During a SQL update of a database, a temporary field used as part of the update sequence was modified by an attacker before the update completed in order to allow access to the system. Which of the following best describes this type of vulnerability?
Correct Answer: A
A race condition occurs when two or more processes attempt to access and modify a shared resource simultaneously, leading to unintended behavior. In this scenario, the attacker was able to modify a temporary field before the SQL update completed, indicating a time-of-check to time-of-use (TOCTOU) vulnerability, which is a type of race condition.
Memory injection (B) refers to inserting malicious code into a running process's memory, but that is not what is happening here.
Malicious update (C) is too broad and does not specifically describe this scenario.
Side loading (D) is a technique where malicious software is loaded via a trusted application, unrelated to this case.
Reference:
CompTIA Security+ SY0-701 Official Study Guide, Threats, Vulnerabilities, and Mitigations domain.