Weaknesses of type CWE-121

3,823 results

Estouro de buffer na pilha

Ocorre quando um programa escreve mais dados em um buffer alocado na pilha do que ele pode conter, sobrescrevendo dados adjacentes (variáveis, endereços de retorno, ponteiros). Um atacante pode explorar isso para executar código arbitrário ou causar travamento.

Example

Um programa lê uma string do usuário com gets() ou strcpy() sem validar o tamanho, copiando 500 bytes para um buffer de 64 bytes. O excesso sobrescreve o endereço de retorno da função, permitindo desviar a execução para código malicioso.

How to mitigate

Use funções seguras (strncpy, fgets, snprintf) que aceitam limite de bytes; implemente verificações de limites explícitas no código; ative proteções do compilador/SO (stack canaries, DEP/NX, ASLR); use linguagens com verificação automática de limites ou ferramentas de análise estática.

CVE-2021-1307HIGHCisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesEPSS 2.2%CVE-2021-1322HIGHCisco Small Business RV Series Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesEPSS 2.2%CVE-2021-1172HIGHCisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesEPSS 2.2%CVE-2021-1175HIGHCisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesEPSS 2.2%CVE-2021-1183HIGHCisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesEPSS 2.2%CVE-2019-5618—A-PDF WAV to MP3 Stack-based Buffer OverflowEPSS 2.2%CVE-2019-5621—ABBS Software Audio Media Player Stack-based Buffer OverflowEPSS 2.2%CVE-2022-1405HIGHDelta Electronics CNCSoft Stack-based Buffer OverflowEPSS 2.2%CVE-2020-12019—WebAccess Node Version 8.4.4 and prior is vulnerable to a stack-based buffer overflow, which may allow an attacker to remotely execute arbitEPSS 2.2%CVE-2020-25856—The function DecWPA2KeyData() in the Realtek RTL8195A Wi-Fi Module prior to versions released in April 2020 (up to and excluding 2.08) does EPSS 2.2%CVE-2018-5452—A Stack-based Buffer Overflow issue was discovered in Emerson Process Management ControlWave Micro Process Automation Controller: ControlWavEPSS 2.2%CVE-2021-22637—Multiple stack-based buffer overflow issues have been identified in the way the application processes project files, allowing an attacker toEPSS 2.1%CVE-2020-2027HIGHPAN-OS: Buffer overflow in authd authentication responseEPSS 2.1%CVE-2020-1990HIGHPAN-OS: Buffer overflow in the management serverEPSS 2.1%CVE-2021-25669—A vulnerability has been identified in SCALANCE X200-4P IRT (All versions < 5.5.1), SCALANCE X201-3P IRT (All versions < 5.5.1), SCALANCE X2EPSS 2.1%CVE-2019-13556—In WebAccess versions 8.4.1 and prior, multiple stack-based buffer overflow vulnerabilities are caused by a lack of proper validation of theEPSS 2.1%CVE-2020-10607—In Advantech WebAccess, Versions 8.4.2 and prior. A stack-based buffer overflow vulnerability caused by a lack of proper validation of the lEPSS 2.1%CVE-2023-33308CRITICALA stack-based overflow vulnerability [CWE-124] in Fortinet FortiOS version 7.0.0 through 7.0.10 and 7.2.0 through 7.2.3 and FortiProxy versiEPSS 2.1%CVE-2022-26419HIGHRockwell Automation Studio 5000 Logix Designer Code InjectionEPSS 2.1%CVE-2020-12498HIGHPhoenix Contact Automation Worx <= 1.87: out-of-bounds read remote code executionEPSS 2.1%