Advisories · Weakness
CWE-413.
Every Advisory and CVE whose sources give the weakness CWE-413, newest first.
-
Out of bound access in PPC due to race condition in global variable access
- Samsung Semiconductor Exynos 2200
- Samsung Semiconductor Exynos 2400
- CWE-413
- CVSS 4.7 Medium
OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Resource Locking vulnerability.
- Dell OpenManage Enterprise
- CWE-413
- CVSS 6.0 Medium
Junos OS: MX Series: Malformed SyncE or PTP clock input causes continuous RE switchover
- Juniper Networks Junos OS
- CWE-413
- CVSS 8.2 High
Junos OS: SRX Series: With WebFiltering enabled prolonged HTTP session load can cause a crash
- Juniper Networks Junos OS
- CWE-413
- CVSS 6.9 Medium
Deadlock in OpenVPN ovpn-dco-win
- OpenVPN ovpn-dco-win
- Denial of service
- CWE-413
- CVSS 6.6 Medium
Flightctl: flightctl: package-global go-git https transport mutated per-repo -- cross-tenant tls-config bleed
- Red Hat RHEM 1.2 for RHEL 10
- Red Hat RHEM 1.2 for RHEL 9
- CWE-413
- CVSS 4.6 Medium
Use after free and crash under special conditions in RPZ code
- NLnet Labs Unbound
- CWE-413
- CVSS 8.7 High
Squid has Denial of Service in ICP Response handling
- squid
- Memory corruption
- CWE-413
- CVSS 6.0 Medium
Pterodactyl improperly locks resources allowing raced queries to create more resources than alloted
- Race condition
- Denial of service
<1.12.0 · fixed in 1.12.0
GHSA-jw2v-cq5x-q68g · CVE-2025-69198 - CVSS 7.3 High
Inadequate lock protection within Xilinx Run time may allow a local attacker to trigger a Use-After-Free condition potentially resulting in loss of confidentiality or availability
- AMD Xilinx Run Time (XRT)
- CWE-413
- CVSS 9.3 CriticalCritical · CVSS 9+
Automation Runtime SDM requests may impact system
- B&R Industrial Automation Automation Runtime
- CWE-413
- CVSS 5.9 Medium
Kernel: deadlock in ksmbd_find_crypto_ctx()
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 6
- CWE-413
- CVSS 7.7 High
X.org X server: In X.Org X server 20.11 through 21.1.16…
- X.org X server
- CWE-413
- CVSS 6.7 Medium
Kernel: vmwgfx: race condition leading to information disclosure vulnerability
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 8.8 Extended Update Support
- CWE-413
- CVSS 5.5 Medium
kernel: A vulnerability was found due to missing lock for IOPOLL flaw in…
- kernel
- CWE-413
- CVSS 8.6 High
Snap One OvrC Cloud: The Hub in the Snap One OvrC cloud platform is a device used to centralize and manage…
- Snap One OvrC Cloud
- CWE-413
-
Kernel: A denial of service problem was found, due to a possible recursive locking scenario…
- Kernel
- CWE-413
- CVSS 7.5 High
Improper Resource Locking vulnerability in Mitsubishi Electric MELSEC iQ-R Series R12CCPU-V firmware versions "16" and prior, Mitsubishi Electric MELSEC-Q Series Q03UDECPU the first 5 digits of seria…
- Mitsubishi Electric MELSEC iQ-R Series R12CCPU-V; Mitsubishi Electric MELSEC-Q Series Q03UDECPU; Mitsubishi Electric MELSEC-Q Series Q04/06/10/13/20/26/50/100UDEHCPU; Mitsubishi Electric MELSEC-Q Series Q03/04/06/13/26UDVCPU; Mitsubishi Electric MELSEC-Q Series Q04/06/13/26UDPVCPU; Mitsubishi Electric MELSEC-Q Series Q12DCCPU-V; Mitsubishi Electric MELSEC-Q Series Q24DHCCPU-V(G); Mitsubishi Electric MELSEC-Q Series Q24/26DHCCPU-LS; Mitsubishi Electric MELSEC-L series L02/06/26CPU(-P); Mitsubishi Electric MELSEC-L series L26CPU-(P)BT; Mitsubishi Electric MELIPC Series MI5122-VW
- CWE-413
- CVSS 8.6 High
Cisco IOS XE Software AppNav-XE Denial of Service Vulnerability
- Cisco IOS XE Software
- CWE-413
- CVSS 8.3 High
Bitdefender BOX v2 bootstrap update_setup command execution vulnerability (VA-2226)
- Bitdefender BOX 2
- CWE-413
- CVSS 7.8 High
An information disclosure vulnerability leading to a potential local escalation of privilege in the procfs service (the /proc filesystem) of BlackBerry QNX Software Development Platform version(s) 6.…
- BlackBerry QNX Software Development Platform (QNX SDP)
- CWE-413