995
Nature Type ID Name Page
MemberOf 1003 Weaknesses for Simplified Mapping of Published
Vulnerabilities
1003 2576
MemberOf 1307 CISQ Quality Measures - Maintainability 1305 2484
MemberOf 1416 Comprehensive Categorization: Resource Lifecycle
Management
1400 2545
Taxonomy Mappings
Mapped Taxonomy Name Node ID Fit Mapped Node Name
PLOVER Algorithmic Complexity
References
[REF-395]Scott A. Crosby and Dan S. Wallach. "Algorithmic Complexity Attacks". Proceedings
of the 12th USENIX Security Symposium. 2003 August. < https://www.usenix.org/legacy/events/
sec03/tech/full_papers/crosby/crosby.pdf >.
[REF-1164]Ilya Kantor. "Catastrophic backtracking". 2020 December 3. < https://javascript.info/
regexp-catastrophic-backtracking >.
CWE-408: Incorrect Behavior Order: Early Amplification
Weakness ID : 408
Structure : Simple
Abstraction : Base
Description
The product allows an entity to perform a legitimate but expensive operation before authentication
or authorization has taken place.
Relationships
The table(s) below shows the weaknesses and high level categories that are related to this
weakness. These relationships are defined as ChildOf, ParentOf, MemberOr and give insight to
similar items that may exist at higher and lower levels of abstraction. In addition, relationships such
as PeerOf and CanAlsoBe are defined to show similar weaknesses that may want to be explored.
Relevant to the view "Research Concepts" (CWE-1000)
Nature Type ID Name Page
ChildOf 405 Asymmetric Resource Consumption (Amplification) 986
ChildOf 696 Incorrect Behavior Order 1527
Relevant to the view "Software Development" (CWE-699)
Nature Type ID Name Page
MemberOf 438 Behavioral Problems 2326
Applicable Platforms
Language : Not Language-Specific (Prevalence = Undetermined)
Common Consequences
Scope Impact Likelihood
Availability DoS: Amplification
DoS: Crash, Exit, or Restart
DoS: Resource Consumption (CPU)
DoS: Resource Consumption (Memory)
CWE Version 4.14
CWE-409: Improper Handling of Highly Compressed Data (Data Amplification)
CWE-409: Improper Handling of Highly Compressed Data (Data Amplification)