目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1359 元

100%
请我们喝杯咖啡

CWE-119 内存缓冲区边界内操作的限制不恰当 类漏洞列表 1131

CWE-119 内存缓冲区边界内操作的限制不恰当 类弱点 1131 条 CVE 漏洞汇总，含 AI 中文分析。

CWE-119 属于内存缓冲区操作限制不当漏洞，指程序在读写内存时超出缓冲区边界，导致意外访问其他变量或内部数据。攻击者通常利用此缺陷通过精心构造的输入触发缓冲区溢出，从而覆盖关键内存数据或执行任意代码，实现远程代码执行或系统崩溃。开发者应避免此类风险，需严格实施边界检查，使用安全的字符串处理函数，并启用编译器防护机制，确保所有内存操作均在合法范围内进行。

MITRE CWE 官方描述
CWE：CWE-119 内存缓冲区操作限制不当 (Improper Restriction of Operations within the Bounds of a Memory Buffer) 英文：产品对内存缓冲区执行操作，但其从内存缓冲区的预期边界之外读取或写入内存位置。这可能导致对意外内存位置的读取或写入操作，这些位置可能与其它变量、数据结构或内部程序数据相关联。
常见影响 (3)
Integrity, Confidentiality, Availability Execute Unauthorized Code or Commands, Modify Memory
If the memory accessible by the attacker can be effectively controlled, it may be possible to execute arbitrary code, as with a standard buffer overflow. If the attacker can overwrite a pointer's worth of memory (usually 32 or 64 bits), they can alter the intended control flow by redirecting a funct…
Availability, Confidentiality Read Memory, DoS: Crash, Exit, or Restart, DoS: Resource Consumption (CPU), DoS: Resource Consumption (Memory)
Out of bounds memory access will very likely result in the corruption of relevant memory, and perhaps instructions, possibly leading to a crash. Other attacks leading to lack of availability are possible, including putting the program into an infinite loop.
Confidentiality Read Memory
In the case of an out-of-bounds read, the attacker may have access to sensitive information. If the sensitive information contains system details, such as the current buffer's position in memory, this knowledge can be used to craft further attacks, possibly with more severe consequences.
缓解措施 (5)
Requirements Use a language that does not allow this weakness to occur or provides constructs that make this weakness easier to avoid. For example, many languages that perform their own memory management, such as Java and Perl, are not subject to buffer overflows. Other languages, such as Ada and C#, typically provide overflow protection, but the protection can be disabled by the programmer. Be wary that a lan…
Architecture and Design Use a vetted library or framework that does not allow this weakness to occur or provides constructs that make this weakness easier to avoid. Examples include the Safe C String Library (SafeStr) by Messier and Viega [REF-57], and the Strsafe.h library from Microsoft [REF-56]. These libraries provide safer versions of overflow-prone string-handling functions.
Operation, Build and Compilation Use automatic buffer overflow detection mechanisms that are offered by certain compilers or compiler extensions. Examples include: the Microsoft Visual Studio /GS flag, Fedora/Red Hat FORTIFY_SOURCE GCC flag, StackGuard, and ProPolice, which provide various mechanisms including canary-based detection and range/index checking. D3-SFCV (Stack Frame Canary Validation) from D3FEND [REF-1334] discusses…
Effectiveness: Defense in Depth
Implementation Consider adhering to the following rules when allocating and managing an application's memory: Double check that the buffer is as large as specified. When using functions that accept a number of bytes to copy, such as strncpy(), be aware that if the destination buffer size is equal to the source buffer size, it may not NULL-terminate the string. Check buffer boundaries if accessing the buffer in a…
Operation, Build and Compilation Run or compile the software using features or extensions that randomly arrange the positions of a program's executable and libraries in memory. Because this makes the addresses unpredictable, it can prevent an attacker from reliably jumping to exploitable code. Examples include Address Space Layout Randomization (ASLR) [REF-58] [REF-60] and Position-Independent Executables (PIE) [REF-64]. Imported…
Effectiveness: Defense in Depth
代码示例 (2)
This example takes an IP address from a user, verifies that it is well formed and then looks up the hostname and copies it into a buffer.
void host_lookup(char *user_supplied_addr){ struct hostent *hp; in_addr_t *addr; char hostname[64]; in_addr_t inet_addr(const char *cp); /*routine that ensures user_supplied_addr is in the right format for conversion */ validate_addr_form(user_supplied_addr); addr = inet_addr(user_supplied_addr); hp = gethostbyaddr( addr, sizeof(struct in_addr), AF_INET); strcpy(hostname, hp->h_name); }
Bad · C
This example applies an encoding procedure to an input string and stores it into a buffer.
