Extended Description
Make sensitive open/close operation non reachable by directly user-controlled data (e.g. open/close resources)
Strategy: Input Validation Perform input validation on user data.
No detection method information available for this CWE.
No examples or observed CVEs available for this CWE.
CWE-617: CWE-617: Reachable Assertion is a Common Weakness Enumeration (CWE) entry maintained by MITRE. Description Extended Description
If exploited, CWE-617 (CWE-617: Reachable Assertion) it can compromise DoS: Crash, Exit and or Restart, leading to outcomes such as Scope: Availability An attacker that can trigger an assert statement can still lead to a denial of service if the relevant code can be triggered by an attacker and and if the scope of the assert() extends beyond the attacker's own session..
Recommended mitigations for CWE-617 include: Make sensitive open/close operation non reachable by directly user-controlled data (e.g. open/close resources) Strategy: Input Validation Perform input validation on user data.
CWE-617 commonly affects Languages. Note that weaknesses are often language-agnostic patterns, so secure coding practices apply broadly.
A CWE (Common Weakness Enumeration) like CWE-617 describes a category of software weakness — the underlying flaw type. A CVE (Common Vulnerabilities and Exposures) identifies a specific, real-world vulnerability in a particular product. In short, a CWE is the kind of mistake, and a CVE is an instance of that mistake being found in software.