VYPR

CWE-463

Deletion of Data Structure Sentinel

BaseIncomplete

Description

The accidental deletion of a data-structure sentinel can cause serious programming logic problems.

Often times data-structure sentinels are used to mark structure of the data structure. A common example of this is the null character at the end of strings. Another common example is linked lists which may contain a sentinel to mark the end of the list. It is dangerous to allow this type of control data to be easily accessible. Therefore, it is important to protect from the deletion or modification outside of some wrapper interface which provides safety.

Hierarchy (View 1000)

Parents

Children

none

CVEs mapped to this weakness (3)

  • CVE-2024-31475HigMay 14, 2024
    Arubanetworks
    Central Communications service
    risk 0.53cvss 8.2epss 0.00

    There is an arbitrary file deletion vulnerability in the Central Communications service accessed by PAPI (Aruba's access point management protocol). Successful exploitation of this vulnerability results in the ability to delete arbitrary files on the underlying operating system,…

  • CVE-2024-31474HigMay 14, 2024
    Arubanetworks
    Access Point
    risk 0.53cvss 8.2epss 0.00

    There is an arbitrary file deletion vulnerability in the CLI service accessed by PAPI (Aruba's Access Point management protocol). Successful exploitation of this vulnerability results in the ability to delete arbitrary files on the underlying operating system, which could lead…

  • CVE-2024-13318MedJan 10, 2025
    WordPress
    Essential Wp Real Estate
    risk 0.34cvss 5.3epss 0.00

    The Essential WP Real Estate plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the cl_delete_listing_func() function in all versions up to, and including, 1.1.3. This makes it possible for unauthenticated attackers to delete arbitrary…