이름: Weaknesses Addressed by the SEI CERT C++ Coding Standard (2016 Version)

CWE entries in this view (graph) are fully or partially eliminated by following the SEI CERT C++ Coding Standard, as published in 2016. This view is no longer being actively maintained, since it statically represents the coding rules as they were in 2016.

CWE 구성원

CWE-869: CERT C++ Secure Coding Section 01 - Preprocessor (PRE) 카테고리

CWE-869: Weaknesses in this category are related to rules in the Preprocessor (PRE) section of the CERT C++ Secure Coding Standard. Since not all rules map to specific weaknesses, this category may be incomplete.

CWE-870: CERT C++ Secure Coding Section 02 - Declarations and Initialization (DCL) 카테고리

CWE-870: Weaknesses in this category are related to rules in the Declarations and Initialization (DCL) section of the CERT C++ Secure Coding Standard. Since not all rules map to specific weaknesses, this category may be incomplete.

CWE-871: CERT C++ Secure Coding Section 03 - Expressions (EXP) 카테고리

CWE-871: Weaknesses in this category are related to rules in the Expressions (EXP) section of the CERT C++ Secure Coding Standard. Since not all rules map to specific weaknesses, this category may be incomplete.

CWE-476: NULL Pointer Dereference 기본

CWE-480: Use of Incorrect Operator 기본

CWE-768: Incorrect Short Circuit Evaluation 기본

CWE-872: CERT C++ Secure Coding Section 04 - Integers (INT) 카테고리

CWE-872: Weaknesses in this category are related to rules in the Integers (INT) section of the CERT C++ Secure Coding Standard. Since not all rules map to specific weaknesses, this category may be incomplete.

CWE-129: Improper Validation of Array Index 기본

CWE-190: Integer Overflow or Wraparound 기본

CWE-192: Integer Coercion Error 기본

CWE-197: Numeric Truncation Error 기본

CWE-20: Improper Input Validation 기본

CWE-369: Divide By Zero 기본

CWE-466: Return of Pointer Value Outside of Expected Range 기본

CWE-587: Assignment of a Fixed Address to a Pointer 기본

CWE-606: Unchecked Input for Loop Condition 기본

CWE-676: Use of Potentially Dangerous Function 기본

CWE-681: Incorrect Conversion between Numeric Types 기본

CWE-682: Incorrect Calculation 기본

CWE-873: CERT C++ Secure Coding Section 05 - Floating Point Arithmetic (FLP) 카테고리

CWE-873: Weaknesses in this category are related to rules in the Floating Point Arithmetic (FLP) section of the CERT C++ Secure Coding Standard. Since not all rules map to specific weaknesses, this category may be incomplete.

CWE-369: Divide By Zero 기본

CWE-681: Incorrect Conversion between Numeric Types 기본

CWE-682: Incorrect Calculation 기본

CWE-686: Function Call With Incorrect Argument Type 기본

CWE-880: CERT C++ Secure Coding Section 12 - Exceptions and Error Handling (ERR) 카테고리

CWE-880: Weaknesses in this category are related to rules in the Exceptions and Error Handling (ERR) section of the CERT C++ Secure Coding Standard. Since not all rules map to specific weaknesses, this category may be incomplete.

CWE-209: Generation of Error Message Containing Sensitive Information 기본

CWE-390: Detection of Error Condition Without Action 기본

CWE-391: DEPRECATED: Unchecked Error Condition 기본

CWE-460: Improper Cleanup on Thrown Exception 기본

CWE-497: Exposure of Sensitive System Information to an Unauthorized Control Sphere 기본

CWE-544: Missing Standardized Error Handling Mechanism 기본

CWE-703: Improper Check or Handling of Exceptional Conditions 기본

CWE-705: Incorrect Control Flow Scoping 기본

CWE-754: Improper Check for Unusual or Exceptional Conditions 기본

CWE-755: Improper Handling of Exceptional Conditions 기본

CWE-881: CERT C++ Secure Coding Section 13 - Object Oriented Programming (OOP) 카테고리

CWE-881: Weaknesses in this category are related to rules in the Object Oriented Programming (OOP) section of the CERT C++ Secure Coding Standard. Since not all rules map to specific weaknesses, this category may be incomplete.

CWE-882: CERT C++ Secure Coding Section 14 - Concurrency (CON) 카테고리

CWE-882: Weaknesses in this category are related to rules in the Concurrency (CON) section of the CERT C++ Secure Coding Standard. Since not all rules map to specific weaknesses, this category may be incomplete.

CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization 기본

CWE-366: Race Condition within a Thread 기본

CWE-404: Improper Resource Shutdown or Release 기본

CWE-488: Exposure of Data Element to Wrong Session 기본

CWE-772: Missing Release of Resource after Effective Lifetime 기본

CWE-883: CERT C++ Secure Coding Section 49 - Miscellaneous (MSC) 카테고리

CWE-883: Weaknesses in this category are related to rules in the Miscellaneous (MSC) section of the CERT C++ Secure Coding Standard. Since not all rules map to specific weaknesses, this category may be incomplete.

CWE-116: Improper Encoding or Escaping of Output 기본

CWE-14: Compiler Removal of Code to Clear Buffers 기본

CWE-176: Improper Handling of Unicode Encoding 기본

CWE-20: Improper Input Validation 기본

CWE-327: Use of a Broken or Risky Cryptographic Algorithm 기본

CWE-330: Use of Insufficiently Random Values 기본

CWE-480: Use of Incorrect Operator 기본

CWE-482: Comparing instead of Assigning 기본

CWE-561: Dead Code 기본

CWE-563: Assignment to Variable without Use 기본

CWE-570: Expression is Always False 기본

CWE-571: Expression is Always True 기본

CWE-697: Incorrect Comparison 기본

CWE-704: Incorrect Type Conversion or Cast 기본

CWE 뷰 정보

취약점 매핑 메모

근거 : This entry is a View. Views are not weaknesses and therefore inappropriate to describe the root causes of vulnerabilities.
댓글 : Use this View or other Views to search and navigate for the appropriate weakness.

메모

The relationships in this view were determined based on specific statements within the rules from the standard. Not all rules have direct relationships to individual weaknesses, although they likely have chaining relationships in specific circumstances.

대상

이해관계자	설명
Software Developers	By following the CERT C++ Secure Coding Standard, developers will be able to fully or partially prevent the weaknesses that are identified in this view. In addition, developers can use a CWE coverage graph to determine which weaknesses are not directly addressed by the standard, which will help identify and resolve remaining gaps in training, tool acquisition, or other approaches for reducing weaknesses.
Product Customers	If a software developer claims to be following the CERT C++ Secure Coding Standard, then customers can search for the weaknesses in this view in order to formulate independent evidence of that claim.
Educators	Educators can use this view in multiple ways. For example, if there is a focus on teaching weaknesses, the educator could link them to the relevant Secure Coding Standard.

제출

이름	조직	날짜	출시일	Version
CWE Content Team	MITRE	2011-08-04 +00:00	2011-09-13 +00:00	2.1

수정 사항

이름	조직	날짜	댓글
CWE Content Team	MITRE	2019-01-03 +00:00	updated Description, Maintenance_Notes, Name, References
CWE Content Team	MITRE	2020-02-24 +00:00	updated View_Audience
CWE Content Team	MITRE	2021-03-15 +00:00	updated Description, Maintenance_Notes
CWE Content Team	MITRE	2023-06-29 +00:00	updated Mapping_Notes

참고 자료

REF-847

SEI CERT C++ Coding Standard
The Software Engineering Institute.
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?pageId=88046682

CWE-868 뷰 상세 정보

CWE-868