Weaknesses of type CWE-120

3,246 results

Estouro de buffer clássico

A aplicação copia dados para um buffer sem validar o tamanho, permitindo que um atacante sobrescreva memória adjacente, incluindo endereços de retorno ou ponteiros de função. Isso resulta na execução de código arbitrário com os privilégios da aplicação.

Example

Um programa lê uma entrada do usuário com gets() ou strcpy() sem limitar quantos bytes podem ser copiados. Um atacante fornece uma entrada maior que o buffer, sobrescrevendo a pilha e injetando código malicioso que será executado quando a função retornar.

How to mitigate

Use funções seguras que validam limites (strncpy, snprintf, fgets) e compile com proteções de pilha ativadas (-fstack-protector-all no GCC). Além disso, implemente validação de entrada no tamanho esperado e considere linguagens com gerenciamento automático de memória para novos projetos.

CVE-2021-28201MEDIUMASUS BMC's firmware: buffer overflow - Service configuration-1 functionEPSS 1.9%CVE-2021-28185MEDIUMASUS BMC's firmware: buffer overflow - ActiveX configuration-1 acquisitionEPSS 1.9%CVE-2021-28199MEDIUMASUS BMC's firmware: buffer overflow - Modify user’s information functionEPSS 1.9%CVE-2021-28194MEDIUMASUS BMC's firmware: buffer overflow - Remote image configuration settingEPSS 1.9%CVE-2021-28195MEDIUMASUS BMC's firmware: buffer overflow - Radius configuration functionEPSS 1.9%CVE-2021-28182MEDIUMASUS BMC's firmware: buffer overflow - Web Service configuration functionEPSS 1.9%CVE-2021-28188MEDIUMASUS BMC's firmware: buffer overflow - Modify user’s information functionEPSS 1.9%CVE-2021-28202MEDIUMASUS BMC's firmware: buffer overflow - Service configuration-2 functionEPSS 1.9%CVE-2026-7068HIGHD-Link DIR-825 nmbd sserver.c NMBD_process buffer overflowEPSS 1.9%CVE-2023-49287HIGHBuffer overflow vulnerabilities in tinydirEPSS 1.9%CVE-2021-20236—A flaw was found in the ZeroMQ server in versions before 4.3.3. This flaw allows a malicious client to cause a stack buffer overflow on the EPSS 1.9%CVE-2023-6906CRITICALTotolink A7100RU HTTP POST Request main buffer overflowEPSS 1.8%CVE-2018-10637—A maliciously crafted project file may cause a buffer overflow, which may allow the attacker to execute arbitrary code that affects Fuji EleEPSS 1.8%CVE-2021-0249HIGHJunos OS: SRX Series: A remote attacker may be able to cause a PFE buffer overflow to arbitrarily remotely execute code or commands on the target device with UTM enabled.EPSS 1.8%CVE-2024-3120CRITICALStack-Buffer Overflow in 'Content-Length' and 'Warning' Header Processing in sngrepEPSS 1.8%CVE-2024-7831HIGHD-Link DNS-1550-04 photocenter_mgr.cgi cgi_get_cooliris buffer overflowEPSS 1.8%CVE-2024-7829HIGHD-Link DNS-1550-04 photocenter_mgr.cgi cgi_del_photo buffer overflowEPSS 1.8%CVE-2024-7830HIGHD-Link DNS-1550-04 photocenter_mgr.cgi cgi_move_photo buffer overflowEPSS 1.8%CVE-2022-41012HIGHSeveral stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210EPSS 1.8%CVE-2024-9915HIGHD-Link DIR-619L B1 formVirtualServ buffer overflowEPSS 1.8%