Skip to content
OpenAdvisories

Weakness (CWE)

CWE-193: Off-by-one Error

Base Draft

A product calculates or uses an incorrect maximum or minimum value that is 1 more, or 1 less, than the correct value.

How to prevent it (1 mitigation)

  1. Implementation

    When copying character arrays or using character manipulation methods, the correct size parameter must be used to account for the null terminator that needs to be added at the end of the array. Some examples of functions susceptible to this weakness in C include strcpy(), strncpy(), strcat(), strncat(), printf(), sprintf(), scanf() and sscanf().

Source: MITRE CWE-193

All Critical High Medium Low Exploited only Public exploit

170 results · Feed

  • Critical 9.8
    CVE-2020-14510

    OFF-BY-ONE ERROR CWE-193

    GateManager versions prior to 9.2c, The affected product contains a hard-coded credential for telnet, allowing an unprivileged attacker to execute commands as root.

    Secomea GateManager
  • High 8.1
    CVE-2020-14508

    OFF-BY-ONE ERROR CWE-193

    GateManager versions prior to 9.2c, The affected product is vulnerable to an off-by-one error, which may allow an attacker to remotely execute arbitrary code or cause a denial-of-service condition.

    Secomea GateManager
  • Critical 9.0
    CVE-2020-10062

    Packet length decoding error in MQTT

    An off-by-one error in the Zephyr project MQTT packet length decoder can result in memory corruption and possible remote code execution. NCC-ZEP-031 This issue affects: zephyrproject-rtos zephyr version 2.2.0 and later versions.

    zephyrproject-rtos Zephyr
  • Medium 6.5
    CVE-2019-10131

    An off-by-one read vulnerability was discovered in ImageMagick before version 7.0.7-28 in the formatIPTCfromBuffer func…

    ImageMagick ImageMagick imagemagick imagemagick Debian Ubuntu
  • Unscored —
    CVE-2019-8272

    UltraVNC revision 1211 has multiple off-by-one vulnerabilities in VNC server code, which can potentially result in code…

    Kaspersky Lab UltraVNC
  • Unscored —
    CVE-2019-8268

    UltraVNC revision 1206 has multiple off-by-one vulnerabilities in VNC client code connected with improper usage of Clie…

    Kaspersky Lab UltraVNC
  • Medium 5.5
    CVE-2017-2618

    A flaw was found in the Linux kernel's handling of clearing SELinux attributes on /proc/pid/attr files before 4.9.10. A…

    Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.5
    CVE-2006-4574

    Off-by-one error in the MIME Multipart dissector in Wireshark (formerly Ethereal) 0.10.1 through 0.99.3 allows remote a…

    wireshark Debian
  • Critical 9.8
    CVE-2002-1816 Public exploit

    Off-by-one buffer overflow in the sock_gets function in sockhelp.c for ATPhttpd 0.4b and earlier allows remote attacker…

  • High 7.5
    CVE-1999-1568

    Off-by-one error in NcFTPd FTP server before 2.4.1 allows a remote attacker to cause a denial of service (crash) via a …