Fallos del tipo CWE-121

3823 resultados

Estouro de buffer na pilha

Ocorre quando código escreve dados além dos limites de um buffer alocado na pilha (stack), sobrescrevendo informações críticas como endereços de retorno ou variáveis locais. Um atacante pode explorar isso para executar código arbitrário ou causar crash da aplicação.

Ejemplo

Uma função copia uma string de entrada diretamente em um array de 64 bytes sem validar o tamanho: `char buffer[64]; strcpy(buffer, user_input);` Se o usuário enviar uma string com 200 bytes, ela sobrescreverá o endereço de retorno e pode redirecionar a execução para código malicioso.

Cómo mitigar

Use funções seguras com limite de tamanho (`strncpy`, `snprintf`), valide e sanitize entradas antes de copiar, implemente proteções em tempo de execução (stack canaries, ASLR, DEP) e considere usar linguagens com verificação de limites automática quando possível.

CVE-2021-1172HIGHCisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesEPSS 2.2%CVE-2021-1197HIGHCisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesEPSS 2.2%CVE-2021-1307HIGHCisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesEPSS 2.2%CVE-2021-1322HIGHCisco Small Business RV Series Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesEPSS 2.2%CVE-2021-1175HIGHCisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesEPSS 2.2%CVE-2019-5618—A-PDF WAV to MP3 Stack-based Buffer OverflowEPSS 2.2%CVE-2019-5621—ABBS Software Audio Media Player Stack-based Buffer OverflowEPSS 2.2%CVE-2022-1405HIGHDelta Electronics CNCSoft Stack-based Buffer OverflowEPSS 2.2%CVE-2020-12019—WebAccess Node Version 8.4.4 and prior is vulnerable to a stack-based buffer overflow, which may allow an attacker to remotely execute arbitEPSS 2.2%CVE-2020-25856—The function DecWPA2KeyData() in the Realtek RTL8195A Wi-Fi Module prior to versions released in April 2020 (up to and excluding 2.08) does EPSS 2.2%CVE-2018-5452—A Stack-based Buffer Overflow issue was discovered in Emerson Process Management ControlWave Micro Process Automation Controller: ControlWavEPSS 2.2%CVE-2021-22637—Multiple stack-based buffer overflow issues have been identified in the way the application processes project files, allowing an attacker toEPSS 2.1%CVE-2020-2027HIGHPAN-OS: Buffer overflow in authd authentication responseEPSS 2.1%CVE-2020-1990HIGHPAN-OS: Buffer overflow in the management serverEPSS 2.1%CVE-2021-25669—A vulnerability has been identified in SCALANCE X200-4P IRT (All versions < 5.5.1), SCALANCE X201-3P IRT (All versions < 5.5.1), SCALANCE X2EPSS 2.1%CVE-2019-13556—In WebAccess versions 8.4.1 and prior, multiple stack-based buffer overflow vulnerabilities are caused by a lack of proper validation of theEPSS 2.1%CVE-2020-10607—In Advantech WebAccess, Versions 8.4.2 and prior. A stack-based buffer overflow vulnerability caused by a lack of proper validation of the lEPSS 2.1%CVE-2023-33308CRITICALA stack-based overflow vulnerability [CWE-124] in Fortinet FortiOS version 7.0.0 through 7.0.10 and 7.2.0 through 7.2.3 and FortiProxy versiEPSS 2.1%CVE-2022-26419HIGHRockwell Automation Studio 5000 Logix Designer Code InjectionEPSS 2.1%CVE-2020-12498HIGHPhoenix Contact Automation Worx <= 1.87: out-of-bounds read remote code executionEPSS 2.1%