VYPR

CWE-391

Unchecked Error Condition

BaseIncompleteLikelihood: Medium

Description

[PLANNED FOR DEPRECATION. SEE MAINTENANCE NOTES AND CONSIDER CWE-252, CWE-248, OR CWE-1069.] Ignoring exceptions and other error conditions may allow an attacker to induce unexpected behavior unnoticed.

Hierarchy (View 1000)

Parents

Children

none

CVEs mapped to this weakness (1)

CVESevRiskCVSSEPSSKEVPublishedDescription
CVE-2017-7496Hig0.467.00.00Jun 26, 2017fedora-arm-installer up to and including 1.99.16 is vulnerable to local privilege escalation due to lack of checking the error condition of mount operation failure on unsafely created temporary directories.