CWE-515

Covert Storage Channel

A covert storage channel transfers information through the setting of bits by one program and the reading of those bits by another. What distinguishes this case from that of ordinary operation is that the bits are used to convey encoded information.

Mitigation

Phase: Implementation

Description:

  • Ensure that all reserved fields are set to zero before messages are sent and that no unnecessary information is included.

No CAPEC attack patterns related to this CWE.

Back to CWE stats page