DerScanner
Home / Vulnerability Database / C or C++ : Unsafe function: vfork
C/C++

C or C++ : Unsafe function: vfork

Classification

CWE
CWE-242

Overview

The vfork function used is insecure because it may lead to a denial of service in the parent process. Use posix_spawn.

References

  1. CWE-242: Use of Inherently Dangerous Function
  2. POS33-C. Do not use vfork()
  3. The difference between fork(), vfork(), exec() and clone() - stackoverflow.com
MEDIUM

DerScanner Severity Score

Do you want to fix C or C++ : Unsafe function: vfork in your application?

See also

C/C++

C or C++ : Dead store

C/C++

C or C++ : Use after free

C/C++

C or C++ : va_list uninitialized