Fallos del tipo CWE-134

154 resultados

Uso de String de Formato Controlada Externamente

Ocorre quando a aplicação passa uma string fornecida pelo usuário diretamente como primeiro argumento de funções de formatação (como printf, sprintf, syslog em C/C++). Um atacante injeta especificadores de formato (%x, %s, %n) para ler dados sensíveis da memória, causar travamento ou executar código arbitrário.

Ejemplo

Um servidor web recebe um parâmetro de entrada e o passa direto para syslog sem validação: syslog(LOG_INFO, user_input). Se user_input contiver "%x %x %x", a função extrai valores da pilha e expõe dados da memória.

Cómo mitigar

Nunca use entrada de usuário como string de formato. Sempre passe uma string fixa como formato e a entrada do usuário como argumento: printf("%s", user_input). Implemente validação rigorosa de entrada e use análise estática de código para detectar padrões suspeitos.

CVE-2022-43869MEDIUMIBM Spectrum Scale denial of serviceEPSS 1.0%CVE-2023-25815LOWGit looks for localized messages in the wrong placeEPSS 1.0%CVE-2024-42330CRITICALJS - Internal strings in HTTP headersEPSS 0.9%CVE-2022-33938HIGHA format string injection vulnerability exists in the ghome_process_control_packet functionality of Abode Systems, Inc. iota All-In-One SecuEPSS 0.9%CVE-2026-63073CRITICALUntrusted Sender DN Used as Format String in CMP Response ValidationEPSS 0.9%CVE-2025-40600CRITICALUse of Externally-Controlled Format String vulnerability in the SonicOS SSL VPN interface allows a remote unauthenticated attacker to cause EPSS 0.9%CVE-2022-35875HIGHFour format string injection vulnerabilities exist in the XCMD testWifiAP functionality of Abode Systems, Inc. iota All-In-One Security Kit EPSS 0.9%CVE-2022-35874HIGHFour format string injection vulnerabilities exist in the XCMD testWifiAP functionality of Abode Systems, Inc. iota All-In-One Security Kit EPSS 0.9%CVE-2022-35877HIGHFour format string injection vulnerabilities exist in the XCMD testWifiAP functionality of Abode Systems, Inc. iota All-In-One Security Kit EPSS 0.9%CVE-2022-35876HIGHFour format string injection vulnerabilities exist in the XCMD testWifiAP functionality of Abode Systems, Inc. iota All-In-One Security Kit EPSS 0.9%CVE-2023-6764HIGH A format string vulnerability in a function of the IPSec VPN feature in Zyxel ATP series firmware versions from 4.32 through 5.3EPSS 0.9%CVE-2023-48221HIGHwire-avs remote format string vulnerability EPSS 0.9%CVE-2026-69395MEDIUMActive Directory Certificate Services (AD CS) Information Disclosure VulnerabilityEPSS 0.9%CVE-2023-41349HIGHASUS RT-AX88U - externally-controlled format stringEPSS 0.9%CVE-2026-33210HIGHRuby JSON has a format string injection vulnerabilityEPSS 0.9%CVE-2022-43619MEDIUMThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 1.03 routers. AlEPSS 0.8%CVE-2022-35879HIGHFour format string injection vulnerabilities exist in the UPnP logging functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9EPSS 0.8%CVE-2022-35878HIGHFour format string injection vulnerabilities exist in the UPnP logging functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9EPSS 0.8%CVE-2022-35880HIGHFour format string injection vulnerabilities exist in the UPnP logging functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9EPSS 0.8%CVE-2022-35881HIGHFour format string injection vulnerabilities exist in the UPnP logging functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9EPSS 0.8%