Incorrect Control Flow Scoping

Opis

The product does not properly return control flow to the proper location after it has completed a task or detected an unusual condition.

Skutki

• Other

  Alter Execution Logic; Other

Przykłady podatności

• CVE-2023-21087 Java code in a smartphone OS can encounter a "boot loop" due to an uncaught exception
• CVE-2014-1266 Chain: incorrect "goto" in Apple SSL product bypasses certificate validation, allowing Adversary-in-the-Middle (AITM) attack (Apple "goto fail" bug). CWE-705 (Incorrect Control Flow Scoping) -> CWE-561 (Dead Code) -> CWE-295 (Improper Certificate Validation) -> CWE-393 (Return of Wrong Status Code) -> CWE-300 (Channel Accessible by Non-Endpoint). The code's whitespace indentation did not reflect the actual control flow (CWE-1114) and did not explicitly delimit the block (CWE-483), which could have made it more difficult for human code auditors to detect the vulnerability.

Słabość nadrzędna

• CWE-691 Insufficient Control Flow Management

Słabości podrzędne

• CWE-248 Uncaught Exception
• CWE-382 J2EE Bad Practices: Use of System.exit()
• CWE-395 Use of NullPointerException Catch to Detect NULL Pointer Dereference
• CWE-396 Declaration of Catch for Generic Exception
• CWE-397 Declaration of Throws for Generic Exception
• CWE-455 Non-exit on Failed Initialization
• CWE-584 Return Inside Finally Block
• CWE-617 Reachable Assertion
• CWE-698 Execution After Redirect (EAR)

Kiedy powstaje

• Implementation

Dotyczy

Not Language-Specific