CWE-703: Improper Check or Handling of Exceptional Conditions

The product does not properly anticipate or handle exceptional conditions that rarely occur during normal operation of the product.

Consequences

• Confidentiality, Availability, Integrity: Read Application Data, DoS: Crash, Exit, or Restart, Unexpected State

Recent advisories

• GHSA-2v2p-6j97-cjg9 — vm2: Host Promise rejection from an exposed constructor can terminate the vm2 host process
• GHSA-gjq8-xm47-88rc — vm2: Host-returned Promise rejection can bypass vm2's unhandled-rejection hardening and terminate the host process
• GHSA-4mjr-xmp4-gh2g — qs: Denial of Service via Attacker Controlled isBuffer
• GHSA-qh5g-q395-cx4j — ImageMagick: Heap-use-after-free via XMP profile could result in a crash
• GHSA-w254-4hp5-7cvv — Fleet vulnerable to Denial of Service via unhandled gRPC log type in launcher endpoint
• GHSA-3cx6-j9j4-54mp — Decidim's private data exports can lead to data leaks
• GHSA-rcmh-qjqh-p98v — Nodemailer’s addressparser is vulnerable to DoS caused by recursive calls
• GHSA-gpx4-37g2-c8pv — Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook
• GHSA-f9gq-prrc-hrhc — Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload
• GHSA-pjj3-j5j6-qj27 — HAX CMS NodeJS Application Has Improper Error Handling That Leads to Denial of Service
• GHSA-vgf2-gvx8-xwc3 — Vyper Does Not Check the Success of Certain Precompile Calls
• GHSA-2qmw-pvf7-4mw6 — Hashicorp Vault vulnerable to Improper Check or Handling of Exceptional Conditions
• GO-2024-2780 — Kubelet Incorrect Privilege Assignment
• GHSA-j2rp-gmqv-frhv — HashiCorpVault does not correctly validate OCSP responses
• GHSA-r344-xw3p-2frj — Apollo Router vulnerable to Improper Check or Handling of Exceptional Conditions

All advisories for CWE-703