CWE-662: Improper Synchronization Weakness ID: 662 (Weakness Base) Status: Draft
Description
Description Summary
The software attempts to use a shared resource in an exclusive manner, but does not prevent or incorrectly prevents use of the resource by another thread or process.
Time of Introduction
Architecture and Design
Implementation
Common Consequences
Scope Effect Integrity
Confidentiality
Other
Technical Impact: Modify application
data; Read application
data; Alter execution
logic
Potential Mitigations
Phase: Implementation
Use industry standard APIs to synchronize your code.
Relationships
Taxonomy Mappings
Mapped Taxonomy Name Node ID Fit Mapped Node Name CERT C Secure Coding SIG00-C Mask signals handled by noninterruptible signal
handlers CERT C Secure Coding SIG31-C Do not access or modify shared objects in signal
handlers CLASP State synchronization error CERT Java Secure Coding VNA03-J Do not assume that a group of calls to independently atomic
methods is atomic CERT C++ Secure Coding SIG00-CPP Mask signals handled by noninterruptible signal
handlers CERT C++ Secure Coding SIG31-CPP Do not access or modify shared objects in signal
handlers
Content History
Modifications Modification Date Modifier Organization Source 2008-07-01 Eric Dalci Cigital External updated Potential_Mitigations,
Time_of_Introduction 2008-09-08 CWE Content Team MITRE Internal updated Relationships 2008-10-14 CWE Content Team MITRE Internal updated Relationships 2008-11-24 CWE Content Team MITRE Internal updated Relationships,
Taxonomy_Mappings 2009-03-10 CWE Content Team MITRE Internal updated Related_Attack_Patterns 2009-05-27 CWE Content Team MITRE Internal updated Relationships 2010-09-27 CWE Content Team MITRE Internal updated Name, Relationships 2010-12-13 CWE Content Team MITRE Internal updated Description, Relationships,
Taxonomy_Mappings 2011-06-01 CWE Content Team MITRE Internal updated Common_Consequences, Relationships,
Taxonomy_Mappings 2011-09-13 CWE Content Team MITRE Internal updated Relationships,
Taxonomy_Mappings 2012-05-11 CWE Content Team MITRE Internal updated Relationships 2012-10-30 CWE Content Team MITRE Internal updated Potential_Mitigations Previous Entry Names Change Date Previous Entry
Name 2010-09-27 Insufficient
Synchronization
Description
