CWE-403: File descriptor leak
A process does not close sensitive file descriptors before invoking a child process, which allows the child to perform unauthorized I/O operations using those descriptors.
Also known as Exposure of File Descriptor to Unintended Control Sphere.
A kind of CWE-402 Resource Leak.
From the CWE List. © The MITRE Corporation.
Newest
- open-xchange gmbh ox dovecot ce, ox dovecot pro +1 more When mail_max_userip_connections is set (default 10) and reached, submission-login can crash with... 4.3 Medium
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 +14 more +16 more Pcp: pcp: privilege escalation to root via linux_sockets pmda vulnerability 8.8 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 more Sandbox escape in the Security: Process Sandboxing component 9.6 Critical
- pachno Pachno 1.0.6 Wiki TextParser XML External Entity Injection 9.3 Critical
- ksenia security s.p.a. lares, kseniasecurity lares firmware +1 more Ksenia Security lares Home Automation 1.6 PIN Exposure Vulnerability 9.3 Critical
- cmsimple CMSimple 5.15 Remote Command Execution via Extensions Configuration 8.6 High
- mozilla firefox, thunderbird +1 more Leaking file descriptors from the fork server 7.4 High
- linuxfoundation runc, fedoraproject fedora, red hat ocp-tools-4.15-rhel-8 +26 more +28 more runc container breakout through process.cwd trickery and leaked fds 8.6 High