blocks|key|948302|text|bug是指系统的行为不符合其设计的行为。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|948303|漏洞是滥用系统的一种方式(最常见的是与安全相关的方式)--无论是由于设计错误还是实现错误。换句话说，即使设计的实现是完美的，但由于有缺陷的设计，某些东西也可能存在漏洞。|948304|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|F|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|G|8|@]|9|@]|A|$]]|$1|D|3|-4|5|6|7|H|8|@]|9|@]|A|$]]]|E|$]]

A bug is when a system isn't behaving as it's designed to behave.

A vulnerability is a way of abusing the system (most commonly in a security-related way) - whether that's due to a design fault or an implementation fault. In other words, something can have a vulnerability due to a defective design, even if the implementation of that design is perfect.

blocks|key|948339|text|Vulnerability是bug的子集。|type|unstyled|depth|inlineStyleRanges|offset|length|style|BOLD|entityRanges|data|948340|bug是产品中的任何缺陷。|948341|漏洞是表现为恶意使用产品的机会的错误。漏洞通常不是那么明显，但需要巧妙地加以利用。|948342|entityMap^0|0|D|E|3|0|0|0^^$0|@$1|2|3|4|5|6|7|L|8|@$9|M|A|N|B|C]|$9|O|A|P|B|C]]|D|@]|E|$]]|$1|F|3|G|5|6|7|Q|8|@]|D|@]|E|$]]|$1|H|3|I|5|6|7|R|8|@]|D|@]|E|$]]|$1|J|3|-4|5|6|7|S|8|@]|D|@]|E|$]]]|K|$]]

Vulnerability is a subset of bug.

A bug is any defect in a product. 

A vulnerability is bug that manifests as an opportunity for malicious use of the product. Vulnerabilities generally are not that clearly evident, but require ingenuity to be exploited.

blocks|key|948289|text|这两者有时会重叠，但我要说的是，"bug“是一个错误，而”漏洞“，顾名思义，是一个弱点。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|948290|entityMap^0|0^^$0|@$1|2|3|4|5|6|7|D|8|@]|9|@]|A|$]]|$1|B|3|-4|5|6|7|E|8|@]|9|@]|A|$]]]|C|$]]

The two can sometimes overlap, but I'd say a "bug" is a mistake, while a "vulnerability" is, like the name suggests, a weakness.

blocks|key|948280|text|从编程的角度来看，我认为bug和漏洞没有区别。它们都是软件中的错误。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|948281|然而，从安全的角度来看，漏洞是一类可以被恶意的人以某种方式操纵的bug。|948282|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|F|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|G|8|@]|9|@]|A|$]]|$1|D|3|-4|5|6|7|H|8|@]|9|@]|A|$]]]|E|$]]

From a programming perspective, I believe there is no difference between a bug and a vulnerability. They are both mistakes in the software.

However, from a security perspective, a vulnerability is a class of bugs that can be manipulated in some fashion by a malicious person.

blocks|key|948369|text|bug是系统无法满足要求的故障。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|948370|漏洞是bug的一个子集-当您的系统可能被强制进入不符合要求的故障模式时，通常是通过(Ab)以意想不到的方式使用您的系统(或您的系统所依赖的东西)。|948371|通常，漏洞可能导致无法满足以下一个或多个方面的要求：|948372|948373|confidentiality+|unordered-list-item|948374|integrity|948375|availability|948376|948377|或者你可以把最后两个结合起来：|948378|948379|confidentiality|948380|reliability+(=完整性%2B+availability)|948381|948382|entityMap^0|0|0|0|0|0|0|0|0|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|Y|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|Z|8|@]|9|@]|A|$]]|$1|D|3|E|5|6|7|10|8|@]|9|@]|A|$]]|$1|F|3|-4|5|6|7|11|8|@]|9|@]|A|$]]|$1|G|3|H|5|I|7|12|8|@]|9|@]|A|$]]|$1|J|3|K|5|I|7|13|8|@]|9|@]|A|$]]|$1|L|3|M|5|I|7|14|8|@]|9|@]|A|$]]|$1|N|3|-4|5|6|7|15|8|@]|9|@]|A|$]]|$1|O|3|P|5|6|7|16|8|@]|9|@]|A|$]]|$1|Q|3|-4|5|6|7|17|8|@]|9|@]|A|$]]|$1|R|3|S|5|I|7|18|8|@]|9|@]|A|$]]|$1|T|3|U|5|I|7|19|8|@]|9|@]|A|$]]|$1|V|3|-4|5|6|7|1A|8|@]|9|@]|A|$]]|$1|W|3|-4|5|6|7|1B|8|@]|9|@]|A|$]]]|X|$]]

A bug is a failure of your system to meet requirements.

