Types Of Vulnerabilities

Question 1

Jailbreaking

Answer 1

Mobile vulnerability, is the bypassing the security restrictions on mobile device in order to gain greater control and access to the device operating system and files

Question 2

Side channel

Answer 2

Weakness in hardware, weakness in physical properties of a device such as power consumption or electromagnetic radiation that can be used to extract sensitive information

Question 3

Memory leak

Answer 3

Memory vulnerability, is the failure of OS ar app to free up dynamically requested memory. It slowest response time or can cause denial of service

Question 4

Buffer overflow

Answer 4

Memory and processor vulnerability, is overrunning the memory allocated (buffer) for data input and writing the excess data into non-allocated system memory. The excess data can contain instructions that the processor will execute

Question 5

TOE - time of evaluation

Answer 5

Race condition timing component - is when the program relies on the time of events concurrently or in a specific order

Question 6

Race condition

Answer 6

Timing vulnerability, this is a flow that produces an unexpected result when timing of actions impact other actions

Question 7

TOC time of check

Answer 7

Race condition component, is when a program checks when the state of resource changes between time of check and time of use often because of a concurrent thread.

Question 8

Escalation

Answer 8

System vulnerability which can cause access to protected area

Question 9

Memory injection

Answer 9

System vulnerability which can execute control. Memory injection is inserting malicious code into memory of a running process. The excess data can contain informations, instructions for execution in the processor.

Question 10

Privileged escalation

Answer 10

Injection type, code vulnerability, is gaining elevated access to resources that are normally protected from an application or user

Question 11

Insecure APi

Answer 11

Cloud vulnerability, API used to provide an access to and integrate cloud resources such as storage and processing. IT provide a conduit for malicious activity

Question 12

Directory traversal

Answer 12

Code vulnerability, injection type when there is the ability to access files and directories outside of the intended directory

Question 13

Side loading

Answer 13

Mobile vulnerability, is the process of installing and running software on a mobile device from source other than an official apps store or marketplace

Question 14

Injection

Answer 14

Code vulnerability, is the insertion of code by exploiting input validation or processing mechanisms