CWE-667 · Improper Locking (page 8)
Page 8 of 8 — CVEs classified under CWE-667, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-1000127 | High | 7.5 | 2018-03-13 | memcached version prior to 1.4.37 contains an Integer Overflow vulnerability in items.c:item_free() that can result in data corruption and deadlocks due to ite… |
CVE-2010-4210 | High | 7.8 | 2010-11-22 | The pfs_getextattr function in FreeBSD 7.x before 7.3-RELEASE and 8.x before 8.0-RC1 unlocks a mutex that was not previously locked, which allows local users t… |
CVE-2009-4272 | High | 7.5 | 2010-01-27 | A certain Red Hat patch for net/ipv4/route.c in the Linux kernel 2.6.18 on Red Hat Enterprise Linux (RHEL) 5 allows remote attackers to cause a denial of servi… |
CVE-2009-2699 | High | 7.5 | 2009-10-13 | The Solaris pollset feature in the Event Port backend in poll/unix/port.c in the Apache Portable Runtime (APR) library before 1.3.9, as used in the Apache HTTP… |
CVE-2009-2857 | Medium | 5.5 | 2009-08-19 | The kernel in Sun Solaris 8, 9, and 10, and OpenSolaris before snv_103, does not properly handle interaction between the filesystem and virtual-memory implemen… |
CVE-2009-1388 | Medium | 5.5 | 2009-07-05 | The ptrace_start function in kernel/ptrace.c in the Linux kernel 2.6.18 does not properly handle simultaneous execution of the do_coredump function, which allo… |
CVE-2009-1961 | Medium | 4.7 | 2009-06-08 | The inode double locking code in fs/ocfs2/file.c in the Linux kernel 2.6.30 before 2.6.30-rc3, 2.6.27 before 2.6.27.24, 2.6.29 before 2.6.29.4, and possibly ot… |
CVE-2009-1243 | Medium | 5.5 | 2009-04-06 | net/ipv4/udp.c in the Linux kernel before 2.6.29.1 performs an unlocking step in certain incorrect circumstances, which allows local users to cause a denial of… |
CVE-2009-0935 | Medium | 5.5 | 2009-03-18 | The inotify_read function in the Linux kernel 2.6.27 to 2.6.27.13, 2.6.28 to 2.6.28.2, and 2.6.29-rc3 allows local users to cause a denial of service (OOPS) vi… |
CVE-2008-4302 | Medium | 5.5 | 2008-09-29 | fs/splice.c in the splice subsystem in the Linux kernel before 2.6.22.2 does not properly handle a failure of the add_to_page_cache_lru function, and subsequen… |
CVE-2006-4342 | Medium | 5.5 | 2006-10-17 | The kernel in Red Hat Enterprise Linux 3, when running on SMP systems, allows local users to cause a denial of service (deadlock) by running the shmat function… |
CVE-2006-5158 | High | 7.5 | 2006-10-05 | The nlmclnt_mark_reclaim in clntlock.c in NFS lockd in Linux kernel before 2.6.16 allows remote attackers to cause a denial of service (process crash) and deny… |
CVE-2006-2374 | Medium | 5.5 | 2006-06-13 | The Server Message Block (SMB) driver (MRXSMB.SYS) in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows local users to cause a… |
CVE-2006-2275 | High | 7.5 | 2006-05-09 | Linux SCTP (lksctp) before 2.6.17 allows remote attackers to cause a denial of service (deadlock) via a large number of small messages to a receiver applicatio… |
CVE-2005-3847 | Medium | 5.5 | 2005-11-27 | The handle_stop_signal function in signal.c in Linux kernel 2.6.11 up to other versions before 2.6.13 and 2.6.12.6 allows local users to cause a denial of serv… |
CVE-2005-3106 | Medium | 4.7 | 2005-09-30 | Race condition in Linux 2.6, when threads are sharing memory mapping via CLONE_VM (such as linuxthreads and vfork), might allow local users to cause a denial o… |
CVE-2005-2456 | Medium | 5.5 | 2005-08-04 | Array index overflow in the xfrm_sk_policy_insert function in xfrm_user.c in Linux kernel 2.6 allows local users to cause a denial of service (oops or deadlock… |
CVE-2004-0174 | High | 7.5 | 2004-05-04 | Apache 1.4.x before 1.3.30, and 2.0.x before 2.0.49, when using multiple listening sockets on certain platforms, allows remote attackers to cause a denial of s… |
CVE-2002-1915 | Medium | 5.5 | 2002-12-31 | tip on multiple BSD-based operating systems allows local users to cause a denial of service (execution prevention) by using flock() to lock the /var/log/acculo… |
CVE-2002-1914 | Medium | 5.5 | 2002-12-31 | dump 0.4 b10 through b29 allows local users to cause a denial of service (execution prevention) by using flock() to lock the /etc/dumpdates file. |
CVE-2002-1869 | Low | 3.3 | 2002-12-31 | Heysoft EventSave 5.1 and 5.2 and Heysoft EventSave+ 5.1 and 5.2 does not check whether the log file can be written to, which allows attackers to prevent event… |
CVE-2002-1850 | High | 7.5 | 2002-12-31 | mod_cgi in Apache 2.0.39 and 2.0.40 allows local users and possibly remote attackers to cause a denial of service (hang and memory consumption) by causing a CG… |
CVE-2002-0051 | High | 7.8 | 2002-04-04 | Windows 2000 allows local users to prevent the application of new group policy settings by opening Group Policy files with exclusive-read access. |
CVE-2000-1198 | Medium | 5.5 | 2001-08-31 | qpopper POP server creates lock files with predictable names, which allows local users to cause a denial of service for other users (lack of mail access) by cr… |
CVE-2001-0682 | Medium | 5.5 | 2001-08-29 | ZoneAlarm and ZoneAlarm Pro allows a local attacker to cause a denial of service by running a trojan to initialize a ZoneAlarm mutex object which prevents Zone… |
CVE-2000-0338 | Medium | 5.5 | 2000-04-23 | Concurrent Versions Software (CVS) uses predictable temporary file names for locking, which allows local users to cause a denial of service by creating the loc… |