CWE-785—Use of Path Manipulation Function without Maximum-sized Buffer

名称

Use of Path Manipulation Function without Maximum-sized Buffer

描述

The product invokes a function for normalizing paths or file names, but it provides an output buffer that is smaller than the maximum possible size, such as PATH_MAX.

Passing an inadequately-sized output buffer to a path manipulation function can result in a buffer overflow. Such functions include realpath(), readlink(), PathAppend(), and others.

常见后果

范围：

Integrity, Confidentiality, Availability

影响：

Modify Memory, Execute Unauthorized Code or Commands, DoS: Crash, Exit, or Restart

相关 CWE

• CWE-20Improper Input ValidationHigh
• CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')High
• CWE-676Use of Potentially Dangerous FunctionHigh