COMMON WEAKNESS ENUMERATIONIncomplete

CWE-407

Inefficient Algorithmic Complexity

An algorithm in a product has an inefficient worst-case computational complexity that may be detrimental to system performance and can be triggered by an attacker, typically using crafted manipulations that ensure that the worst case is being reached.

Soyutlama

Class

Yapı

Simple

Sömürü İhtimali

Low

Problemi anla

Problem nedir?

An algorithm in a product has an inefficient worst-case computational complexity that may be detrimental to system performance and can be triggered by an attacker, typically using crafted manipulations that ensure that the worst case is being reached.

Terminoloji

Alternatif adlar ve kullanım biçimleri

Quadratic Complexity

Used when the algorithmic complexity is related to the square of the number of inputs (N^2)

Kök neden

Problem nasıl ve ne zaman oluşur?

Yaşam döngüsü evresi

Architecture and Design

Yaşam döngüsü evresi

Implementation

Risk

Başarılı sömürü neye yol açar?

DoS: Resource Consumption (CPU)DoS: Resource Consumption (Memory)DoS: Resource Consumption (Other)

Etkilenen güvenlik alanları: Availability

The typical consequence is CPU consumption, but memory consumption and consumption of other resources can also occur.

Savunma

Nasıl önlenir ve çözülür?

  • Follow secure coding guidelines for input handling and boundary checking.
  • Enforce strict security reviews and automated static analysis (SAST) checks.
CWE-407: Common Weakness Enumeration Entry CWE-407 · DayBreach Sözlük · DayBreach