Weakness (CWE)
CWE-128: Wrap-around Error
Wrap around errors occur whenever a value is incremented past the maximum value for its type and therefore "wraps around" to a very small, negative, or undefined value.
How to prevent it (3 mitigations)
-
Requirements specification: The choice could be made to use a language that is not susceptible to these issues.
-
Architecture and Design
Provide clear upper and lower bounds on the scale of any protocols designed.
-
Implementation
Perform validation on all incremented variables to ensure that they remain within reasonable bounds.
Source: MITRE CWE-128
1 result · Clear filters · Feed
-
Medium 5.8
Multiple Cisco Products Snort 3 Generic Routing Encapsulation Denial of Service Vulnerabilities
Multiple Cisco products are affected by a vulnerability in the Snort 3 Generic Routing Encapsulation (GRE) Detection Engine that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart, resulting in an interruption of …