Fallos del tipo CWE-121

3823 resultados

Estouro de buffer na pilha

Ocorre quando código escreve dados além dos limites de um buffer alocado na pilha (stack), sobrescrevendo informações críticas como endereços de retorno ou variáveis locais. Um atacante pode explorar isso para executar código arbitrário ou causar crash da aplicação.

Ejemplo

Uma função copia uma string de entrada diretamente em um array de 64 bytes sem validar o tamanho: `char buffer[64]; strcpy(buffer, user_input);` Se o usuário enviar uma string com 200 bytes, ela sobrescreverá o endereço de retorno e pode redirecionar a execução para código malicioso.

Cómo mitigar

Use funções seguras com limite de tamanho (`strncpy`, `snprintf`), valide e sanitize entradas antes de copiar, implemente proteções em tempo de execução (stack canaries, ASLR, DEP) e considere usar linguagens com verificação de limites automática quando possível.

CVE-2021-1181HIGHCisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesEPSS 2.2%CVE-2021-1176HIGHCisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesEPSS 2.2%CVE-2021-1360HIGHCisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesEPSS 2.2%CVE-2021-1209HIGHCisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesEPSS 2.2%CVE-2021-1202HIGHCisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesEPSS 2.2%CVE-2021-1187HIGHCisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesEPSS 2.2%CVE-2021-1320HIGHCisco Small Business RV Series Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesEPSS 2.2%CVE-2021-1213HIGHCisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesEPSS 2.2%CVE-2021-1307HIGHCisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesEPSS 2.2%CVE-2021-1205HIGHCisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesEPSS 2.2%CVE-2021-1180HIGHCisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesEPSS 2.2%CVE-2021-1189HIGHCisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesEPSS 2.2%CVE-2021-1216HIGHCisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesEPSS 2.2%CVE-2021-1345HIGHCisco Small Business RV Series Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesEPSS 2.2%CVE-2021-1190HIGHCisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesEPSS 2.2%CVE-2021-1198HIGHCisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesEPSS 2.2%CVE-2021-1161HIGHCisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesEPSS 2.2%CVE-2021-1321HIGHCisco Small Business RV Series Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesEPSS 2.2%CVE-2021-1204HIGHCisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesEPSS 2.2%CVE-2021-1169HIGHCisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesEPSS 2.2%