Weaknesses of type CWE-120

3,246 results

Estouro de buffer clássico

A aplicação copia dados para um buffer sem validar o tamanho, permitindo que um atacante sobrescreva memória adjacente, incluindo endereços de retorno ou ponteiros de função. Isso resulta na execução de código arbitrário com os privilégios da aplicação.

Example

Um programa lê uma entrada do usuário com gets() ou strcpy() sem limitar quantos bytes podem ser copiados. Um atacante fornece uma entrada maior que o buffer, sobrescrevendo a pilha e injetando código malicioso que será executado quando a função retornar.

How to mitigate

Use funções seguras que validam limites (strncpy, snprintf, fgets) e compile com proteções de pilha ativadas (-fstack-protector-all no GCC). Além disso, implemente validação de entrada no tamanho esperado e considere linguagens com gerenciamento automático de memória para novos projetos.

CVE-2022-41003HIGHSeveral stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210EPSS 1.8%CVE-2024-9566HIGHD-Link DIR-619L B1 formDeviceReboot buffer overflowEPSS 1.8%CVE-2024-3119CRITICALStack-Buffer Overflow in 'Call-ID' and 'X-Call-ID' SIP Header Processing in sngrepEPSS 1.8%CVE-2021-22659HIGHRockwell Automation MicroLogix 1400 Version 21.6 and below may allow a remote unauthenticated attacker to send a specially crafted Modbus paEPSS 1.8%CVE-2022-41008HIGHSeveral stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210EPSS 1.8%CVE-2022-41024HIGHSeveral stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210EPSS 1.8%CVE-2022-41022HIGHSeveral stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210EPSS 1.8%CVE-2021-21903CRITICALA stack-based buffer overflow vulnerability exists in the CMA check_udp_crc function of Garrett Metal Detectors’ iC Module CMA Version 5.0. EPSS 1.8%CVE-2023-27934HIGHA memory initialization issue was addressed. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4. A remote attacker may be ableEPSS 1.8%CVE-2022-38573CRITICAL10-Strike Network Inventory Explorer v9.3 was discovered to contain a buffer overflow via the Add Computers function.EPSS 1.8%CVE-2019-11851CRITICALThe ACENet service in Sierra Wireless ALEOS before 4.4.9, 4.5.x through 4.9.x before 4.9.5, and 4.10.x through 4.13.x before 4.14.0 allows rEPSS 1.8%CVE-2020-3931CRITICALGeoVision Door Access Control Device - Buffer overflow vulnerabilityEPSS 1.8%CVE-2024-11959HIGHD-Link DIR-605L formResetStatistic buffer overflowEPSS 1.8%CVE-2024-11960HIGHD-Link DIR-605L formSetPortTr buffer overflowEPSS 1.8%CVE-2020-5133—A vulnerability in SonicOS allows a remote unauthenticated attacker to cause Denial of Service due to buffer overflow, which leads to a fireEPSS 1.8%CVE-2020-5137—A buffer overflow vulnerability in SonicOS allows a remote unauthenticated attacker to cause Denial of Service (DoS) on the firewall SSLVPN EPSS 1.8%CVE-2023-7208HIGHTotolink X2000R_V2 boa formTmultiAP buffer overflowEPSS 1.7%CVE-2022-41015HIGHSeveral stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210EPSS 1.7%CVE-2022-41002HIGHSeveral stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210EPSS 1.7%CVE-2021-26621HIGHNetis Korea MEX01 Buffer overflow vulnerabilityEPSS 1.7%