Fallos del tipo CWE-407

270 resultados

Complexidade algorítmica ineficiente

É quando o código usa um algoritmo cuja complexidade computacional cresce desproporcionalmente com o tamanho da entrada, permitindo que um atacante consuma recursos (CPU, memória, tempo) enviando dados malformados ou massivos. O perigo: negação de serviço (DoS) ou travamento da aplicação sem necessidade de exploração de bugs clássicos.

Ejemplo

Uma API que processa lista de usuários com dois loops aninhados (O(n²)) em vez de usar hash ou índice. Um atacante envia 10 mil usuários e a operação que demoraria milissegundos passa a levar minutos, derrubando o servidor.

Cómo mitigar

Escolha algoritmos eficientes (use estruturas de dados apropriadas: hash, árvores balanceadas); implemente limites de entrada (validar tamanho máximo de listas, strings); monitore tempo de execução e aborte operações que excedem threshold; teste performance com dados grandes durante development.

CVE-2026-44378MEDIUMBotan: Quadratic complexity decoding BER indefinite length encodingsEPSS 0.3%CVE-2026-87721HIGHDenial of Service via Exponential Backtracking in ANTLR Search Query Parser in Gerrit Code ReviewEPSS 0.3%CVE-2026-113789MEDIUMpypdf: Possible long runtimes/large memory usage when retrieving form fieldsEPSS 0.3%CVE-2026-103604HIGHQuadratic-time escaping when converting X.509 distinguished names to stringsEPSS 0.3%CVE-2026-118664HIGHdecode-uri-component: Denial of service via quadratic replacement of percent-encoded runsEPSS 0.3%CVE-2026-84378MEDIUMHTTPX2: Quadratic SSE line buffering can cause CPU denial of serviceEPSS 0.3%CVE-2024-29916MEDIUMThe dormakaba Saflok system before the November 2023 software update allows an attacker to unlock arbitrary doors at a property via forged kEPSS 0.3%CVE-2026-95112MEDIUMGitea issue reference parsing CPU exhaustionEPSS 0.3%CVE-2026-85494HIGHApache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: Framed transport and binary protocol size read buffers from a peer-declared length without a limit (multi-language)EPSS 0.3%CVE-2026-104426HIGHZebra before 6.1.0 Quadratic Complexity DoS via Block Transparent Value CheckEPSS 0.3%CVE-2026-122306HIGHKyverno before 1.19.2 Denial of Service via Exponential-Time Wildcard MatchingEPSS 0.3%CVE-2026-109348MEDIUMGitoxide gix-mailmap before 0.35.0 CPU Denial of Service via .mailmap ParsingEPSS 0.3%CVE-2026-118035HIGHUncontrolled Resource Consumption in Telerik Document Processing Libraries RadWordsProcessingEPSS 0.3%CVE-2026-116267HIGHMIME::Parser versions before 5.521 for Perl allow memory exhaustion via indented error messages from a truncated, deeply nested messageEPSS 0.3%CVE-2026-116270HIGHMIME::Words versions before 5.521 for Perl allow memory exhaustion via repeated "=?" sequences in decode_mimewordsEPSS 0.3%CVE-2025-67841HIGHNordic Semiconductor IronSide SE for nRF54H20 before 23.0.2+17 has an Algorithmic complexity issue.EPSS 0.3%CVE-2026-31932HIGHSuricata krb5: quadratic complexity in krb5 bufferingEPSS 0.3%CVE-2026-96292HIGHApache Thrift: Lua `THttpTransport:_parseHeaders` matches each header line with a backtracking pattern (quadratic)EPSS 0.3%CVE-2026-107287MEDIUMPydantic AI: Excessive resource use when local web fetching converts nested HTMLEPSS 0.3%CVE-2026-94653HIGHApache Thrift: PHP framed/memory/HTTP transports re-slice the buffer on every read (quadratic)EPSS 0.3%