char * copy_input(char *user_supplied_string){ int i, dst_index; char *dst_buf = (char*)malloc(4*sizeof(char) * MAX_SIZE); if ( MAX_SIZE <= strlen(user_supplied_string) ){ die("user string too long, die evil hacker!"); } dst_index = 0; for ( i = 0; i < strlen(user_supplied_string); i++ ){ if( '&' == user_supplied_string[i] ){ dst_buf[dst_index++] = '&'; dst_buf[dst_index++] = 'a'; dst_buf[dst_index++] = 'm'; dst_buf[dst_index++] = 'p'; dst_buf[dst_index++] = ';'; } else if ('<' == user_supplied_string[i] ){ /* encode to &lt; */ } else dst_buf[dst_index++] = user_supplied_string[i]; } return ds
Bad · C
CVE ID 标题 CVSS 风险等级 Published
CVE-2017-15128 Linux kernel 安全漏洞 — Linux kernel before 4.13.12 5.5 - 2018-01-14
CVE-2018-0103 多款Cisco产品WebEx ARF player 缓冲区错误漏洞 — Cisco WebEx Network Recording Player 8.6 - 2018-01-04
CVE-2017-3196 Rawether for Windows 权限许可和访问控制漏洞 — ASUS PCE-AC56 WLAN Card Utilities 7.8 - 2017-12-15
CVE-2017-12359 多款Cisco产品WebEx Advanced Recording Format Player 缓冲区错误漏洞 — Cisco WebEx Network Recording Player 8.8 - 2017-11-30
CVE-2017-12367 多款Cisco产品WebEx Recording Format Player和Advanced Recording Format Player 安全漏洞 — Cisco WebEx Recording Format and Advanced Recording Format Players 9.6 - 2017-11-30
CVE-2017-12368 多款Cisco产品WebEx Recording Format Player和Advanced Recording Format Player 安全漏洞 — Cisco WebEx Recording Format and Advanced Recording Format Players 9.6 - 2017-11-30
CVE-2017-12369 多款Cisco产品WebEx Recording Format Player和Advanced Recording Format Player 安全漏洞 — Cisco WebEx Recording Format and Advanced Recording Format Players 9.6 - 2017-11-30
CVE-2017-12370 多款Cisco产品WebEx Recording Format Player和Advanced Recording Format Player 安全漏洞 — Cisco WebEx Recording Format and Advanced Recording Format Players 9.6 - 2017-11-30
CVE-2017-12371 多款Cisco产品WebEx Recording Format Player和Advanced Recording Format Player 安全漏洞 — Cisco WebEx Recording Format and Advanced Recording Format Players 9.6 - 2017-11-30
CVE-2017-12372 多款Cisco产品WebEx Recording Format Player和Advanced Recording Format Player 安全漏洞 — Cisco WebEx Recording Format and Advanced Recording Format Players 9.6 - 2017-11-30
CVE-2017-12278 Cisco Wireless LAN Controller Simple Network Management Protocol子系统安全漏洞 — Cisco Wireless LAN Controller 6.3 - 2017-11-02
CVE-2017-12280 Cisco Wireless LAN Controller 安全漏洞 — Cisco Wireless LAN Controller 7.5 - 2017-11-02
CVE-2017-12282 Cisco Wireless LAN Controller 安全漏洞 — Cisco Wireless LAN Controller 6.1 - 2017-11-02
CVE-2017-12283 Cisco Aironet 3800 Series Access Points 安全漏洞 — Cisco Aironet 3800 Series Access Points 5.3 - 2017-11-02
CVE-2017-12259 Cisco Small Business SPA51x Series IP Phones 安全漏洞 — Cisco Small Business SPA51x Series IP Phones 7.5 - 2017-10-19
CVE-2017-12260 Cisco Small Business SPA50x、SPA51x和SPA52x Series IP Phones 安全漏洞 — Cisco Small Business SPA50x, SPA51x, and SPA52x Series IP Phones 7.5 - 2017-10-19
CVE-2017-12293 Cisco WebEx Meetings Server 安全漏洞 — Cisco WebEx Meetings Server 8.6 - 2017-10-19
CVE-2017-12267 Cisco Wide Area Application Services 安全漏洞 — Cisco Wide Area Application Services 5.3 - 2017-10-05
CVE-2017-12270 Cisco Network Convergence System 5500 Series Routers IOS XR Software 安全漏洞 — Cisco IOS XR 7.5 - 2017-10-05
CVE-2017-6720 多款Cisco产品SSH子系统缓冲区错误漏洞 — Cisco Small Business Managed Switches 6.5 - 2017-09-21
CVE-2017-6791 Cisco Unified Communications Manager 安全漏洞 — Cisco Unified Communications Manager 7.5 - 2017-09-07
CVE-2017-12708 Advantech WebAccess 安全漏洞 — Advantech WebAccess 9.8 - 2017-08-30
CVE-2017-9633 Continental AG Infineon S-Gold 2 (PMB 8876) chipset 安全漏洞 — Continental AG Infineon S-Gold 2 (PMB 8876) 8.8 - 2017-08-07
CVE-2017-6745 Cisco Videoscape Distribution Suite for Television cache server 安全漏洞 — Cisco Videoscape Distribution Suite Cache Server 7.5 - 2017-08-07
CVE-2017-6753 Google Chrome和Mozilla firefox for Windows Cisco WebEx Browser Extension 安全漏洞 — Cisco WebEx Browser Extension 8.8 - 2017-07-25
CVE-2017-7506 spice 缓冲区错误漏洞 — spice 8.8 - 2017-07-18
CVE-2017-6736 Cisco IOS和IOS XE Simple Network Management Protocol子系统缓冲区错误漏洞 — IOS 8.8 - 2017-07-17
CVE-2017-6737 Cisco IOS和IOS XE Simple Network Management Protocol子系统缓冲区错误漏洞 — IOS 8.8 - 2017-07-17
CVE-2017-6738 Cisco IOS和IOS XE Simple Network Management Protocol子系统缓冲区错误漏洞 — IOS 8.8 - 2017-07-17
CVE-2017-6739 Cisco IOS和IOS XE Simple Network Management Protocol子系统缓冲区错误漏洞 — Universal Product 8.8 - 2017-07-17

CWE-119（内存缓冲区边界内操作的限制不恰当） 是常见的弱点类别，本平台收录该类弱点关联的 1131 条 CVE 漏洞。