简体中文

CWE-399 类别详情

CWE-399

Resource Management Errors
2006-07-19 +00:00
Draft
2023-06-29 +00:00
CWE Mitre.org
指定 CWE 通知
随时了解指定 CWE 的变更。
管理通知

名称: Resource Management Errors

Weaknesses in this category are related to improper management of system resources.

CWE 成员列表

CWE-73: External Control of File Name or Path 基础

CWE-403: Exposure of File Descriptor to Unintended Control Sphere 基础

CWE-410: Insufficient Resource Pool 基础

CWE-470: Use of Externally-Controlled Input to Select Classes or Code 基础

CWE-502: Deserialization of Untrusted Data 基础

CWE-619: Dangling Database Cursor 基础

CWE-641: Improper Restriction of Names for Files and Other Resources 基础

CWE-694: Use of Multiple Resources with Duplicate Identifier 基础

CWE-763: Release of Invalid Pointer or Reference 基础

CWE-770: Allocation of Resources Without Limits or Throttling 基础

CWE-771: Missing Reference to Active Allocated Resource 基础

CWE-772: Missing Release of Resource after Effective Lifetime 基础

CWE-826: Premature Release of Resource During Expected Lifetime 基础

CWE-908: Use of Uninitialized Resource 基础

CWE-909: Missing Initialization of Resource 基础

CWE-910: Use of Expired File Descriptor 基础

CWE-911: Improper Update of Reference Count 基础

CWE-914: Improper Control of Dynamically-Identified Variables 基础

CWE-915: Improperly Controlled Modification of Dynamically-Determined Object Attributes 基础

CWE-920: Improper Restriction of Power Consumption 基础

CWE-1188: Initialization of a Resource with an Insecure Default 基础

CWE-1341: Multiple Releases of Same Resource or Handle 基础

CWE 信息

漏洞映射说明

依据 : This entry is a Category. Using categories for mapping has been discouraged since 2019. Categories are informal organizational groupings of weaknesses that can help CWE users with data aggregation, navigation, and browsing. However, they are not weaknesses in themselves [REF-1287]. This CWE ID may have become widely-used because of NIST's usage in NVD from 2008 to 2016 (see CWE-635 view, updated to the CWE-1003 view in 2016).
备注 : Some weakness-oriented alternatives might be found as descendants under Uncontrolled Resource Consumption (CWE-400).

提交记录

名称 组织 日期 发布日期 Version
PLOVER 2006-07-19 +00:00 2006-07-19 +00:00 Draft 3

修改记录

名称 组织 日期 备注
CWE Content Team MITRE 2008-09-08 +00:00 updated Relationships, Other_Notes, Taxonomy_Mappings
CWE Content Team MITRE 2009-05-27 +00:00 updated Relationships
CWE Content Team MITRE 2014-06-23 +00:00 updated Other_Notes
CWE Content Team MITRE 2014-07-30 +00:00 updated Detection_Factors
CWE Content Team MITRE 2015-12-07 +00:00 updated Relationships
CWE Content Team MITRE 2017-01-19 +00:00 updated Relationships
CWE Content Team MITRE 2017-11-08 +00:00 updated Applicable_Platforms, Detection_Factors, Relationships
CWE Content Team MITRE 2019-01-03 +00:00 updated Relationships
CWE Content Team MITRE 2019-06-20 +00:00 updated Relationships
CWE Content Team MITRE 2020-02-24 +00:00 updated Relationships
CWE Content Team MITRE 2022-10-13 +00:00 updated References
CWE Content Team MITRE 2023-04-27 +00:00 updated Relationships
CWE Content Team MITRE 2023-06-29 +00:00 updated Mapping_Notes

参考资料

REF-1287

Supplemental Details - 2022 CWE Top 25
MITRE.
https://cwe.mitre.org/top25/archive/2022/2022_cwe_top25_supplemental.html#problematicMappingDetails

cvefind.com 上展示的信息来源于多个精心选择的权威数据源。CVE 数据由 MITRE Corporation 和 National Vulnerability Database (NVD) 提供。已知被利用漏洞（KEV）目录来源于 Cybersecurity and Infrastructure Security Agency (CISA)，EPSS 评分来自 FIRST.org。此外，软件弱点（CWE）和常见攻击模式（CAPEC）数据由 MITRE Corporation 维护，硬件和软件配置（CPE）信息由 NVD 提供。