Sign in Sign up
JA · EN · FR
SecPulse

Cwe 119

🧬 CWE Related 90
slug: cwe-119

Explanation

CWE-119は「C/C++など低レベル言語で、配列の確保された範囲外にデータを読み書きしてしまう欠陥」のことです。 バッファオーバーフローやヒープオーバーフローと呼ばれる古典的な脆弱性で、攻撃者はこれを使って任意のコード実行を狙います。 ブラウザ・OS・ファームウェアなど低レベルなシステムで頻発します。
📌 Example
Heartbleed (CVE-2014-0160): OpenSSL の境界外読み取り脆弱性で、サーバーのメモリから秘密鍵やパスワードが盗み見えるようになった。世界中のWebサイトの約1/3が影響を受けた。
🔗 Related links

🔖 Related tags

Cwe 20125 Cwe 78120 Cwe 787105 Cwe 41699 Cwe 2296 Cwe 9484 Cwe 50270 Cwe 7966 Cwe 8954 Cwe 91844 Cwe 28443 Cwe 28741 Cwe 7740 Cwe 30638 Cwe 84337

🛡 Vulnerabilities tagged with this 2,709

ID Title
CVE-2016-8685 Buffer Overflow in c (CVE-2016-8685)
CVE-2016-8686 Buffer Overflow in potrace-project (CVE-2016-8686)
CVE-2016-8698 Buffer Overflow in c (CVE-2016-8698)
CVE-2016-8699 Buffer Overflow in c (CVE-2016-8699)
CVE-2016-8700 Buffer Overflow in c (CVE-2016-8700)
CVE-2016-8701 Buffer Overflow in c (CVE-2016-8701)
CVE-2016-8702 Buffer Overflow in c (CVE-2016-8702)
CVE-2016-8703 Buffer Overflow in c (CVE-2016-8703)
CVE-2015-2181 Buffer Overflow in roundcube (CVE-2015-2181)
CVE-2016-2519 Buffer Overflow in dos (CVE-2016-2519)
CVE-2015-7975 Buffer Overflow in dos (CVE-2015-7975)
CVE-2016-8575 Buffer Overflow in c (CVE-2016-8575)
CVE-2017-5202 The ISO CLNS parser in tcpdump before 4.9.0 has a buffer overflow in print-isoclns.c:clnp_print().
CVE-2017-5203 The BOOTP parser in tcpdump before 4.9.0 has a buffer overflow in print-bootp.c:bootp_print().
CVE-2017-5204 The IPv6 parser in tcpdump before 4.9.0 has a buffer overflow in print-ip6.c:ip6_print().
CVE-2017-5205 The ISAKMP parser in tcpdump before 4.9.0 has a buffer overflow in print-isakmp.c:ikev2_e_print().
CVE-2017-5341 The OTV parser in tcpdump before 4.9.0 has a buffer overflow in print-otv.c:otv_print().
CVE-2017-5342 Buffer Overflow in c (CVE-2017-5342)
CVE-2017-5482 Buffer Overflow in c (CVE-2017-5482)
CVE-2017-5483 The SNMP parser in tcpdump before 4.9.0 has a buffer overflow in print-snmp.c:asn1_parse().
CVE-2017-5484 The ATM parser in tcpdump before 4.9.0 has a buffer overflow in print-atm.c:sig_print().
CVE-2017-5485 The ISO CLNS parser in tcpdump before 4.9.0 has a buffer overflow in addrtoname.c:lookup_nsap().
CVE-2017-5486 The ISO CLNS parser in tcpdump before 4.9.0 has a buffer overflow in print-isoclns.c:clnp_print().
CVE-2016-7922 The AH parser in tcpdump before 4.9.0 has a buffer overflow in print-ah.c:ah_print().
CVE-2016-7923 The ARP parser in tcpdump before 4.9.0 has a buffer overflow in print-arp.c:arp_print().
CVE-2016-7924 The ATM parser in tcpdump before 4.9.0 has a buffer overflow in print-atm.c:oam_print().
CVE-2016-7925 Buffer Overflow in c (CVE-2016-7925)
CVE-2016-7926 Buffer Overflow in c (CVE-2016-7926)
CVE-2016-7927 Buffer Overflow in c (CVE-2016-7927)
CVE-2016-7928 The IPComp parser in tcpdump before 4.9.0 has a buffer overflow in print-ipcomp.c:ipcomp_print().

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →