CWE-805Buffer Access with Incorrect Length Value

Description

Common consequences· 2

• Integrity / Confidentiality / Availability — Read Memory, Modify Memory, Execute Unauthorized Code or Commands
  Buffer overflows often can be used to execute arbitrary code, which is usually outside the scope of a program's implicit security policy. This can often be used to subvert any other security service.
• Availability — Modify Memory, DoS: Crash, Exit, or Restart, DoS: Resource Consumption (CPU)
  Buffer overflows generally lead to crashes. Other attacks leading to lack of availability are possible, including putting the program into an infinite loop.

Potential mitigations· 5

• [Requirements]
• [Architecture and Design]
• [Operation, Build and Compilation]
• [Implementation]
• [Architecture and Design]For any security checks that are performed on the client side, ensure that these checks are duplicated on the server side, in order to avoid CWE-602. Attackers can bypass the client-side checks by modifying values after the checks have been performed, or by changing the client to remove the client-side checks entirely. Then, these modified values would be submitted to the server.

Related CAPEC attack patterns· 2

Exploits (incoming)2

(incoming)4

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.