Weaknesses of type CWE-120

3,163 results

Estouro de buffer clássico

A aplicação copia dados para um buffer sem validar o tamanho, permitindo que um atacante sobrescreva memória adjacente, incluindo endereços de retorno ou ponteiros de função. Isso resulta na execução de código arbitrário com os privilégios da aplicação.

Example

Um programa lê uma entrada do usuário com gets() ou strcpy() sem limitar quantos bytes podem ser copiados. Um atacante fornece uma entrada maior que o buffer, sobrescrevendo a pilha e injetando código malicioso que será executado quando a função retornar.

How to mitigate

Use funções seguras que validam limites (strncpy, snprintf, fgets) e compile com proteções de pilha ativadas (-fstack-protector-all no GCC). Além disso, implemente validação de entrada no tamanho esperado e considere linguagens com gerenciamento automático de memória para novos projetos.

CVE-2021-28188MEDIUMASUS BMC's firmware: buffer overflow - Modify user’s information functionEPSS 1.8%CVE-2021-28192MEDIUMASUS BMC's firmware: buffer overflow - Remote video storage functionEPSS 1.8%CVE-2021-28184MEDIUMASUS BMC's firmware: buffer overflow - Active Directory configuration functionEPSS 1.8%CVE-2021-28201MEDIUMASUS BMC's firmware: buffer overflow - Service configuration-1 functionEPSS 1.8%CVE-2021-28198MEDIUMASUS BMC's firmware: buffer overflow - Firmware protocol configurationEPSS 1.8%CVE-2021-28182MEDIUMASUS BMC's firmware: buffer overflow - Web Service configuration functionEPSS 1.8%CVE-2021-28191MEDIUMASUS BMC's firmware: buffer overflow - Firmware update functionEPSS 1.8%CVE-2021-28178MEDIUMASUS BMC's firmware: buffer overflow - UEFI configuration functionEPSS 1.8%CVE-2021-28199MEDIUMASUS BMC's firmware: buffer overflow - Modify user’s information functionEPSS 1.8%CVE-2021-28194MEDIUMASUS BMC's firmware: buffer overflow - Remote image configuration settingEPSS 1.8%CVE-2024-9566HIGHD-Link DIR-619L B1 formDeviceReboot buffer overflowEPSS 1.8%CVE-2024-3119CRITICALStack-Buffer Overflow in 'Call-ID' and 'X-Call-ID' SIP Header Processing in sngrepEPSS 1.8%CVE-2023-27934HIGHA memory initialization issue was addressed. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4. A remote attacker may be ableEPSS 1.8%CVE-2020-3931CRITICALGeoVision Door Access Control Device - Buffer overflow vulnerabilityEPSS 1.8%CVE-2024-11960HIGHD-Link DIR-605L formSetPortTr buffer overflowEPSS 1.8%CVE-2024-11959HIGHD-Link DIR-605L formResetStatistic buffer overflowEPSS 1.8%CVE-2020-5133—A vulnerability in SonicOS allows a remote unauthenticated attacker to cause Denial of Service due to buffer overflow, which leads to a fireEPSS 1.8%CVE-2020-5137—A buffer overflow vulnerability in SonicOS allows a remote unauthenticated attacker to cause Denial of Service (DoS) on the firewall SSLVPN EPSS 1.8%CVE-2023-7208HIGHTotolink X2000R_V2 boa formTmultiAP buffer overflowEPSS 1.7%CVE-2022-38573CRITICAL10-Strike Network Inventory Explorer v9.3 was discovered to contain a buffer overflow via the Add Computers function.EPSS 1.7%