CWE一覧に戻る
CWE-128

ラップアラウンド・エラー

Wrap-around Error
脆弱性 作成中
JA

ラップアラウンド・エラーは、値がその型の最大値を超えてインクリメントされ、その結果、非常に小さい値、負の値、または未定義の値に "ラップアラウンド "するたびに発生する。

EN

Wrap around errors occur whenever a value is incremented past the maximum value for its type and therefore "wraps around" to a very small, negative, or undefined value.

Scope: Availability / Impact: DoS: Crash, Exit, or Restart; DoS: Resource Consumption (CPU); DoS: Resource Consumption (Memory); DoS: Instability
Scope: Integrity / Impact: Modify Memory
Scope: Confidentiality, Availability, Access Control / Impact: Execute Unauthorized Code or Commands; Bypass Protection Mechanism
Requirements specification: The choice could be made to use a language that is not susceptible to these issues.
Provide clear upper and lower bounds on the scale of any protocols designed.
Perform validation on all incremented variables to ensure that they remain within reasonable bounds.
MITRE公式ページ — CWE-128