Common Weakness Enumeration
CWE-242 Use of Inherently Dangerous Function
Description
The product calls a function that can never be guaranteed to work safely.
Associated Reviewed Advisories
Vulnerabilities classified under CWE-242 ordered by modification date.
| Advisory ID | NVD ID | Severity | PURLs | Summary | Last Modified |
|---|---|---|---|---|---|
| GHSA-jhjh-ghwx-6h7r | CVE-2017-1002157 | CRITICAL |
modulemd uses an unsafe function for processing externally provided data |
2024-09-24 | |
| GHSA-hxhj-hp9m-qwc4 | CVE-2017-0904 | MODERATE |
private_address_check vulnerable to bypass of Resolv.getaddresses method |
2023-01-23 |