Skip to content
OpenAdvisories

Weakness (CWE)

CWE-234: Failure to Handle Missing Parameter

Variant Incomplete Mapping discouraged

If too few arguments are sent to a function, the function will still pop the expected number of arguments from the stack. Potentially, a variable number of arguments could be exhausted in a function as well.

How to prevent it (2 mitigations)

  1. Build and Compilation

    This issue can be simply combated with the use of proper build process.

  2. Implementation

    Forward declare all functions. This is the recommended solution. Properly forward declaration of all used functions will result in a compiler error if too few arguments are sent to a function.

Source: MITRE CWE-234

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 5.5
    CVE-2023-46316

    In buc Traceroute 2.0.12 through 2.1.2 before 2.1.3, the wrapper scripts do not properly parse command lines.

    traceroute traceroute traceroute Debian Ubuntu Alpine
  • High 8.6
    CVE-2022-20933

    Cisco Meraki MX and Z3 Teleworker Gateway VPN Denial of Service Vulnerability

    A vulnerability in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z3 Teleworker Gateway devices could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due …

    Cisco Cisco Meraki MX Firmware Network devices