Improper Resource Locking
CWE-413
The product must have exclusive access to a resource, but it does not lock or does not correctly lock that resource.
We track 7 vulnerabilities of this type. 100% are rated high or critical, and the average CVSS score is 7.9.
How this weakness is prevented
- Architecture and Design Implementation: Use synchronization when locking a resource.
Latest Improper Resource Locking vulnerabilities
- 7.5 High severity
squid: Improper Resource Locking
Squid is a caching proxy for the Web. Prior to version 7.5, due to premature release of resource during expected lifetime and heap Use-After-Free bugs, Squid is vulnerable to Denial of Service when handling ICP traffic. This problem allows a remote attacker to
- 7.3 High severity
Xilinx Run Time (XRT): Improper Resource Locking
Inadequate lock protection within Xilinx Run time may allow a local attacker to trigger a Use-After-Free condition potentially resulting in loss of confidentiality or availability
- 10.0 Critical severity
Automation Runtime: Improper Resource Locking
An Improper Resource Locking vulnerability in the SDM component of B&R Automation Runtime versions before 6.3 and before Q4.93 may allow an unauthenticated network-based attacker to delete data causing denial of service conditions.
- 7.7 High severity
X server: Improper Resource Locking
In X.Org X server 20.11 through 21.1.16, when a client application uses easystroke for mouse gestures, the main thread modifies various data structures used by the input thread without acquiring a lock, aka a race condition. In particular, AttachDevice in dix/
- 7.5 High severity
The Hub in the Snap One OvrC cloud platform is a device used to centralize and manage nested…
The Hub in the Snap One OvrC cloud platform is a device used to centralize and manage nested devices connected to it. A vulnerability exists in which an attacker could impersonate a hub and send device requests to claim already claimed devices. The OvrC cloud
- 7.5 High severity
Mitsubishi Electric MELSEC iQ-R Series…: Improper Locking
Improper Resource Locking vulnerability in Mitsubishi Electric MELSEC iQ-R Series R12CCPU-V firmware versions "16" and prior, Mitsubishi Electric MELSEC-Q Series Q03UDECPU the first 5 digits of serial No. "24061" and prior, Mitsubishi Electric MELSEC-Q Series
- 7.5 High severity
Cisco IOS XE Software: Improper Handling of Exceptional Conditions
A vulnerability in the AppNav-XE feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition. This vulnerability is due to the incorrect handling of ce