CWE-662 不恰当的同步机制

Improper Synchronization

结构: Simple

Abstraction: Class

状态: Draft

被利用可能性: unkown


The software attempts to use a shared resource in an exclusive manner, but does not prevent or incorrectly prevents use of the resource by another thread or process.


  • cwe_Nature: ChildOf cwe_CWE_ID: 664 cwe_View_ID: 1000 cwe_Ordinal: Primary

  • cwe_Nature: ChildOf cwe_CWE_ID: 691 cwe_View_ID: 1000

  • cwe_Nature: CanPrecede cwe_CWE_ID: 362 cwe_View_ID: 1000

  • cwe_Nature: CanPrecede cwe_CWE_ID: 362 cwe_View_ID: 699


范围 影响 注释
['Integrity', 'Confidentiality', 'Other'] ['Modify Application Data', 'Read Application Data', 'Alter Execution Logic']




Use industry standard APIs to synchronize your code.


映射的分类名 ImNode ID Fit Mapped Node Name
CERT C Secure Coding SIG00-C Mask signals handled by noninterruptible signal handlers
CERT C Secure Coding SIG31-C CWE More Abstract Do not access shared objects in signal handlers
CLASP State synchronization error
The CERT Oracle Secure Coding Standard for Java (2011) VNA03-J Do not assume that a group of calls to independently atomic methods is atomic
Software Fault Patterns SFP19 Missing Lock


  • CAPEC-25
  • CAPEC-26
  • CAPEC-27
  • CAPEC-29