Skip to content
OpenAdvisories

Weakness (CWE)

CWE-670: Always-Incorrect Control Flow Implementation

Class Draft

The code contains a control flow path that does not reflect the algorithm that the path is intended to implement, leading to incorrect behavior any time this path is navigated.

More detail

This weakness captures cases in which a particular code segment is always incorrect with respect to the algorithm that it is implementing. For example, if a C programmer intends to include multiple statements in a single block but does not include the enclosing braces (CWE-483), then the logic is always incorrect. This issue is in contrast to most weaknesses in which the code usually behaves correctly, except when it is externally manipulated in malicious ways.

Source: MITRE CWE-670

All Critical High Medium Low Exploited only Public exploit

131 results · Feed

  • High 7.5
    CVE-2021-43839

    Drainage of FeeCollector's Block Transaction Fees

    Cronos is a commercial implementation of a blockchain. In Cronos nodes running versions before v0.6.5, it is possible to take transaction fees from Cosmos SDK's FeeCollector for the current block by sending a custom crafted MsgEthereumTx. This problem has bee…

    crypto-org-chain cronos github.com/crypto-org-chain/cronos github.com/tharsis/evmos Go
  • High 8.7
    CVE-2021-41153

    Specification non-compliance in JUMPI

    The evm crate is a pure Rust implementation of Ethereum Virtual Machine. In `evm` crate `< 0.31.0`, `JUMPI` opcode's condition is checked after the destination validity check. However, according to Geth and OpenEthereum, the condition check should happen befo…

    rust-blockchain evm evm crates.io
  • High 7.4
    CVE-2021-34767 Public exploit

    Cisco IOS XE Software for Catalyst 9800 Series Wireless Controllers IPv6 Denial of Service Vulnerability

    A vulnerability in IPv6 traffic processing of Cisco IOS XE Wireless Controller Software for Cisco Catalyst 9000 Family Wireless Controllers could allow an unauthenticated, adjacent attacker to cause a Layer 2 (L2) loop in a configured VLAN, resulting in a den…

    Cisco Cisco IOS XE Software iOS Network devices
  • Medium 6.2
    CVE-2021-32684

    Missing Handler in @scandipwa/magento-scripts

    magento-scripts contains scripts and configuration used by Create Magento App, a zero-configuration tool-chain which allows one to deploy Magento 2. In versions 1.5.1 and 1.5.2, after changing the function from synchronous to asynchronous there wasn't impleme…

    scandipwa create-magento-app @scandipwa/magento-scripts Web / CMS npm
  • Medium 5.3
    CVE-2021-0273

    Junos OS and Junos OS Evolved: Trio Chipset: Denial of Service due to packet destined to device's interfaces.

    An always-incorrect control flow implementation in the implicit filter terms of Juniper Networks Junos OS and Junos OS Evolved on ACX5800, EX9200 Series, MX10000 Series, MX240, MX480, MX960 devices with affected Trio line cards allows an attacker to exploit a…

    Juniper Networks Junos OS Junos OS Evolved Network devices
  • Medium 4.0
    CVE-2021-1236

    Multiple Cisco Products Snort Application Detection Engine Policy Bypass Vulnerability

    Multiple Cisco products are affected by a vulnerability in the Snort application detection engine that could allow an unauthenticated, remote attacker to bypass the configured policies on an affected system. The vulnerability is due to a flaw in the detection…

    Cisco Cisco Firepower Threat Defense Software snort Network devices Ubuntu
  • High 8.1
    CVE-2020-28052 Public exploit

    Logic error in Legion of the Bouncy Castle BC Java

    An issue was discovered in Legion of the Bouncy Castle BC Java 1.65 and 1.66. The OpenBSDBCrypt.checkPassword utility method compared incorrect data when checking the password, allowing incorrect passwords to indicate they were matching with previously hashed…

    bouncycastle org.bouncycastle:bcprov-jdk14 org.bouncycastle:bcprov-jdk15on org.bouncycastle:bcprov-jdk15 Debian Maven
  • Critical 9.8
    CVE-2020-1914

    Always-Incorrect Control Flow Implementation in Facebook Hermes

    A logic vulnerability when handling the SaveGeneratorLong instruction in Facebook Hermes prior to commit b2021df620824627f5a8c96615edbd1eb7fdddfc allows attackers to potentially read out of bounds or theoretically execute arbitrary code via crafted JavaScript…

    Facebook Hermes hermes-engine npm
  • High 7.5
    CVE-2014-2686

    Ansible unsafe evaluation of some strings

    Ansible prior to 1.5.4 mishandles the evaluation of some strings.

    ansible ansible Debian PyPI
  • High 7.5
    CVE-2019-19729

    bson-objectid contains Improper input validation

    An issue was discovered in the BSON ObjectID (aka bson-objectid) package 1.3.0 for Node.js. ObjectID() allows an attacker to generate a malformed objectid by inserting an additional property to the user-input, because bson-objectid will return early if it det…

    bson-objectid npm
  • Critical 9.8
    CVE-2015-8857

    Incorrect Handling of Non-Boolean Comparisons During Minification in uglify-js

    The uglify-js package before 2.4.24 for Node.js does not properly account for non-boolean values when rewriting boolean expressions, which might allow attackers to bypass security mechanisms or possibly have unspecified other impact by leveraging improperly r…

    uglifyjs uglifyjs uglify-js uglifier Debian Ubuntu npm RubyGems