CWE-432
Weakness AllowedDangerous Signal Handler not Disabled During Sensitive Operations
Abstraction: Base · Status: Draft
The product uses a signal handler that shares state with other signal handlers, but it does not properly mask or prevent those signal handlers from being invoked while the original signal handler is still running.
Mapping guidance
This CWE entry is at the Base level of abstraction, which is a preferred level of abstraction for mapping to the root causes of vulnerabilities.
Carefully read both the name and description to ensure that this mapping is an appropriate fit. Do not try to 'force' a mapping to a lower-level Base/Variant simply to comply with this preferred level of abstraction.
Modes of introduction
Content history
updated Potential_Mitigations, Time_of_Introduction
updated Relationships, Taxonomy_Mappings
updated Description
updated Applicable_Platforms, Description, Name, Potential_Mitigations, Relationships, Taxonomy_Mappings
updated Common_Consequences
updated Relationships
updated Relationships
updated Relationships
updated Description
updated Relationships, Time_of_Introduction
updated Mapping_Notes
updated Weakness_Ordinalities
updated Background_Details, Common_Consequences, Description
0 vulnerabilities reference this CWE, most recent first.
No vulnerabilities reference this CWE.
Mitigation
Turn off dangerous handlers when performing sensitive operations.
No CAPEC attack patterns related to this CWE.