Fallos del tipo CWE-1284

387 resultados

Validação inadequada de quantidade especificada em entrada

Ocorre quando a aplicação aceita um parâmetro que define uma quantidade (tamanho de buffer, número de iterações, limite de registros) sem validar se esse valor está dentro de limites seguros. Um atacante pode especificar quantidades excessivas, causando consumo de recursos, overflow de memória ou lógica comprometida.

Ejemplo

Um endpoint REST recebe `?limit=999999999` para pagination sem checar se o valor é razoável, causando alocação massiva de memória ou timeout. Ou um parser aceita `Content-Length: -1` sem validar valores negativos, causando comportamento indefinido.

Cómo mitigar

Sempre validar limites mínimos e máximos de qualquer quantidade recebida do usuário antes de usar em alocação de memória, loops ou operações de I/O. Defina ranges explícitos (ex: `1 ≤ limit ≤ 1000`) e rejeite valores fora desse intervalo.

CVE-2023-36839MEDIUMJunos OS and Junos OS Evolved: An l2cpd crash will occur when specific LLDP packets are receivedEPSS 0.3%CVE-2026-94645HIGHApache Thrift: Node.js `TJSONProtocol` uses a peer-declared container size as an unbounded loop boundEPSS 0.3%CVE-2026-19639MEDIUMImproper Access ControlEPSS 0.3%CVE-2023-52343MEDIUMIn SecurityCommand message after as security has been actived., there is a possible improper input validation. This could lead to remote infEPSS 0.3%CVE-2026-94646HIGHApache Thrift: Node.js `server.js` ends the process on any per-connection error (+ two triggers)EPSS 0.3%CVE-2024-7488MEDIUMBusiness Logic Error in RestApp Inc.'s Online Ordering SystemEPSS 0.3%CVE-2026-123660MEDIUMVulnerability-Lookup: memory amplification through webhook payload template format specifiersEPSS 0.3%CVE-2026-41677LOWrust-openssl: Out-of-bounds read in PEM password callback when user callback returns an oversized lengthEPSS 0.3%CVE-2025-58835MEDIUMWordPress Bonus for Woo plugin <= 7.6.6 - Other vulnerability Type vulnerabilityEPSS 0.3%CVE-2026-26940MEDIUMImproper Validation of Specified Quantity in Input in Kibana Leading to Denial of ServiceEPSS 0.3%CVE-2026-32665HIGHRemote DNS-over-QUIC denial of service due to `quic-size` budget bypassEPSS 0.3%CVE-2025-67901MEDIUMopenrsync through 0.5.0, as used in OpenBSD through 7.8 and on other platforms, allows a client to cause a server SIGSEGV by specifying a leEPSS 0.3%CVE-2025-14689MEDIUMIBM Db2 Denial of ServiceEPSS 0.3%CVE-2026-91137HIGHApache Thrift: PHP `thrift_protocol` accelerator: zero-byte container elementsEPSS 0.3%CVE-2026-94636HIGHApache Thrift: Python `TZlibTransport` stops enforcing its decompressed-size limit once the limit is exactly used upEPSS 0.3%CVE-2026-115382MEDIUMWasmtime 46.0.0 before 48.0.4 and 49.0.0 before 49.0.2 wasi:http Zero Timeout Panic DoSEPSS 0.3%CVE-2026-102066HIGHJunos OS and Junos OS Evolved: Malformed RSVP packet causes a rpd crash when RSVP is enabledEPSS 0.3%CVE-2025-13867MEDIUMIBM Db2 Denial of ServiceEPSS 0.3%CVE-2025-25178HIGHGPU DDK - PhysmemWrapExtMem uiSize=0 corrupts kernel memoryEPSS 0.3%CVE-2026-102019HIGHJunos OS and Junos OS Evolved: Malformed RIPv2 messages cause routing service disruption when RIP is enabledEPSS 0.3%