| शीर्षक | allegro ralph bcf65b994ef29fb3fc2e10b660e6288723d5209e CWE-362 Concurrent Execution using Shared Resource with Improper |
|---|
| विवरण | allegro/ralph allocates asset hostnames by incrementing AssetLastHostname.counter and then performing a separate unlocked read of the same row in AssetLastHostname.increment_hostname(). Concurrent callers can interleave so that two workers both read the later committed counter value and return the same formatted hostname. This can assign duplicate hostnames during concurrent asset creation, affecting inventory identity, DNS, provisioning, or automation that relies on hostname uniqueness. |
|---|
| स्रोत | ⚠️ https://github.com/allegro/ralph/issues/3950 |
|---|
| उपयोगकर्ता | GalaxynC (UID 98975) |
|---|
| सबमिशन | 13/06/2026 01:21 PM (1 महीना पहले) |
|---|
| संयम | 18/07/2026 10:40 AM (1 month later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 380027 [allegro तक bcf65b994ef29fb3fc2e10b660e6288723d5209e Hostname Allocation assets.py AssetLastHostname.increment_hostname counter रेस कंडीशन] |
|---|
| अंक | 20 |
|---|