CWE-831: Signal Handler Function Associated with Multiple Signals

影响范围: Availability Integrity Confidentiality Access Control Other

技术影响: DoS: Crash, Exit, or Restart Execute Unauthorized Code or Commands Read Application Data Gain Privileges or Assume Identity Bypass Protection Mechanism Varies by Context

说明: The most common consequence will be a corruption of the state of the product, possibly leading to a crash or exit. However, if the signal handler is operating on state variables for security relevant libraries or protection mechanisms, the consequences can be far more severe, including protection mechanism bypass, privilege escalation, or information exposure.