2234
[REF-1163]Adar Weidman. "Regular expression Denial of Service - ReDoS". < https://owasp.org/
www-community/attacks/Regular_expression_Denial_of_Service_-_ReDoS >.
[REF-1164]Ilya Kantor. "Catastrophic backtracking". 2020 December 3. < https://javascript.info/
regexp-catastrophic-backtracking >.
[REF-1165]Cristian-Alexandru Staicu and Michael Pradel. "Freezing the Web: A Study of ReDoS
Vulnerabilities in JavaScript-based Web Servers". USENIX Security Symposium. 2018 July 1. <
https://www.usenix.org/system/files/conference/usenixsecurity18/sec18-staicu.pdf >.
[REF-1166]James C. Davis, Christy A. Coghlan, Francisco Servant and Dongyoon Lee.
"The Impact of Regular Expression Denial of Service (ReDoS) in Practice: An Empirical
Study at the Ecosystem Scale". 2018 August 1. < https://fservant.github.io/papers/
Davis_Coghlan_Servant_Lee_ESECFSE18.pdf >.2023-04-07.
[REF-1167]James Davis. "The Regular Expression Denial of Service (ReDoS) cheat-sheet". 2020
May 3. < https://levelup.gitconnected.com/the-regular-expression-denial-of-service-redos-cheatsheet-
a78d0ed7d865 >.
CWE-1334: Unauthorized Error Injection Can Degrade Hardware Redundancy
Weakness ID : 1334
Structure : Simple
Abstraction : Base
Description
An unauthorized agent can inject errors into a redundant block to deprive the system of redundancy
or put the system in a degraded operating mode.
Extended Description
To ensure the performance and functional reliability of certain components, hardware designers
can implement hardware blocks for redundancy in the case that others fail. This redundant
block can be prevented from performing as intended if the design allows unauthorized agents to
inject errors into it. In this way, a path with injected errors may become unavailable to serve as a
redundant channel. This may put the system into a degraded mode of operation which could be
exploited by a subsequent attack.
Relationships
The table(s) below shows the weaknesses and high level categories that are related to this
weakness. These relationships are defined as ChildOf, ParentOf, MemberOr and give insight to
similar items that may exist at higher and lower levels of abstraction. In addition, relationships such
as PeerOf and CanAlsoBe are defined to show similar weaknesses that may want to be explored.
Relevant to the view "Research Concepts" (CWE-1000)
Nature Type ID Name Page
ChildOf 284 Improper Access Control 680
Applicable Platforms
Language : Not Language-Specific (Prevalence = Undetermined)
Operating_System : Not OS-Specific (Prevalence = Undetermined)
Architecture : Not Architecture-Specific (Prevalence = Undetermined)
Technology : Not Technology-Specific (Prevalence = Undetermined)
Common Consequences
CWE Version 4.14
CWE-1335: Incorrect Bitwise Shift of Integer
CWE-1335: Incorrect Bitwise Shift of Integer