Falhas do tipo CWE-833

33 resultados

Deadlock

Situação em que duas ou mais threads ficam bloqueadas indefinidamente, aguardando uma pela outra para liberar recursos. Ocorre quando há circular wait entre locks — thread A espera recurso preso por B, enquanto B espera recurso preso por A. O programa não falha, mas fica travado.

Exemplo

Thread 1 adquire lock no recurso X e tenta adquirir lock no Y. Simultaneamente, thread 2 adquire lock no Y e tenta adquirir lock no X. Ambas ficam bloqueadas indefinidamente, causando indisponibilidade da aplicação.

Como mitigar

Ordenar a aquisição de locks sempre na mesma sequência (evita circular wait), usar timeouts em operações de lock, ou preferir estruturas thread-safe do framework (concurrent collections em Java, por exemplo) em lugar de locks manuais.

CVE-2024-47506HIGHJunos OS: SRX Series: A large amount of traffic being processed by ATP Cloud can lead to a PFE crashEPSS 0.3%CVE-2025-36010MEDIUMIBM Db2 for Linux denial of serviceEPSS 0.3%CVE-2025-10150HIGHWebserver crash caused by scanning on TCP port 80EPSS 0.3%CVE-2026-10647MEDIUMDeadlock denial of service in USB CDC-NCM device class on TX enqueue failureEPSS 0.2%CVE-2022-4269MEDIUMA flaw was found in the Linux kernel Traffic Control (TC) subsystem. Using a specific networking configuration (redirecting egress packets tEPSS 0.2%CVE-2026-77798MEDIUMVelociraptor Authenticated Denial of ServiceEPSS 0.2%CVE-2024-0639MEDIUMKernel: potential deadlock on &net->sctp.addr_wq_lock leading to dosEPSS 0.2%CVE-2026-33904MEDIUMElla Core has a Denial of Service via SCTP connection cleanup deadlockEPSS 0.2%CVE-2023-3436LOWDeadlock in Xpdf 4.04 due to PDF object stream referencesEPSS 0.2%CVE-2024-0641MEDIUMKernel: deadlock leading to denial of service in tipc_crypto_key_revokeEPSS 0.2%CVE-2026-105390MEDIUMImproper synchronization in the OpenVPN ovpn-dco-win for Windows versions 0.6.5 through 1.3.5 and 2.4.0 through 2.8.7 allows local attackersEPSS 0.1%CVE-2026-118052MEDIUMModule Manager loaders leave the manager mutex held when a module preamble's sizes overflow, blocking every later module operationEPSS 0.1%CVE-2026-47334MEDIUMDeadlock or kernel panic in Ubuntu Linux AppArmor notification handlingEPSS 0.1%