Umbra Wiki weakness weakness/CWE-910
Back to wiki

CWE-910 — Use of Expired File Descriptor

provenance: imported · CWE: CWE-910

CWE-910: Use of Expired File Descriptor

MITRE CWE weakness

Kind Weakness
Abstraction Base
Status Incomplete
Likelihood of exploit Medium

Description

The product uses or accesses a file descriptor after it has been closed.

After a file descriptor for a particular file or device has been released, it can be reused. The code might not write to the original file, since the reused file descriptor might reference a different file or device.

Common consequences

  • Confidentiality: Read Files or Directories
  • Availability: DoS: Crash, Exit, or Restart

Mitigations

(none listed)

References

  • CWE page: https://cwe.mitre.org/data/definitions/910.html
  • CWE list: https://cwe.mitre.org/data/index.html