Fallos del tipo CWE-617

460 resultados

Asserção acessível por entrada não confiável

Código de produção contém asserções (assert statements) que podem ser disparadas por dados fornecidos pelo usuário ou atacante, causando falha abrupta da aplicação. Diferente de validação, asserções são mecanismos de debug que não deveriam controlar o fluxo normal — quando acionadas, encerram o programa, provocando negação de serviço.

Ejemplo

Um servidor web recebe um parâmetro `user_id` e executa `assert user_id > 0` antes de consultar o banco. Um atacante envia `user_id=0` ou negativo, a asserção falha e derruba o servidor. O código assume que validação já ocorreu, mas ela não existe.

Cómo mitigar

Substitua asserções por validação explícita com tratamento de erro apropriado (throw exception, retornar código de erro). Remova ou desative asserções em builds de produção. Use asserções apenas para condições internas que nunca deveriam ocorrer, nunca para entrada de usuário.

CVE-2023-27783HIGHAn issue found in TCPreplay tcprewrite v.4.4.3 allows a remote attacker to cause a denial of service via the tcpedit_dlt_cleanup function atEPSS 1.5%CVE-2023-27789HIGHAn issue found in TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the cidr2cidr function at the cidr.c:178 endpoinEPSS 1.5%CVE-2023-27788HIGHAn issue found in TCPrewrite v.4.4.3 allows a remote attacker to cause a denial of service via the ports2PORT function at the portmap.c:69 eEPSS 1.4%CVE-2021-20217—A flaw was found in Privoxy in versions before 3.0.31. An assertion failure triggered by a crafted CGI request may lead to denial of serviceEPSS 1.4%CVE-2023-32843HIGHIn 5G Modem, there is a possible system crash due to improper error handling. This could lead to remote denial of service when receiving malEPSS 1.4%CVE-2026-3608HIGHStack overflow in Kea daemonsEPSS 1.4%CVE-2021-27498HIGHEIPStackGroup OpENer Ethernet/IP Reachable AssertionEPSS 1.3%CVE-2021-27500HIGHEIPStackGroup OpENer Ethernet/IP Reachable AssertionEPSS 1.3%CVE-2023-28856MEDIUM`HINCRBYFLOAT` can be used to crash a redis-server processEPSS 1.3%CVE-2023-5517HIGHQuerying RFC 1918 reverse zones may cause an assertion failure when "nxdomain-redirect" is enabledEPSS 1.2%CVE-2023-5679HIGHEnabling both DNS64 and serve-stale may cause an assertion failure during recursive resolutionEPSS 1.2%CVE-2022-29228HIGHReachable assertion in EnvoyEPSS 1.2%CVE-2021-32037MEDIUMUser may trigger invariant when allowed to send commands directly to shardsEPSS 1.2%CVE-2025-49630HIGHApache HTTP Server: mod_proxy_http2 denial of serviceEPSS 1.2%CVE-2021-1422HIGHCisco Adaptive Security Appliance Software Release 9.16.1 and Cisco Firepower Threat Defense Software Release 7.0.0 IPsec Denial of Service VulnerabilityEPSS 1.2%CVE-2021-24029—A packet of death scenario is possible in mvfst via a specially crafted message during a QUIC session, which causes a crash via a failed assEPSS 1.2%CVE-2022-24777HIGHDenial of Service via reachable assertion in grpc-swiftEPSS 1.2%CVE-2022-48363HIGHIn MPD before 0.23.8, as used on Automotive Grade Linux and other platforms, the PipeWire output plugin mishandles a Drain call in certain sEPSS 1.2%CVE-2022-20694MEDIUMCisco IOS XE Software Border Gateway Protocol Resource Public Key Infrastructure Denial of Service VulnerabilityEPSS 1.2%CVE-2022-23581MEDIUM`CHECK`-failures during Grappler's `IsSimplifiableReshape` in TensorflowEPSS 1.2%