Vulnerability is a subset of bug - it is when your system can be forced into a failure mode that does not meet requirements, usually by (ab)using your system (or something your system relies on) in an unexpected way.

Usually a vulnerability may result in failure to meet a requirement in one or more of these areas:

<ul>
<li>confidentiality </li>
<li>integrity</li>
<li>availability</li>
</ul>

or you can combine the last two:

<ul>
<li>confidentiality</li>
<li>reliability (= integrity + availability)</li>
</ul>

blocks|key|948320|text|在我看来，漏洞是bug的一个子集，它使某人能够对您的软件执行恶意或有害的操作。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|948321|Bug只是不能正常工作的代码(如何正确定义取决于意见)。|948322|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|F|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|G|8|@]|9|@]|A|$]]|$1|D|3|-4|5|6|7|H|8|@]|9|@]|A|$]]]|E|$]]

In my eyes vulnerabilities are a subset of bugs that enable someone to perform a malicious or harmful operation with your software.

Bugs are just code that does not work properly (how you define properly is subject to opinion).

blocks|key|948421|text|Wikipedia：|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|948422|948423|在计算机安全中，术语漏洞是指系统中允许攻击者破坏该系统完整性的弱点|blockquote|948424|948425|948426|例如，家用计算机容易受到洪水和手榴弹等物理威胁，但它们不被视为"bug“。在企业环境中，如果系统关闭的风险足够大，这些威胁就会被更严重地对待，可能是为了空中交通支持或核反应堆管理。|948427|Business+continuity+planning/disaster+recovery和high+availability通常通过冗余硬件和将服务器分布到远程位置来处理物理威胁和故障。|948428|software+defect+(或"bug")的分类可能是主观的，因为它取决于软件设计和需求的意图。一组给定受众的特征如果被滥用，可能会被解释为对另一组的脆弱性。例如，stackoverflow.com+now+discloses+self-closed+questions+to+those+with+10k+reps。有些人可能会说这是一个漏洞，因为它违反了普通用户的共同期望(就像我说的，这是一个主观判断)。|948429|entityMap|0|LINK|mutability|MUTABLE|url|http://en.wikipedia.org/wiki/Vulnerability_%2528computing%2529|1|http://en.wikipedia.org/wiki/Business_continuity_planning|2|http://en.wikipedia.org/wiki/Disaster_recovery|3|http://en.wikipedia.org/wiki/High_availability|4|http://en.wikipedia.org/wiki/Software_bugs|5|https://stackoverflow.com/questions/401140/stackoverflow-how-do-you-feel-about-others-seeing-posts-youve-deleted^0|0|9|0|0|0|0|0|0|0|0|S|1|T|H|2|1B|H|3|0|0|F|4|2D|24|5|0^^$0|@$1|2|3|4|5|6|7|17|8|@]|9|@$A|18|B|19|1|1A]]|C|$]]|$1|D|3|-4|5|6|7|1B|8|@]|9|@]|C|$]]|$1|E|3|F|5|G|7|1C|8|@]|9|@]|C|$]]|$1|H|3|-4|5|6|7|1D|8|@]|9|@]|C|$]]|$1|I|3|-4|5|6|7|1E|8|@]|9|@]|C|$]]|$1|J|3|K|5|6|7|1F|8|@]|9|@]|C|$]]|$1|L|3|M|5|6|7|1G|8|@]|9|@$A|1H|B|1I|1|1J]|$A|1K|B|1L|1|1M]|$A|1N|B|1O|1|1P]]|C|$]]|$1|N|3|O|5|6|7|1Q|8|@]|9|@$A|1R|B|1S|1|1T]|$A|1U|B|1V|1|1W]]|C|$]]|$1|P|3|-4|5|6|7|1X|8|@]|9|@]|C|$]]]|Q|$R|$5|S|T|U|C|$V|W]]|X|$5|S|T|U|C|$V|Y]]|Z|$5|S|T|U|C|$V|10]]|11|$5|S|T|U|C|$V|12]]|13|$5|S|T|U|C|$V|14]]|15|$5|S|T|U|C|$V|16]]]]

<a href="http://en.wikipedia.org/wiki/Vulnerability_%28computing%29" rel="nofollow noreferrer">Wikipedia</a>: 

<blockquote>
 In computer security, the term
 vulnerability is applied to a weakness
 in a system which allows an attacker
 to violate the integrity of that
 system
</blockquote>

For example, home computers are vulnerable to physical threats like flood and hand grenades, but they are not considered a "bug". In enterprise environment, these threats are treated with more seriousness if the risk of system shutting down is great enough, maybe for air traffic support or nuclear reactor management.

