CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition.¶
MITRE. CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition. Common Weakness Enumeration.
Cited by¶
1 citation across 1 artifact.
Each citation links to the sentence it supports in the citing article.
Primes¶
- Time-Of-Check To Time-Of-Use Flaw
- In computer security and concurrency — its original setting — a process checks that a file is owned by the user and then opens it, and an attacker swaps the file for a symlink in between; a web app confirms an account is unblocked and then issues a refund the account was frozen against a millisecond earlier.
This sourceCanonical definition of the TOCTOU race-condition weakness in software security, including the symlink file-access example and the atomic check-and-use remedy.
- In computer security and concurrency — its original setting — a process checks that a file is owned by the user and then opens it, and an attacker swaps the file for a symlink in between; a web app confirms an account is unblocked and then issues a refund the account was frozen against a millisecond earlier.
Verification¶
This reference passed the adversarial substantiation pipeline: it was checked to exist and to support the claim it is attached to. See how references were verified.
Registry ID ref:cec76a5db460 · see in the full table