Failure to Handle Incomplete Element

Opis

The product does not properly handle when a particular element is not completely specified.

Skutki

• Integrity, Other

  Varies by Context; Unexpected State

Przykłady podatności

• CVE-2002-1532 HTTP GET without \r\n\r\n CRLF sequences causes product to wait indefinitely and prevents other users from accessing it.
• CVE-2003-0195 Partial request is not timed out.
• CVE-2005-2526 MFV. CPU exhaustion in printer via partial printing request then early termination of connection.
• CVE-2002-1906 CPU consumption by sending incomplete HTTP requests and leaving the connections open.

Słabość nadrzędna

• CWE-237 Improper Handling of Structural Elements

Pokrewna

• CWE-404 Improper Resource Shutdown or Release

Kiedy powstaje

• Implementation

Dotyczy

Not Language-Specific