<a href="http://en.wikipedia.org/wiki/Business_continuity_planning" rel="nofollow noreferrer">Business continuity planning</a>/<a href="http://en.wikipedia.org/wiki/Disaster_recovery" rel="nofollow noreferrer">disaster recovery</a> and <a href="http://en.wikipedia.org/wiki/High_availability" rel="nofollow noreferrer">high availability</a> usually deals with physical threats and failures by redundant hardware and distributing servers to remote locations.

Classification of <a href="http://en.wikipedia.org/wiki/Software_bugs" rel="nofollow noreferrer">software defect</a> (or "bug") can be subjective, since it depends on the intent of the software design and requirements. A feature for a given set of audience may be interpreted as a vulnerability to the other if abused. For example, <a href="https://stackoverflow.com/questions/401140/stackoverflow-how-do-you-feel-about-others-seeing-posts-youve-deleted">stackoverflow.com now discloses self-closed questions to those with 10k reps</a>. Some may say it is a vulnerability since it violates common expectation of ordinary users (Like I said, it's a subjective call).

blocks|key|4226105|text|bug是指软件不能满足需求。我认为这些是理想的需求，所以说需求分析中有一个bug是有道理的，尽管这更有争议。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|4226106|漏洞是一种可被恶意利用的功能，无论是有意还是无意的。它不一定是一个bug，只要它是故意的。|4226107|为了改变话题，我的家庭无线有一个可以猜测的WPA密码，这是一个漏洞，但这是一个有意识的选择，以方便我的客人使用。这是导致漏洞的需求的一个例子。如果我输入了一个较弱的密码，因为我不知道更好，那将是一个bug，也是一个漏洞。|4226108|entityMap^0|0|0|0^^$0|@$1|2|3|4|5|6|7|H|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|I|8|@]|9|@]|A|$]]|$1|D|3|E|5|6|7|J|8|@]|9|@]|A|$]]|$1|F|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|G|$]]

A bug is the failure of software to meet requirements. I would consider these to be the ideal requirements, so it would make sense to say that there's a bug in the requirements analysis, although that's more debatable.

A vulnerability is a feature, intended or otherwise, that can be exploited maliciously. It is not necessarily a bug, provided that it was deliberate. 

To change subjects, it is a vulnerability that my home wireless has a guessable WPA password, but that was a conscious choice, to facilitate use by my guests. That's an example of requirements leading to a vulnerability. If I'd entered a weak password because I didn't know better, that would have been a bug as well as a vulnerability.

blocks|key|943533|text|如果你使用Bugzilla，你需要做的任何事情都是一个bug+;)|type|unstyled|depth|inlineStyleRanges|entityRanges|data|943534|entityMap^0|0^^$0|@$1|2|3|4|5|6|7|D|8|@]|9|@]|A|$]]|$1|B|3|-4|5|6|7|E|8|@]|9|@]|A|$]]]|C|$]]

If you use Bugzilla, anything you need to do something with is a bug ;)

What, if any, is the difference between a software bug and a software vulnerability?

Bugs versus vulnerabilities?

翻译质量差，导致语言生硬或混乱。

没有提供实际的解决方法或示例。

解答不清晰，无法理解或解决问题。

页面排版不美观，阅读体验差。

文章

问答

视频

学习中心

腾讯云实验室

直播

竞赛

腾讯云代码分析专区

腾讯iOA零信任安全管理系统专区

腾讯云架构师技术同盟交流圈

腾讯云数据库专区

腾讯云顾问专区

腾讯云原生专区

腾讯混元专区

腾讯云TCE专区

腾讯云Lighthouse专区

腾讯云HAI专区

腾讯云Edgeone专区

腾讯云存储专区

腾讯云智能专区

腾讯轻联专区 

腾讯云开发专区

TAPD专区

腾讯轻量云游戏服专区

腾讯云最具价值专家

腾讯云架构师技术同盟

腾讯云创作之星

腾讯云开发者先锋

腾讯云代码助手

云原生构建

TAPD 敏捷项目管理

Cloud Studio

SDK中心

API中心

命令行工具

涵盖代码开发、场景应用、自动测试全流程，助你从零构建专属AI助手

一站式MCP教程库，解锁AI应用新玩法

软件错误和软件漏洞之间的区别是什么？

问漏洞还是漏洞？
EN

回答 9

Stack Overflow用户

Stack Overflow用户

Stack Overflow用户

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问漏洞还是漏洞？EN

回答 9

Stack Overflow用户

Stack Overflow用户

Stack Overflow用户

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问漏洞还是漏洞？
EN