CWE-839: Signed comparison
The product checks a value to ensure that it is less than or equal to a maximum, but it does not also verify that the value is greater than or equal to the minimum.
Also known as Numeric Range Comparison Without Minimum Check.
A kind of CWE-1023 Incomplete Comparison with Missing Factors.
From the CWE List. © The MITRE Corporation.
Newest
- gnu mtools GNU mtools through 4.0.49 has an out-of-bounds write in parse_vses in vfat.c. 6.1 Medium
- asterisk, asterisk certified-asterisk +1 more Asterisk: CVE-2022-37325 fix is absent from current chan_ooh323 Q.931 party-number parser 7.5 High
- apache activemq, apache software foundation activemq all, activemq stomp +2 more Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Stomp: STOMP negative content-length enables denial of service 7.5 High
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 more IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN 9.8 Critical
- gnu sasl, debian linux +1 more GNU SASL before 2.2.4 lacks sanitization of a short challenge in _gsasl_ntlm_client_step in the... 3.7 Low
- exim Exim 4.88 before 4.99.4, in some proxy configurations, mishandles certain short payloads, leading... 5.3 Medium
- abb freelance controllers ac 700f, freelance controllers ac 900f, freelance 2013 +3 more +5 more Buffer overflow in global memory region 8.6 High
- mitel micontact center business The ccmweb component of Mitel MiContact Center Business server 9.2.2.0 through 9.4.1.0 could... 7.5 High
- mongodb, mongodb inc. server, mongodb, inc. mongodb server +2 more Denial of service via malformed network packet 7.5 High