Détail du CWE-910

CWE-910

Use of Expired File Descriptor
Moyen
Incomplete
2013-02-21
00h00 +00:00
2023-06-29
00h00 +00:00
Notifications pour un CWE
Restez informé de toutes modifications pour un CWE spécifique.
Gestion des notifications

Nom: Use of Expired File Descriptor

The product uses or accesses a file descriptor after it has been closed.

Description du CWE

After a file descriptor for a particular file or device has been released, it can be reused. The code might not write to the original file, since the reused file descriptor might reference a different file or device.

Informations générales

Modes d'introduction

Implementation

Plateformes applicables

Langue

Name: C (Sometimes)
Name: C++ (Sometimes)
Class: Not Language-Specific (Undetermined)

Conséquences courantes

Portée Impact Probabilité
ConfidentialityRead Files or Directories

Note: The program could read data from the wrong file.
AvailabilityDoS: Crash, Exit, or Restart

Note: Accessing a file descriptor that has been closed can cause a crash.

Notes de cartographie des vulnérabilités

Justification : This CWE entry is at the Base level of abstraction, which is a preferred level of abstraction for mapping to the root causes of vulnerabilities.
Commentaire : Carefully read both the name and description to ensure that this mapping is an appropriate fit. Do not try to 'force' a mapping to a lower-level Base/Variant simply to comply with this preferred level of abstraction.

Soumission

Nom Organisation Date Date de publication Version
CWE Content Team MITRE 2012-12-21 +00:00 2013-02-21 +00:00 2.4

Modifications

Nom Organisation Date Commentaire
CWE Content Team MITRE 2017-11-08 +00:00 updated Taxonomy_Mappings
CWE Content Team MITRE 2019-01-03 +00:00 updated Relationships
CWE Content Team MITRE 2020-02-24 +00:00 updated Relationships
CWE Content Team MITRE 2023-01-31 +00:00 updated Description
CWE Content Team MITRE 2023-04-27 +00:00 updated Relationships
CWE Content Team MITRE 2023-06-29 +00:00 updated Mapping_Notes