1003
This overlaps Insufficient Resource Pool when the "pool" is of size 1. It can also be resultant from
race conditions, although the timing window could be quite large in some cases.
Taxonomy Mappings
Mapped Taxonomy Name Node ID Fit Mapped Node Name
PLOVER Unrestricted Critical Resource Lock
7 Pernicious Kingdoms Deadlock
OWASP Top Ten 2004 A9 CWE More Specific Denial of Service
The CERT Oracle Secure
Coding Standard for Java
(2011)
LCK00-J Use private final lock objects to
synchronize classes that may interact
with untrusted code
The CERT Oracle Secure
Coding Standard for Java
(2011)
LCK07-J Avoid deadlock by requesting and
releasing locks in the same order
Software Fault Patterns SFP22 Unrestricted lock
Related Attack Patterns
CAPEC-ID Attack Pattern Name
25 Forced Deadlock
CWE-413: Improper Resource Locking
Weakness ID : 413
Structure : Simple
Abstraction : Base
Description
The product does not lock or does not correctly lock a resource when the product must have
exclusive access to the resource.
Extended Description
When a resource is not properly locked, an attacker could modify the resource while it is being
operated on by the product. This might violate the product's assumption that the resource will not
change, potentially leading to unexpected behaviors.
Relationships
The table(s) below shows the weaknesses and high level categories that are related to this
weakness. These relationships are defined as ChildOf, ParentOf, MemberOr and give insight to
similar items that may exist at higher and lower levels of abstraction. In addition, relationships such
as PeerOf and CanAlsoBe are defined to show similar weaknesses that may want to be explored.
Relevant to the view "Research Concepts" (CWE-1000)
Nature Type ID Name Page
ChildOf 667 Improper Locking 1464
ParentOf 591 Sensitive Data Storage in Improperly Locked Memory 1329
Relevant to the view "Software Development" (CWE-699)
Nature Type ID Name Page
MemberOf 411 Resource Locking Problems 2325
Applicable Platforms
Language : Not Language-Specific (Prevalence = Undetermined)
Common Consequences
CWE Version 4.14
CWE-413: Improper Resource Locking
CWE-413: Improper Resource Locking