CWE-667: Improper Locking
The product does not properly acquire or release a lock on a resource, leading to unexpected resource state changes and behaviors.
A kind of CWE-662 Improper Synchronization.
From the CWE List. © The MITRE Corporation.
Newest
- linux kernel, redhat enterprise linux desktop, enterprise linux eus +3 more +5 moreA certain Red Hat patch for net/ipv4/route.c in the Linux kernel 2.6.18 on Red Hat Enterprise...7.5 High
- apache http server, portable runtime +1 moreThe Solaris pollset feature in the Event Port backend in poll/unix/port.c in the Apache Portable...7.5 High
- oracle opensolaris, solaris +1 moreThe kernel in Sun Solaris 8, 9, and 10, and OpenSolaris before snv_103, does not properly handle...5.5 Medium
- linux kernelThe ptrace_start function in kernel/ptrace.c in the Linux kernel 2.6.18 does not properly handle...5.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +4 more +6 moreThe inode double locking code in fs/ocfs2/file.c in the Linux kernel 2.6.30 before 2.6.30-rc3, 2...4.7 Medium
- linux kernelnet/ipv4/udp.c in the Linux kernel before 2.6.29.1 performs an unlocking step in certain...5.5 Medium
- linux kernelThe inotify_read function in the Linux kernel 2.6.27 to 2.6.27.13, 2.6.28 to 2.6.28.2, and 2.6.29...5.5 Medium
- debian linux, linux kernel, redhat enterprise linux +2 morefs/splice.c in the splice subsystem in the Linux kernel before 2.6.22.2 does not properly handle...5.5 Medium
- redhat enterprise linuxThe kernel in Red Hat Enterprise Linux 3, when running on SMP systems, allows local users to...5.5 Medium
- linux kernel, canonical ubuntu linux, redhat enterprise linux desktop +3 more +5 moreThe nlmclnt_mark_reclaim in clntlock.c in NFS lockd in Linux kernel before 2.6.16 allows remote...7.5 High
- microsoft windows 2000, windows 2003 server, windows xp +2 moreThe Server Message Block (SMB) driver (MRXSMB.SYS) in Microsoft Windows 2000 SP4, XP SP1 and SP2,...5.5 Medium
- canonical ubuntu linux, lksctp stream control transmission protocol +1 moreLinux SCTP (lksctp) before 2.6.17 allows remote attackers to cause a denial of service (deadlock)...7.5 High
- debian linux, linux kernel +1 moreThe handle_stop_signal function in signal.c in Linux kernel 2.6.11 up to other versions before 2...5.5 Medium
- debian linux, canonical ubuntu linux, linux kernel +2 moreRace condition in Linux 2.6, when threads are sharing memory mapping via CLONE_VM (such as...4.7 Medium
- debian linux, linux kernel +1 moreArray index overflow in the xfrm_sk_policy_insert function in xfrm_user.c in Linux kernel 2.6...5.5 Medium
- apache http serverApache 1.4.x before 1.3.30, and 2.0.x before 2.0.49, when using multiple listening sockets on...7.5 High
- freebsd, netbsd, openbsd +2 moretip on multiple BSD-based operating systems allows local users to cause a denial of service ...5.5 Medium
- dump project dumpdump 0.4 b10 through b29 allows local users to cause a denial of service (execution prevention)...5.5 Medium
- heysoft eventsave, eventsave\+ +1 moreHeysoft EventSave 5.1 and 5.2 and Heysoft EventSave+ 5.1 and 5.2 does not check whether the log...3.3 Low
- apache http servermod_cgi in Apache 2.0.39 and 2.0.40 allows local users and possibly remote attackers to cause a...7.5 High
- microsoft windows 2000Windows 2000 allows local users to prevent the application of new group policy settings by...7.8 High
- qualcomm qpopperqpopper POP server creates lock files with predictable names, which allows local users to cause a...5.5 Medium
- checkpoint zonealarm pro, zonelabs zonealarm +1 moreZoneAlarm and ZoneAlarm Pro allows a local attacker to cause a denial of service by running a...5.5 Medium
- concurrent versions software project versions softwareConcurrent Versions Software (CVS) uses predictable temporary file names for locking, which...5.5 Medium