Weakness (CWE)
CWE-192: Integer Coercion Error
Integer coercion refers to a set of flaws pertaining to the type casting, extension, or truncation of primitive data types.
How to prevent it (3 mitigations)
-
Requirements
A language which throws exceptions on ambiguous data casts might be chosen.
-
Architecture and Design
Design objects and program flow such that multiple or complex casts are unnecessary
-
Implementation
Ensure that any data type casting that you must use is entirely understood in order to reduce the plausibility of error in use.
Source: MITRE CWE-192
2 results · Clear filters · Feed
-
Low 3.7
bettercap MySQL Server mysql_server.go integer coercion
A flaw has been found in bettercap up to 2.41.5. Affected by this issue is some unknown functionality of the file modules/mysql_server/mysql_server.go of the component MySQL Server. Executing a manipulation can lead to integer coercion error. The attack can b…
-
Low 3.7
bettercap zerogod IPP Service zerogod_ipp_primitives.go ippReadChunkedBody integer coercion
A vulnerability was detected in bettercap up to 2.41.5. Affected by this vulnerability is the function ippReadChunkedBody of the file modules/zerogod/zerogod_ipp_primitives.go of the component zerogod IPP Service. Performing a manipulation results in integer …