VYPR

CWE-362

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

ClassDraftLikelihood: Medium

Description

The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.

Hierarchy (View 1000)

Related attack patterns (CAPEC)

CAPEC-26 · CAPEC-29

CVEs mapped to this weakness (2,597)

page 12 of 130
  • CVE-2020-36463HigAug 8, 2021
    risk 0.53cvss 8.1epss 0.01

    An issue was discovered in the multiqueue crate through 2020-12-25 for Rust. There are unconditional implementations of Send for InnerSend<RW, T>, InnerRecv<RW, T>, FutInnerSend<RW, T>, and FutInnerRecv<RW, T>.

  • CVE-2020-36461HigAug 8, 2021
    risk 0.53cvss 8.1epss 0.01

    An issue was discovered in the noise_search crate through 2020-12-10 for Rust. There are unconditional implementations of Send and Sync for MvccRwLock.

  • CVE-2020-36460HigAug 8, 2021
    risk 0.53cvss 8.1epss 0.01

    An issue was discovered in the model crate through 2020-11-10 for Rust. The Shared data structure has an implementation of the Send and Sync traits without regard for the inner type.

  • CVE-2020-36459HigAug 8, 2021
    risk 0.53cvss 8.1epss 0.01

    An issue was discovered in the dces crate through 2020-12-09 for Rust. The World type is marked as Send but lacks bounds on its EntityStore and ComponentStore.

  • CVE-2020-36458HigAug 8, 2021
    risk 0.53cvss 8.1epss 0.01

    An issue was discovered in the lexer crate through 2020-11-10 for Rust. For ReaderResult<T, E>, there is an implementation of Sync with a trait bound of T: Send, E: Send.

  • CVE-2020-36456HigAug 8, 2021
    risk 0.53cvss 8.1epss 0.01

    An issue was discovered in the toolshed crate through 2020-11-15 for Rust. In CopyCell, the Send trait lacks bounds on the contained type.

  • CVE-2020-36453HigAug 8, 2021
    risk 0.53cvss 8.1epss 0.01

    An issue was discovered in the scottqueue crate through 2020-11-15 for Rust. There are unconditional implementations of Send and Sync for Queue.

  • CVE-2020-36450HigAug 8, 2021
    risk 0.53cvss 8.1epss 0.01

    An issue was discovered in the bunch crate through 2020-11-12 for Rust. There are unconditional implementations of Send and Sync for Bunch.

  • CVE-2020-36448HigAug 8, 2021
    risk 0.53cvss 8.1epss 0.01

    An issue was discovered in the cache crate through 2020-11-24 for Rust. There are unconditional implementations of Send and Sync for Cache.

  • CVE-2020-36446HigAug 8, 2021
    risk 0.53cvss 8.1epss 0.01

    An issue was discovered in the signal-simple crate through 2020-11-15 for Rust. There are unconditional implementations of Send and Sync for SyncChannel.

  • CVE-2020-36445HigAug 8, 2021
    risk 0.53cvss 8.1epss 0.01

    An issue was discovered in the convec crate through 2020-11-24 for Rust. There are unconditional implementations of Send and Sync for ConVec.

  • CVE-2020-36444HigAug 8, 2021
    risk 0.53cvss 8.1epss 0.01

    An issue was discovered in the async-coap crate through 2020-12-08 for Rust. Send and Sync are implemented for ArcGuard<RC, T> without trait bounds on RC.

  • CVE-2020-36442HigAug 8, 2021
    risk 0.53cvss 8.1epss 0.01

    An issue was discovered in the beef crate before 0.5.0 for Rust. beef::Cow has no Sync bound on its Send trait.

  • CVE-2021-22428HigAug 2, 2021
    risk 0.53cvss 8.1epss 0.01

    There is an Incomplete Cleanup Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to authentication bypass.

  • CVE-2021-22427HigAug 2, 2021
    risk 0.53cvss 8.1epss 0.01

    There is a Heap-based Buffer Overflow Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to authentication bypass.

  • CVE-2021-22384HigAug 2, 2021
    risk 0.53cvss 8.1epss 0.01

    There is an Information Disclosure Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to authentication bypass.

  • CVE-2021-0514HigJul 14, 2021
    risk 0.53cvss 8.1epss 0.01

    In several functions of the V8 library, there is a possible use after free due to a race condition. This could lead to remote code execution in an unprivileged process with no additional execution privileges needed. User interaction is not needed for exploitation.Product:…

  • CVE-2021-24377HigJun 21, 2021
    risk 0.53cvss 8.1epss 0.01

    The Autoptimize WordPress plugin before 2.7.8 attempts to remove potential malicious files from the extracted archive uploaded via the 'Import Settings' feature, however this is not sufficient to protect against RCE as a race condition can be achieved in between the moment the…

  • CVE-2020-14104HigApr 8, 2021
    risk 0.53cvss 8.1epss 0.01

    A RACE CONDITION on XQBACKUP causes a decompression path error on Xiaomi router AX3600 with ROM version =1.0.50.

  • CVE-2018-20316HigJan 7, 2021
    risk 0.53cvss 8.1epss 0.01

    Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a proxyDoAction race condition that can cause a stack-based buffer overflow or an out-of-bounds read, a different issue than CVE-2018-20310 because of a different opcode.