Weaknesses of type CWE-120

3,163 results

Estouro de buffer clássico

A aplicação copia dados para um buffer sem validar o tamanho, permitindo que um atacante sobrescreva memória adjacente, incluindo endereços de retorno ou ponteiros de função. Isso resulta na execução de código arbitrário com os privilégios da aplicação.

Example

Um programa lê uma entrada do usuário com gets() ou strcpy() sem limitar quantos bytes podem ser copiados. Um atacante fornece uma entrada maior que o buffer, sobrescrevendo a pilha e injetando código malicioso que será executado quando a função retornar.

How to mitigate

Use funções seguras que validam limites (strncpy, snprintf, fgets) e compile com proteções de pilha ativadas (-fstack-protector-all no GCC). Além disso, implemente validação de entrada no tamanho esperado e considere linguagens com gerenciamento automático de memória para novos projetos.

CVE-2022-41017HIGHSeveral stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210EPSS 1.8%CVE-2022-41018HIGHSeveral stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210EPSS 1.8%CVE-2024-7830HIGHD-Link DNS-1550-04 photocenter_mgr.cgi cgi_move_photo buffer overflowEPSS 1.8%CVE-2024-7829HIGHD-Link DNS-1550-04 photocenter_mgr.cgi cgi_del_photo buffer overflowEPSS 1.8%CVE-2024-7831HIGHD-Link DNS-1550-04 photocenter_mgr.cgi cgi_get_cooliris buffer overflowEPSS 1.8%CVE-2022-20842CRITICALCisco Small Business RV Series Routers VulnerabilitiesEPSS 1.8%CVE-2024-9915HIGHD-Link DIR-619L B1 formVirtualServ buffer overflowEPSS 1.8%CVE-2021-28178MEDIUMASUS BMC's firmware: buffer overflow - UEFI configuration functionEPSS 1.8%CVE-2021-28177MEDIUMASUS BMC's firmware: buffer overflow - LDAP configuration functionEPSS 1.8%CVE-2021-28180MEDIUMASUS BMC's firmware: buffer overflow - Audit log configuration settingEPSS 1.8%CVE-2021-28179MEDIUMASUS BMC's firmware: buffer overflow - Media support configuration settingEPSS 1.8%CVE-2021-28200MEDIUMASUS BMC's firmware: buffer overflow - CD media configuration functionEPSS 1.8%CVE-2021-28199MEDIUMASUS BMC's firmware: buffer overflow - Modify user’s information functionEPSS 1.8%CVE-2021-28193MEDIUMASUS BMC's firmware: buffer overflow - SMTP configuration functionEPSS 1.8%CVE-2021-28202MEDIUMASUS BMC's firmware: buffer overflow - Service configuration-2 functionEPSS 1.8%CVE-2021-28186MEDIUMASUS BMC's firmware: buffer overflow - ActiveX configuration-2 acquisitionEPSS 1.8%CVE-2021-28181MEDIUMASUS BMC's firmware: buffer overflow - Remote video configuration settingEPSS 1.8%CVE-2021-28183MEDIUMASUS BMC's firmware: buffer overflow - Web License configuration settingEPSS 1.8%CVE-2021-28185MEDIUMASUS BMC's firmware: buffer overflow - ActiveX configuration-1 acquisitionEPSS 1.8%CVE-2021-28201MEDIUMASUS BMC's firmware: buffer overflow - Service configuration-1 functionEPSS 1.8%