CWE-239 未能处理不完整的元素

Failure to Handle Incomplete Element

结构: Simple

Abstraction: Variant

状态: Draft

被利用可能性: unkown

基本描述

The software does not properly handle when a particular element is not completely specified.

相关缺陷

• cwe_Nature: ChildOf cwe_CWE_ID: 237 cwe_View_ID: 1000 cwe_Ordinal: Primary

• cwe_Nature: ChildOf cwe_CWE_ID: 237 cwe_View_ID: 699 cwe_Ordinal: Primary

• cwe_Nature: PeerOf cwe_CWE_ID: 404 cwe_View_ID: 1000

适用平台

Language: {'cwe_Class': 'Language-Independent', 'cwe_Prevalence': 'Undetermined'}

常见的影响

范围	影响	注释
['Integrity', 'Other']	['Varies by Context', 'Unexpected State']

分析过的案例

标识	说明	链接
CVE-2002-1532	HTTP GET without rnrn CRLF sequences causes product to wait indefinitely and prevents other users from accessing it.	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1532
CVE-2003-0195	Partial request is not timed out.	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0195
CVE-2005-2526	MFV. CPU exhaustion in printer via partial printing request then early termination of connection.	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2526
CVE-2002-1906	CPU consumption by sending incomplete HTTP requests and leaving the connections open.	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1906

分类映射

映射的分类名	ImNode ID	Fit	Mapped Node Name
PLOVER			Incomplete Element

文章来源于互联网:scap中文网