CWE-910 使用过期的文件描述符

Use of Expired File Descriptor

结构: Simple

Abstraction: Base

状态: Incomplete

被利用可能性: Medium

基本描述

The software uses or accesses a file descriptor after it has been closed.

扩展描述

After a file descriptor for a particular file or device has been released, it can be reused. The code might not write to the original file, since the reused file descriptor might reference a different file or device.

相关缺陷

• cwe_Nature: ChildOf cwe_CWE_ID: 672 cwe_View_ID: 1000 cwe_Ordinal: Primary

适用平台

Language: [{'cwe_Name': 'C', 'cwe_Prevalence': 'Sometimes'}, {'cwe_Name': 'C++', 'cwe_Prevalence': 'Sometimes'}, {'cwe_Class': 'Language-Independent', 'cwe_Prevalence': 'Undetermined'}]

常见的影响

范围	影响	注释
Confidentiality	Read Files or Directories	The program could read data from the wrong file.
Availability	DoS: Crash, Exit, or Restart	Accessing a file descriptor that has been closed can cause a crash.

分类映射

映射的分类名	ImNode ID	Fit	Mapped Node Name
CERT C Secure Coding	FIO46-C	Exact	Do not access a closed file

文章来源于互联网:scap中文网