Module cwe_checker_lib::checkers::cwe_215

This module implements a check for CWE-215: Information Exposure Through Debug Information.

Sensitive debugging information can be leveraged to get a better understanding of a binary in less time.

See https://cwe.mitre.org/data/definitions/215.html for a detailed description.

How the check works

For ELF binaries we check whether they contain sections containing debug information. Other binary formats are currently not supported by this check.

False Positives

None known.

False Negatives

None known.

Statics

• CWE_MODULE
  The module name and version

Functions

• check_cwe
  Run the check.