CWE-910 使用过期的文件描述符

  • A+
所属分类:CWE(弱点枚举)

CWE-910 使用过期的文件描述符

Use of Expired File Descriptor

结构: Simple

Abstraction: Base

状态: Incomplete

被利用可能性: Medium

基本描述

The software uses or accesses a file descriptor after it has been closed.

扩展描述

After a file descriptor for a particular file or device has been released, it can be reused. The code might not write to the original file, since the reused file descriptor might reference a different file or device.

相关缺陷

  • cwe_Nature: ChildOf cwe_CWE_ID: 672 cwe_View_ID: 1000 cwe_Ordinal: Primary

适用平台

Language: [{'cwe_Name': 'C', 'cwe_Prevalence': 'Sometimes'}, {'cwe_Name': 'C++', 'cwe_Prevalence': 'Sometimes'}, {'cwe_Class': 'Language-Independent', 'cwe_Prevalence': 'Undetermined'}]

常见的影响

范围 影响 注释
Confidentiality Read Files or Directories The program could read data from the wrong file.
Availability DoS: Crash, Exit, or Restart Accessing a file descriptor that has been closed can cause a crash.

分类映射

映射的分类名 ImNode ID Fit Mapped Node Name
CERT C Secure Coding FIO46-C Exact Do not access a closed file

文章来源于互联网:scap中文网

发表评论

:?: :razz: :sad: :evil: :!: :smile: :oops: :grin: :eek: :shock: :???: :cool: :lol: :mad: :twisted: :roll: :wink: :idea: :arrow: :neutral: :cry: :mrgreen: