Tên: Sequence of Processor Instructions Leads to Unexpected Behavior

Specific combinations of processor instructions lead to undesirable behavior such as locking the processor until a hard reset performed.

Thông tin chung

Các cách xuất hiện

Architecture and Design : Unexpected behavior from certain instruction combinations can arise from bugs in the ISA
Implementation : Unexpected behavior from certain instruction combinations can arise because of implementation details such as speculative execution, caching etc.

Nền tảng áp dụng

Ngôn ngữ

Lớp: Not Language-Specific (Undetermined)

Hệ điều hành

Lớp: Not OS-Specific (Undetermined)

Kiến trúc

Lớp: Not Architecture-Specific (Undetermined)

Công nghệ

Lớp: Not Technology-Specific (Undetermined)
Tên: Processor Hardware (Undetermined)

Hậu quả phổ biến

Phạm vi	Tác động	Khả năng xảy ra
Integrity Availability	Varies by Context

Ví dụ đã quan sát

Tài liệu tham khảo	Mô tả
CVE-2021-26339	A bug in AMD CPU's core logic allows a potential DoS by using a specific x86 instruction sequence to hang the processor
CVE-1999-1476	A bug in some Intel Pentium processors allow DoS (hang) via an invalid "CMPXCHG8B" instruction, causing a deadlock

Các biện pháp giảm thiểu tiềm năng

Phases : Testing
Implement a rigorous testing strategy that incorporates randomization to explore instruction sequences that are unlikely to appear in normal workloads in order to identify halt and catch fire instruction sequences.
Phases : Patching and Maintenance
Patch operating system to avoid running Halt and Catch Fire type sequences or to mitigate the damage caused by unexpected behavior. See [REF-1108].

Ghi chú ánh xạ lỗ hổng

Lý do : This CWE entry is at the Base level of abstraction, which is a preferred level of abstraction for mapping to the root causes of vulnerabilities.
Bình luận : Carefully read both the name and description to ensure that this mapping is an appropriate fit. Do not try to 'force' a mapping to a lower-level Base/Variant simply to comply with this preferred level of abstraction.

Mẫu tấn công liên quan

ID CAPEC	Tên mẫu tấn công
CAPEC-212	Functionality Misuse An adversary leverages a legitimate capability of an application in such a way as to achieve a negative technical impact. The system functionality is not altered or modified but used in a way that was not intended. This is often accomplished through the overuse of a specific functionality or by leveraging functionality with design flaws that enables the adversary to gain access to unauthorized, sensitive data.

Tài liệu tham khảo

Gửi

Tên	Tổ chức	Ngày	Ngày phát hành	Version
Nicole Fern	Cycuity (originally submitted as Tortuga Logic)	2020-05-15 +00:00	2020-02-24 +00:00	4.1

Sửa đổi

Tên	Tổ chức	Ngày	Bình luận
CWE Content Team	MITRE	2020-08-20 +00:00	updated Related_Attack_Patterns
CWE Content Team	MITRE	2021-03-15 +00:00	updated Potential_Mitigations
CWE Content Team	MITRE	2021-07-20 +00:00	updated Name, Observed_Examples
CWE Content Team	MITRE	2022-10-13 +00:00	updated Applicable_Platforms, Demonstrative_Examples
CWE Content Team	MITRE	2023-04-27 +00:00	updated Demonstrative_Examples, Description, References, Relationships
CWE Content Team	MITRE	2023-06-29 +00:00	updated Demonstrative_Examples, Mapping_Notes, References
CWE Content Team	MITRE	2023-10-26 +00:00	updated Demonstrative_Examples, Observed_Examples
CWE Content Team	MITRE	2025-12-11 +00:00	updated Weakness_Ordinalities
CWE Content Team	MITRE	2026-10-28 +00:00	updated Demonstrative_Examples

Chi tiết CWE-1281

CWE-1281

Tên: Sequence of Processor Instructions Leads to Unexpected Behavior

Thông tin chung

Các cách xuất hiện

Nền tảng áp dụng

Ngôn ngữ

Hệ điều hành

Kiến trúc

Công nghệ

Hậu quả phổ biến

Ví dụ đã quan sát

CVE-2021-26339

CVE-1999-1476

Các biện pháp giảm thiểu tiềm năng

Ghi chú ánh xạ lỗ hổng

Mẫu tấn công liên quan

Tài liệu tham khảo

REF-1094

REF-1108

REF-1323

REF-1324

REF-1331

REF-1342

REF-1343

Gửi

Sửa đổi