[CVE-2018-1002105] Finding unhandled errors using CodeQL
blog.trailofbits.com | blog | CVE-2018-1002105 | #vulnerability-research | #kubernetes | #static-analysis | #codeql | #variant-analysis | #cve-2018-1002105
Summary
Unhandled error codes can be exploitable, as Kubernetes CVE-2018-1002105 showed. This walkthrough uses CodeQL with a custom query pack to run variant analysis and find every similar bug at once.
- CVE
- CVE-2018-1002105
- Published
- Collected
--- id: 1791 title: "[CVE-2018-1002105] Finding unhandled errors using CodeQL" cve: CVE-2018-1002105 source_domain: blog.trailofbits.com source_url: "https://blog.trailofbits.com/2022/01/11/finding-unhandled-errors-using-codeql/" published_at: "2022-01-11T12:00:58Z" tags: ["vulnerability-research", "kubernetes", "static-analysis", "codeql", "variant-analysis", "cve-2018-1002105"] phying_url: "https://phying.com/item/1791" lang: en --- # [CVE-2018-1002105] Finding unhandled errors using CodeQL ## Summary Unhandled error codes can be exploitable, as Kubernetes CVE-2018-1002105 showed. This walkthrough uses CodeQL with a custom query pack to run variant analysis and find every similar bug at once. ## Intelligence Metadata - **Sources:** blog.trailofbits.com - **CVE:** CVE-2018-1002105 - **Published:** 2022-01-11T12:00:58Z - **Original:** https://blog.trailofbits.com/2022/01/11/finding-unhandled-errors-using-codeql/ - **Phying News:** https://phying.com/item/1791