2235
Scope Impact Likelihood
Integrity
Availability
DoS: Crash, Exit, or Restart
DoS: Instability
Quality Degradation
DoS: Resource Consumption (CPU)
DoS: Resource Consumption (Memory)
DoS: Resource Consumption (Other)
Reduce Performance
Reduce Reliability
Unexpected State
Potential Mitigations
Phase: Architecture and Design
Ensure the design does not allow error injection in modes intended for normal run-time operation.
Provide access controls on interfaces for injecting errors.
Phase: Implementation
Disallow error injection in modes which are expected to be used for normal run-time operation.
Provide access controls on interfaces for injecting errors.
Phase: Integration
Add an access control layer atop any unprotected interfaces for injecting errors.
MemberOf Relationships
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 1198 Privilege Separation and Access Control Issues 1194 2470
MemberOf 1396 Comprehensive Categorization: Access Control 1400 2519
Related Attack Patterns
CAPEC-ID Attack Pattern Name
624 Hardware Fault Injection
625 Mobile Device Fault Injection
CWE-1335: Incorrect Bitwise Shift of Integer
Weakness ID : 1335
Structure : Simple
Abstraction : Base
Description
An integer value is specified to be shifted by a negative amount or an amount greater than or equal
to the number of bits contained in the value causing an unexpected or indeterminate result.
Extended Description
Specifying a value to be shifted by a negative amount is undefined in various languages. Various
computer architectures implement this action in different ways. The compilers and interpreters
when generating code to accomplish a shift generally do not do a check for this issue.
CWE Version 4.14
CWE-1335: Incorrect Bitwise Shift of Integer
CWE-1335: Incorrect Bitwise Shift of Integer