---
id: 1791
title: "[CVE-2018-1002105] Finding unhandled errors using CodeQL"
cve: CVE-2018-1002105
source_domain: blog.trailofbits.com
source_url: "https://blog.trailofbits.com/2022/01/11/finding-unhandled-errors-using-codeql/"
published_at: "2022-01-11T12:00:58Z"
tags: ["vulnerability-research", "kubernetes", "static-analysis", "codeql", "variant-analysis", "cve-2018-1002105"]
phying_url: "https://phying.com/item/1791"
lang: en
---

# [CVE-2018-1002105] Finding unhandled errors using CodeQL

## Summary

Unhandled error codes can be exploitable, as Kubernetes CVE-2018-1002105 showed. This walkthrough uses CodeQL with a custom query pack to run variant analysis and find every similar bug at once.

## Intelligence Metadata

- **Sources:** blog.trailofbits.com
- **CVE:** CVE-2018-1002105
- **Published:** 2022-01-11T12:00:58Z
- **Original:** https://blog.trailofbits.com/2022/01/11/finding-unhandled-errors-using-codeql/
- **Phying News:** https://phying.com/item/1791