Skip to main content

Incorrect Synchronization

CVE-2024-58132

Medium
4/10

Summary

In chainmaker-go (aka ChainMaker) before 2.3.6, multiple updates to a single node's configuration can cause other normal nodes to perform concurrent read and write operations on a map, leading to a panic.

  • HIGH
  • NETWORK
  • NONE
  • CHANGED
  • NONE
  • NONE
  • NONE
  • LOW

CWE-821 - Incorrect Synchronization

The software utilizes a shared resource in a concurrent manner, but it does not correctly synchronize access to the resource.

References

Advisory Timeline

  • Published