Skip to content
OpenAdvisories

Weakness (CWE)

CWE-205: Observable Behavioral Discrepancy

Base Incomplete

The product's behaviors indicate important differences that may be observed by unauthorized actors in a way that reveals (1) its internal state or decision process, or (2) differences from other products with equivalent functionality.

How to prevent it (1 mitigation)

  1. Implementation

    Ideally, a product should provide as little information about its internal operations as possible.

Source: MITRE CWE-205

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2026-109125

    Possible cache poisoning vulnerability via a cache side-channel exposed by 'unwanted-reply-threshold'

    In NLnet Labs Unbound up to and including version 1.26.1, an observable cache-level side-channel can be exposed with 'unwanted-reply-threshold > 0' configurations (not a default configuration). If a response-like UDP datagram reaches the upstream source port …

    NLnet Labs Unbound unbound unbound Debian Ubuntu