CWE-228—Improper Handling of Syntactically Invalid Structure
PUBLISHEDweakness record
released 2006-07-19 · last modified 2025-12-11
Metadata
- CWE ID：
- CWE-228
- 摘要：
- Class
- 结构：
- Simple
- 状态：
- Incomplete
- 发布日期：
- 2006-07-19
- 更新日期：
- 2025-12-11
名称
Improper Handling of Syntactically Invalid Structure
描述
The product does not handle or incorrectly handles input that is not syntactically well-formed with respect to the associated specification.
常见后果
- 范围：
- Integrity, Availability
- 影响：
- Unexpected State, DoS: Crash, Exit, or Restart, DoS: Resource Consumption (CPU)
- 注释：
- If an input is syntactically invalid, then processing the input could place the system in an unexpected state that could lead to a crash, consume available system resources or other unintended behaviors.