2404
Summary
This category identifies Software Fault Patterns (SFPs) within the State Disclosure cluster.
Membership
Nature Type ID Name Page
MemberOf 895 SFP Primary Cluster: Information Leak 888 2384
HasMember 202 Exposure of Sensitive Information Through Data
Queries
888 516
HasMember 203 Observable Discrepancy 888 518
HasMember 204 Observable Response Discrepancy 888 523
HasMember 205 Observable Behavioral Discrepancy 888 526
HasMember 206 Observable Internal Behavioral Discrepancy 888 527
HasMember 207 Observable Behavioral Discrepancy With Equivalent
Products
888 528
HasMember 208 Observable Timing Discrepancy 888 529
Category-968: SFP Secondary Cluster: Covert Channel
Category ID : 968
Summary
This category identifies Software Fault Patterns (SFPs) within the Covert Channel cluster.
Membership
Nature Type ID Name Page
MemberOf 904 SFP Primary Cluster: Malware 888 2387
HasMember 385 Covert Timing Channel 888 940
HasMember 514 Covert Channel 888 1218
HasMember 515 Covert Storage Channel 888 1220
Category-969: SFP Secondary Cluster: Faulty Memory Release
Category ID : 969
Summary
This category identifies Software Fault Patterns (SFPs) within the Faulty Memory Release cluster
(SFP12).
Membership
Nature Type ID Name Page
MemberOf 891 SFP Primary Cluster: Memory Management 888 2383
HasMember 415 Double Free 888 1008
HasMember 590 Free of Memory not on the Heap 888 1326
HasMember 761 Free of Pointer not at Start of Buffer 888 1592
HasMember 763 Release of Invalid Pointer or Reference 888 1599
CWE Version 4.14
CWE-970: SFP Secondary Cluster: Faulty Buffer Access
CWE-970: SFP Secondary Cluster: Faulty Buffer Access