CWE-232 Improper Handling of Undefined Values
variantThe product does not handle or incorrectly handles when a value is not defined or supported for the associated parameter, field, or argument name.
01
parent weaknesses
Broader classes this is a kind of.
02
vulnerabilities (12)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-2968US | high7.5 | — | ||
A remote attacker can trigger a denial of service in the socket.remoteAddress variable, by sending a crafted HTTP request. Usage of the undefined variable raises a TypeError except… | ||||
| CVE-2023-39915US | high7.5 | — | ||
NLnet Labs' Routinator up to and including version 0.12.1 may crash when trying to parse certain malformed RPKI objects. This is due to insufficient input checking in the bcder lib… | ||||
| CVE-2023-39914US | high7.5 | — | ||
NLnet Labs' bcder library up to and including version 0.7.2 panics while decoding certain invalid input data rather than rejecting the data with an error. This can affect both the… | ||||
| CVE-2022-22213US | medium5.9 | — | ||
A vulnerability in Handling of Undefined Values in the routing protocol daemon (RPD) process of Juniper Networks Junos OS and Junos OS Evolved may allow an unauthenticated network-… | ||||
| CVE-2021-34705US | medium5.3 | — | ||
A vulnerability in the Voice Telephony Service Provider (VTSP) service of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to bypass con… | ||||
| CVE-2021-3718US | medium4.6 | — | ||
A denial of service vulnerability was reported in some ThinkPad models that could cause a system to crash when the Enhanced Biometrics setting is enabled in BIOS. | ||||
| CVE-2025-40775US | — | Exploit | ||
When an incoming DNS protocol message includes a Transaction Signature (TSIG), BIND always checks it. If the TSIG contains an invalid value in the algorithm field, BIND immediatel… | ||||
| CVE-2026-92088US | — | — | ||
Improper handling of undefined values vulnerability in upKeeper Solutions upKeeper Instant Privilege Access allows Privilege Escalation.
This issue affects upKeeper Instant Privil… | ||||
| CVE-2026-21689US | — | — | ||
iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium (ICC) color management profiles. Versio… | ||||
| CVE-2025-20314US | — | — | ||
A vulnerability in Cisco IOS XE Software could allow an authenticated, local attacker with level-15 privileges or an unauthenticated attacker with physical access to an affected de… | ||||
| CVE-2025-20192US | — | — | ||
A vulnerability in the Internet Key Exchange version 1 (IKEv1) implementation of Cisco IOS XE Software could allow an authenticated, remote attacker to cause a denial of service (D… | ||||
| CVE-2023-36848US | — | — | ||
An Improper Handling of Undefined Values vulnerability in the periodic packet management daemon (PPMD) of Juniper Networks Junos OS on MX Series(except MPC10, MPC11 and LC9600) all… | ||||
03
source
Where this definition is published.
MITREUS
scry
Weaknesses like this turn up in real, exploitable exposures. See what is exposed on your perimeter with a free passive scan.
Free scan