1643
Low
Common Consequences
Scope Impact Likelihood
Availability DoS: Resource Consumption (CPU)
DoS: Resource Consumption (Other)
Log files can become so large that they consume
excessive resources, such as disk and CPU, which can
hinder the performance of the system.
Non-Repudiation Hide Activities
Logging too much information can make the log files of
less use to forensics analysts and developers when trying
to diagnose a problem or recover from an attack.
Non-Repudiation Hide Activities
If system administrators are unable to effectively process
log files, attempted attacks may go undetected, possibly
leading to eventual system compromise.
Potential Mitigations
Phase: Architecture and Design
Suppress large numbers of duplicate log messages and replace them with periodic summaries.
For example, syslog may include an entry that states "last message repeated X times" when
recording repeated events.
Phase: Architecture and Design
Support a maximum size for the log file that can be controlled by the administrator. If the
maximum size is reached, the admin should be notified. Also, consider reducing functionality of
the product. This may result in a denial-of-service to legitimate product users, but it will prevent
the product from adversely impacting the entire system.
Phase: Implementation
Adjust configurations appropriately when the product is transitioned from a debug state to
production.
Observed Examples
Reference Description
CVE-2007-0421 server records a large amount of data to the server log when it receives
malformed headers
https://www.cve.org/CVERecord?id=CVE-2007-0421
CVE-2002-1154 chain: application does not restrict access to front-end for updates, which
allows attacker to fill the error log
https://www.cve.org/CVERecord?id=CVE-2002-1154
MemberOf Relationships
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 1416 Comprehensive Categorization: Resource Lifecycle
Management
1400 2545
Taxonomy Mappings
Mapped Taxonomy Name Node ID Fit Mapped Node Name
ISA/IEC 62443 Part 3-3 Req SR 7.2
CWE Version 4.14
CWE-780: Use of RSA Algorithm without OAEP
CWE-780: Use of RSA Algorithm without OAEP