Multiple Operations on Resource in Single-Operation Context
CWE-675
The product performs the same operation on a resource two or more times, when the operation should only be applied once.
We track 3 vulnerabilities of this type. 100% are rated high or critical, and the average CVSS score is 8.2.
Latest Multiple Operations on Resource in Single-Operation Context vulnerabilities
- 9.1 Critical severity
net/http: Multiple Operations on Resource in Single-Operation Context
The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream (refunding data for any sent-but-unread portion of the stream), and again when a request handler reads the buffered data. A malicious client
- 8.4 High severity
Linux: Multiple Operations on Resource in Single-Operation Context
In the Linux kernel, the following vulnerability has been resolved: misc: nsm: only unlock nsm_dev on post-lock error paths nsm_dev_ioctl() jumps to the common out label even when the initial copy_from_user() fails before nsm->lock has been taken. The error pa
- 7.0 High severity
GnuPG: Out-of-bounds Write
In GnuPG before 2.4.9, armor_filter in g10/armor.c has two increments of an index variable where one is intended, leading to an out-of-bounds write for crafted input. (For ExtendedLTS, 2.2.51 and later are fixed versions.)