Skip to content
OpenAdvisories

Weakness (CWE)

CWE-414: Missing Lock Check

Base Draft

A product does not check to see if a lock is present before performing sensitive operations on a resource.

How to prevent it (1 mitigation)
  1. Architecture and Design, Implementation

    Implement a reliable lock mechanism.

Source: MITRE CWE-414

1 result · Clear filters · Feed

  • Low 2.1

    concurrent-ruby: ReadWriteLock allows wrong-thread write release and stray read-release counter corruption

    concurrent-ruby is a modern concurrency tools for Ruby. Prior to 1.3.7, Concurrent::ReadWriteLock#release_write_lock does not verify that the calling thread acquired the write lock. Any thread with access to the lock object can release an active write lock he…