COMMON WEAKNESS ENUMERATIONDraft

CWE-664

Improper Control of a Resource Through its Lifetime

The product does not maintain or incorrectly maintains control over a resource throughout its lifetime of creation, use, and release.

Soyutlama

Pillar

Yapı

Simple

Sömürü İhtimali

Medium

Problemi anla

Problem nedir?

The product does not maintain or incorrectly maintains control over a resource throughout its lifetime of creation, use, and release.

Genişletilmiş açıklama

Resources often have explicit instructions on how to be created, used and destroyed. When code does not follow these instructions, it can lead to unexpected behaviors and potentially exploitable states. Even without explicit instructions, various principles are expected to be adhered to, such as "Do not use an object until after its creation is complete," or "do not use an object after it has been slated for destruction."

Kök neden

Problem nasıl ve ne zaman oluşur?

Yaşam döngüsü evresi

Implementation

Risk

Başarılı sömürü neye yol açar?

Other

Etkilenen güvenlik alanları: Other

Savunma

Nasıl önlenir ve çözülür?

  • Follow secure coding guidelines for input handling and boundary checking.
  • Enforce strict security reviews and automated static analysis (SAST) checks.

Doğrulama

Nasıl tespit edilir?

Automated Static Analysis

Use Static analysis tools to check for unreleased resources.
CWE-664: Common Weakness Enumeration Entry CWE-664 · DayBreach Sözlük · DayBreach