Fallos del tipo CWE-617

404 resultados

Asserção acessível por entrada não confiável

Código de produção contém asserções (assert statements) que podem ser disparadas por dados fornecidos pelo usuário ou atacante, causando falha abrupta da aplicação. Diferente de validação, asserções são mecanismos de debug que não deveriam controlar o fluxo normal — quando acionadas, encerram o programa, provocando negação de serviço.

Ejemplo

Um servidor web recebe um parâmetro `user_id` e executa `assert user_id > 0` antes de consultar o banco. Um atacante envia `user_id=0` ou negativo, a asserção falha e derruba o servidor. O código assume que validação já ocorreu, mas ela não existe.

Cómo mitigar

Substitua asserções por validação explícita com tratamento de erro apropriado (throw exception, retornar código de erro). Remova ou desative asserções em builds de produção. Use asserções apenas para condições internas que nunca deveriam ocorrer, nunca para entrada de usuário.

CVE-2018-12543—In Eclipse Mosquitto versions 1.5 to 1.5.2 inclusive, if a message is published to Mosquitto that has a topic starting with $, but that is nEPSS 36.0%CVE-2022-3488HIGHnamed may terminate unexpectedly when processing ECS options in repeated responses to iterative queriesEPSS 19.2%CVE-2022-3924HIGHnamed configured to answer from stale cache may terminate unexpectedly at recursive-clients soft quotaEPSS 16.1%CVE-2017-7478—OpenVPN version 2.3.12 and newer is vulnerable to unauthenticated Denial of Service of server via received large control packet. Note that tEPSS 13.9%CVE-2023-49286HIGHDenial of Service in Helper Process managementEPSS 10.4%CVE-2025-13878HIGHMalformed BRID/HHIT records can cause named to terminate unexpectedlyEPSS 8.2%CVE-2023-2156—A flaw was found in the networking subsystem of the Linux kernel within the handling of the RPL protocol. This issue results from the lack oEPSS 6.1%CVE-2017-7539MEDIUMAn assertion-failure flaw was found in Qemu before 2.10.1, in the Network Block Device (NBD) server's initial connection negotiation, where EPSS 5.5%CVE-2021-3326HIGHThe iconv function in the GNU C Library (aka glibc or libc6) 2.32 and earlier, when processing invalid input sequences in the ISO-2022-JP-3 EPSS 3.1%CVE-2020-25710—A flaw was found in OpenLDAP in versions before 2.4.56. This flaw allows an attacker who sends a malicious packet processed by OpenLDAP to fEPSS 2.7%CVE-2020-6097HIGHAn exploitable denial of service vulnerability exists in the atftpd daemon functionality of atftp 0.7.git20120829-3.1+b1. A specially crafteEPSS 2.4%CVE-2018-7712HIGHThe validateInputImageSize function in modules/imgcodecs/src/loadsave.cpp in OpenCV 3.4.1 allows remote attackers to cause a denial of serviEPSS 2.3%CVE-2024-4076HIGHAssertion failure when serving both stale cache data and authoritative zone contentEPSS 2.1%CVE-2021-20272—A flaw was found in privoxy before 3.0.32. An assertion failure could be triggered with a crafted CGI request leading to server crash.EPSS 2.1%CVE-2019-0003HIGHJunos OS: A flowspec BGP update with a specific term-order causes routing protocol daemon (rpd) process to crash with a core.EPSS 2.0%CVE-2026-5946HIGHInvalid handling of CLASS != INEPSS 1.9%CVE-2017-7479—OpenVPN versions before 2.3.15 and before 2.4.2 are vulnerable to reachable assertion when packet-ID counter rolls over resulting into DeniaEPSS 1.9%CVE-2020-10761MEDIUMAn assertion failure issue was found in the Network Block Device(NBD) Server in all QEMU versions before QEMU 5.0.1. This flaw occurs when aEPSS 1.8%CVE-2022-47516HIGHAn issue was discovered in the libsofia-sip fork in drachtio-server before 0.8.20. It allows remote attackers to cause a denial of service (EPSS 1.6%CVE-2020-29562MEDIUMThe iconv function in the GNU C Library (aka glibc or libc6) 2.30 to 2.32, when converting UCS4 text containing an irreversible character, fEPSS 1.5%