CWE-388: 7PK - Errors
This category represents one of the phyla in the Seven Pernicious Kingdoms vulnerability classification. It includes weaknesses that occur when an application does not properly handle errors that occur during processing. According to the authors of the Seven Pernicious Kingdoms, "Errors and error handling represent a class of API. Errors related to error handling are so common that they deserve a special kingdom of their own. As with 'API Abuse,' there are two ways to introduce an error-related security vulnerability: the most common one is handling errors poorly (or not at all). The second is producing errors that either give out too much information (to possible attackers) or are difficult to handle."
From the CWE List. © The MITRE Corporation.
Newest
- cisco ios xe software, ios xe +1 more Cisco IOS XE Software Blocks Extensible Exchange Protocol Denial of Service Vulnerability 8.6 High
- cisco iot field network director, iot field network director (iot-fnd) +1 more Cisco IoT Field Network Director Path Traversal Vulnerability 6.5 Medium
- cisco secure firewall threat defense (ftd) software, secure firewall threat defense +1 more Cisco Firepower Threat Defense Software and Cisco FirePOWER Services TLS with Snort 3 Denial of Service Vulnerability 5.8 Medium
- cisco ios xe software, ios xe +1 more A vulnerability in the Layer 2 Tunneling Protocol (L2TP) feature of Cisco IOS XE Software could... 8.6 High
- cisco ios xe software, ios xe +1 more Cisco IOS XE Software for Cisco cBR-8 Converged Broadband Routers DHCP Denial of Service Vulnerability 8.6 High
- cisco ios xe software, ios xe +1 more Cisco IOS XE Software for Catalyst 9200 Series Switches Umbrella Connector Denial of Service Vulnerability 8.6 High
- cisco ios, ios xe +1 more Cisco IOS and IOS XE Software PROFINET Link Layer Discovery Protocol Denial of Service Vulnerability 7.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm mdm9206 firmware, mdm9607 firmware +15 more +17 more Failure in taking appropriate action to handle the error case If keypad gpio deactivation fails... 5.5 Medium
- toaruos project toaruos linker/linker.c in ToaruOS through 1.10.9 has insecure LD_LIBRARY_PATH handling in setuid... 7.8 High
- linux kernel An issue was discovered in the efi subsystem in the Linux kernel through 5.1.5.... 5.5 Medium
- cisco ios xe software, ios xe +1 more Cisco IOS XE Software Catalyst 4500 Cisco Discovery Protocol Denial of Service Vulnerability 7.4 High
- facebook proxygen A potential denial-of-service issue in the Proxygen handling of invalid HTTP2 priority settings ... 7.5 High
- kubernetes, netapp trident, redhat openshift container platform +2 more Privilege Escalation in Kubernetes 9.8 Critical
- cisco systems, inc. small business 100 series wireless access points, small business 300 series wireless access points, cisco wap121 firmware +7 more +9 more A vulnerability in the implementation of Extensible Authentication Protocol over LAN (EAPOL)... 6.8 Medium
- johnson controls bcpro (bcm), metasys system, johnsoncontrols bcpro +2 more Johnson Controls Metasys and BCPro Generation of Error Message Containing Sensitive Information 4.3 Medium
- http-proxy project http-proxy, hackerone http-proxy node module +1 more Insufficient Error Handling in http-proxy 7.5 High
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9625 firmware +31 more +33 more In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and... 9.8 Critical
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9625 firmware +32 more +34 more In Android before 2018-04-05 or earlier security patch level on Qualcomm Small Cell SoC,... 9.8 Critical
- qualcomm msm8909w firmware, sd 205 firmware, sd 210 firmware +22 more +24 more In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and... 5.5 Medium
- qualcomm ipq4019 firmware, mdm9206 firmware, mdm9607 firmware +25 more +27 more In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile,... 9.8 Critical
- qualcomm, inc. snapdragon mobile, qualcomm mdm9635m firmware, sd 400 firmware +1 more +3 more In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile... 9.8 Critical
- cisco catalyst 4500 series switches and cisco catalyst 4500-x series switches, ios, ios xe +2 more A vulnerability in the Bidirectional Forwarding Detection (BFD) offload implementation of Cisco... 8.6 High
- isc bind, bind 9, netapp data ontap edge +1 more +3 more An error handling certain queries using the nxdomain-redirect feature could cause a REQUIRE assertion failure in db.c 7.5 High
- xen An issue was discovered in Xen through 4.9.x allowing guest OS users to cause a denial of service... 7.8 High
- linux kernel The hdpvr_probe function in drivers/media/usb/hdpvr/hdpvr-core.c in the Linux kernel through 4.13... 6.6 Medium
- linux kernel The cp2112_gpio_direction_input function in drivers/hid/hid-cp2112.c in the Linux kernel 4.9.x... 7.8 High
- linux kernel Incorrect error handling in the set_mempolicy and mbind compat syscalls in mm/mempolicy.c in the... 5.5 Medium
- mozilla firefox, firefox esr, thunderbird +7 more +9 more A crash triggerable by web content in which an "ErrorResult" references unassigned memory due to... 9.8 Critical
- linux kernel The vc4_get_bcl function in drivers/gpu/drm/vc4/vc4_gem.c in the VideoCore DRM driver in the... 5.5 Medium
- apache tomcat Concurrent Execution using Shared Resource with Improper Synchronization in Apache Tomcat 7.5 High
- imagemagick The ReadGROUP4Image function in coders/tiff.c in ImageMagick does not check the return value of... 5.5 Medium
- linux kernel arch/x86/kvm/vmx.c in the Linux kernel through 4.9 mismanages the #BP and #OF exceptions, which... 5.5 Medium
- samsung mobile Lack of appropriate exception handling in some receivers of the Telecom application on Samsung... 9.8 Critical
- samsung mobile Lack of appropriate exception handling in some receivers of the Telecom application on Samsung... 9.8 Critical
- samsung mobile Lack of appropriate exception handling in some receivers of the Telecom application on Samsung... 9.8 Critical
- google android On Samsung Galaxy S4 through S7 devices, the "omacp" app ignores security information embedded in... 7.5 High
- google android On Samsung Galaxy S4 through S7 devices, an integer overflow condition exists within libomacp.so... 9.8 Critical
- google android On Samsung Galaxy S4 through S7 devices, absence of permissions on the BroadcastReceiver... 7.5 High
- cisco email security appliance A vulnerability in the configured security policies, including drop email filtering, in Cisco... 7.5 High
- cisco email security appliance A vulnerability in the Multipurpose Internet Mail Extensions (MIME) scanner of Cisco AsyncOS... 7.5 High
- imagemagick, canonical ubuntu linux, opensuse +5 more +7 more The ReadPSDLayers function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to have... 9.8 Critical
- imagemagick ImageMagick allows remote attackers to have unspecified impact via vectors related to error... 9.8 Critical
- chetcpasswd project chetcpasswd Pedro Lineu Orso chetcpasswd 2.3.3 provides a different error message when a request with a valid... 5.0 Medium