Fallos del tipo CWE-617

460 resultados

Asserção acessível por entrada não confiável

Código de produção contém asserções (assert statements) que podem ser disparadas por dados fornecidos pelo usuário ou atacante, causando falha abrupta da aplicação. Diferente de validação, asserções são mecanismos de debug que não deveriam controlar o fluxo normal — quando acionadas, encerram o programa, provocando negação de serviço.

Ejemplo

Um servidor web recebe um parâmetro `user_id` e executa `assert user_id > 0` antes de consultar o banco. Um atacante envia `user_id=0` ou negativo, a asserção falha e derruba o servidor. O código assume que validação já ocorreu, mas ela não existe.

Cómo mitigar

Substitua asserções por validação explícita com tratamento de erro apropriado (throw exception, retornar código de erro). Remova ou desative asserções em builds de produção. Use asserções apenas para condições internas que nunca deveriam ocorrer, nunca para entrada de usuário.

CVE-2025-5520MEDIUMOpen5GS AMF/MME emm_state_authentication assertionEPSS 0.9%CVE-2025-46354HIGHA denial of service vulnerability exists in the Distributed Transaction Commit/Abort Operation functionality of Bloomberg Comdb2 8.1. A specEPSS 0.8%CVE-2022-23579MEDIUM`CHECK`-failures during Grappler's `SafeToRemoveIdentity` in TensorflowEPSS 0.8%CVE-2022-23586MEDIUMMultiple `CHECK`-fails in `function.cc` in TensorflowEPSS 0.8%CVE-2021-1440MEDIUMCisco IOS XR Software BGP Resource Public Key Infrastructure Denial of Service VulnerabilityEPSS 0.8%CVE-2025-20666MEDIUMIn Modem, there is a possible system crash due to an uncaught exception. This could lead to remote denial of service, if a UE has connected EPSS 0.8%CVE-2025-15531MEDIUMOpen5GS context.c sgwc_bearer_add assertionEPSS 0.8%CVE-2025-15530MEDIUMOpen5GS s11-handler.c assertionEPSS 0.8%CVE-2022-23582MEDIUM`CHECK`-failures in `TensorByteSize` in TensorflowEPSS 0.8%CVE-2025-8804MEDIUMOpen5GS AMF ngap_build_downlink_nas_transport assertionEPSS 0.8%CVE-2023-37021HIGHOpen5GS MME version <= 2.6.4 contains an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An aEPSS 0.8%CVE-2023-37019HIGHOpen5GS MME versions <= 2.6.4 contains an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An EPSS 0.8%CVE-2023-37017HIGHOpen5GS MME versions <= 2.6.4 contain an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An aEPSS 0.8%CVE-2024-24430HIGHA reachable assertion in the mme_ue_find_by_imsi function of Open5GS <= 2.6.4 allows attackers to cause a Denial of Service (DoS) via a crafEPSS 0.8%CVE-2023-37016HIGHOpen5GS MME versions <= 2.6.4 contain an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An aEPSS 0.8%CVE-2023-37020HIGHOpen5GS MME versions <= 2.6.4 contain an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An aEPSS 0.8%CVE-2023-37023HIGHOpen5GS MME versions <= 2.6.4 contain a reachable assertion in the `Uplink NAS Transport` packet handler. A packet missing its `MME_UE_S1AP_EPSS 0.8%CVE-2024-34235HIGHOpen5GS MME versions <= 2.6.4 contains an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An EPSS 0.8%CVE-2023-37018HIGHOpen5GS MME versions <= 2.6.4 contains an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An EPSS 0.8%CVE-2023-37015HIGHOpen5GS MME versions <= 2.6.4 contains an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An EPSS 0.8%