Fallos del tipo CWE-754

461 resultados

Falta de verificação de condições excepcionais

O software não valida ou valida incorretamente situações anormais que raramente ocorrem no operação rotineira, deixando o código vulnerável quando essas condições inesperadas acontecem. Isso causa comportamento indefinido, crash ou exploração, porque o desenvolvedor assumiu que 'isso nunca vai acontecer' sem proteção.

Ejemplo

Um parser de arquivo de imagem assume que o header sempre terá exatamente 256 bytes sem checar o tamanho real; quando recebe um arquivo malformado com header menor, acessa memória além do esperado causando leitura fora de limites ou corrupção.

Cómo mitigar

Valide explicitamente todas as entradas e estados críticos, mesmo aqueles aparentemente impossíveis: use asserções em desenvolvimento, trate exceções esperadas e adicione limites de segurança (timeouts, limites de tamanho). Teste com entradas malformadas e corner cases, não apenas fluxo feliz.

CVE-2022-22180HIGHJunos OS: EX2300 Series, EX2300-MP Series, EX3400 Series: A slow memory leak due to processing of specific IPv6 packetsEPSS 0.9%CVE-2023-27772HIGHlibiec61850 v1.5.1 was discovered to contain a segmentation violation via the function ControlObjectClient_setOrigin() at /client/client_conEPSS 0.9%CVE-2022-26078HIGHGallagher Controller 6000 is vulnerable to a Denial of Service attack via conflicting ARP packets with a duplicate IP address. This issue afEPSS 0.9%CVE-2023-23626MEDIUMDenial of service when feeding malformed size arguments in go-bitfieldEPSS 0.9%CVE-2022-26130MEDIUMOn F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, and 13.1.x versions prEPSS 0.9%CVE-2021-21439MEDIUMPossible DoS attack using a special crafted URL in email bodyEPSS 0.9%CVE-2022-23593MEDIUMSegfault in `simplifyBroadcast` in TensorflowEPSS 0.9%CVE-2022-24323MEDIUMA CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause a disruption of communication between EPSS 0.9%CVE-2023-39205MEDIUMImproper conditions check in Zoom Team Chat for Zoom clients may allow an authenticated user to conduct a denial of service via network acceEPSS 0.9%CVE-2021-0236MEDIUMJunos OS: A specific BGP VPNv6 flowspec message causes routing protocol daemon (rpd) process to crash with a core.EPSS 0.8%CVE-2021-21563MEDIUMDell EMC PowerScale OneFS versions 8.1.2-9.1.0.x contain an Improper Check for Unusual or Exceptional Conditions in its auditing component.TEPSS 0.8%CVE-2021-0281MEDIUMJunos OS and Junos OS Evolved: Specific packets can trigger rpd crash when BGP Origin Validation is configured with RPKIEPSS 0.8%CVE-2025-2704HIGHOpenVPN version 2.6.1 through 2.6.13 in server mode using TLS-crypt-v2 allows remote attackers to trigger a denial of service by corrupting EPSS 0.8%CVE-2025-69420HIGHMissing ASN1_TYPE validation in TS_RESP_verify_response() functionEPSS 0.8%CVE-2022-28706MEDIUMOn F5 BIG-IP 16.1.x versions prior to 16.1.2 and 15.1.x versions prior to 15.1.5.1, when the DNS resolver configuration is used, undisclosedEPSS 0.8%CVE-2022-29473MEDIUMOn F5 BIG-IP 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, and 13.1.x versions prior to 13.1.5, when an IPSec ALG prEPSS 0.8%CVE-2022-21737MEDIUMAssertion failure based denial of service in TensorflowEPSS 0.8%CVE-2022-27563HIGHOverload/denial of service affects HCL VersionVault ExpressEPSS 0.8%CVE-2026-4694HIGHIncorrect boundary conditions, integer overflow in the Graphics componentEPSS 0.8%CVE-2026-0227MEDIUMPAN-OS: Firewall Denial of Service (DoS) in GlobalProtect Gateway and PortalEPSS 0.7%