of service (deadlock) via vectors involving the…
- 4.7CVE-2009-1961ExploitEPSS 0.6%
The inode double locking code in fs/ocfs2/file.c in the Linux kernel 2.6.30 before 2.6.30-rc3, 2.6.27 before 2.6.27.24, 2.6.29 before 2.6.29.4, and possibly other versions down to 2.6.19 allows local users to cause a denial of service (pre…
- 5.5CVE-2009-1243EPSS 0.3%
net/ipv4/udp.c in the Linux kernel before 2.6.29.1 performs an unlocking step in certain incorrect circumstances, which allows local users to cause a denial of service (panic) by reading zero bytes from the /proc/net/udp file and unspecifi…
- 5.5CVE-2009-0935EPSS 0.3%
The inotify_read function in the Linux kernel 2.6.27 to 2.6.27.13, 2.6.28 to 2.6.28.2, and 2.6.29-rc3 allows local users to cause a denial of service (OOPS) via a read with an invalid address to an inotify instance, which causes the device…
- 5.5CVE-2008-4302ExploitEPSS 0.6%
fs/splice.c in the splice subsystem in the Linux kernel before 2.6.22.2 does not properly handle a failure of the add_to_page_cache_lru function, and subsequently attempts to unlock a page that was not locked, which allows local users to c…
- 5.5CVE-2006-4342EPSS 0.4%
The kernel in Red Hat Enterprise Linux 3, when running on SMP systems, allows local users to cause a denial of service (deadlock) by running the shmat function on an shm at the same time that shmctl is removing that shm (IPC_RMID), which p…
- 7.5CVE-2006-5158EPSS 3.7%
The nlmclnt_mark_reclaim in clntlock.c in NFS lockd in Linux kernel before 2.6.16 allows remote attackers to cause a denial of service (process crash) and deny access to NFS exports via unspecified vectors that trigger a kernel oops (null …
- 5.5CVE-2006-2374ExploitEPSS 1.7%
The Server Message Block (SMB) driver (MRXSMB.SYS) in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows local users to cause a denial of service (hang) by calling the MrxSmbCscIoctlCloseForCopyChunk with th…
- 7.5CVE-2006-2275EPSS 3.6%
Linux SCTP (lksctp) before 2.6.17 allows remote attackers to cause a denial of service (deadlock) via a large number of small messages to a receiver application that cannot process the messages quickly enough, which leads to "spillover of …
- 5.5CVE-2005-3847EPSS 0.3%
The handle_stop_signal function in signal.c in Linux kernel 2.6.11 up to other versions before 2.6.13 and 2.6.12.6 allows local users to cause a denial of service (deadlock) by sending a SIGKILL to a real-time threaded process while it is …
- 4.7CVE-2005-3106EPSS 0.3%
Race condition in Linux 2.6, when threads are sharing memory mapping via CLONE_VM (such as linuxthreads and vfork), might allow local users to cause a denial of service (deadlock) by triggering a core dump while waiting for a thread that h…
- 5.5CVE-2005-2456EPSS 0.4%
Array index overflow in the xfrm_sk_policy_insert function in xfrm_user.c in Linux kernel 2.6 allows local users to cause a denial of service (oops or deadlock) and possibly execute arbitrary code via a p->dir value that is larger than XFR…
- 7.5CVE-2004-0174EPSS 12%
Apache 1.4.x before 1.3.30, and 2.0.x before 2.0.49, when using multiple listening sockets on certain platforms, allows remote attackers to cause a denial of service (blocked new connections) via a "short-lived connection on a rarely-acces…
- 5.5CVE-2002-1915EPSS 0.3%
tip on multiple BSD-based operating systems allows local users to cause a denial of service (execution prevention) by using flock() to lock the /var/log/acculog file.
- 5.5CVE-2002-1914EPSS 0.3%
dump 0.4 b10 through b29 allows local users to cause a denial of service (execution prevention) by using flock() to lock the /etc/dumpdates file.
- 3.3CVE-2002-1869EPSS 0.3%
Heysoft EventSave 5.1 and 5.2 and Heysoft EventSave+ 5.1 and 5.2 does not check whether the log file can be written to, which allows attackers to prevent events from being recorded by opening the log file using an application such as Micro…
- 7.5CVE-2002-1850ExploitEPSS 17%
mod_cgi in Apache 2.0.39 and 2.0.40 allows local users and possibly remote attackers to cause a denial of service (hang and memory consumption) by causing a CGI script to send a large amount of data to stderr, which results in a read/write…
- 7.8CVE-2002-0051EPSS 0.8%
Windows 2000 allows local users to prevent the application of new group policy settings by opening Group Policy files with exclusive-read access.
- 5.5CVE-2000-1198ExploitEPSS 0.3%
qpopper POP server creates lock files with predictable names, which allows local users to cause a denial of service for other users (lack of mail access) by creating lock files for other mail boxes.
- 5.5CVE-2001-0682EPSS 0.2%
ZoneAlarm and ZoneAlarm Pro allows a local attacker to cause a denial of service by running a trojan to initialize a ZoneAlarm mutex object which prevents ZoneAlarm from starting.
- 5.5CVE-2000-0338ExploitEPSS 1.4%
Concurrent Versions Software (CVS) uses predictable temporary file names for locking, which allows local users to cause a denial of service by creating the lock directory before it is created for use by a legitimate CVS user.