Fallos del tipo CWE-121

3823 resultados

Estouro de buffer na pilha

Ocorre quando código escreve dados além dos limites de um buffer alocado na pilha (stack), sobrescrevendo informações críticas como endereços de retorno ou variáveis locais. Um atacante pode explorar isso para executar código arbitrário ou causar crash da aplicação.

Ejemplo

Uma função copia uma string de entrada diretamente em um array de 64 bytes sem validar o tamanho: `char buffer[64]; strcpy(buffer, user_input);` Se o usuário enviar uma string com 200 bytes, ela sobrescreverá o endereço de retorno e pode redirecionar a execução para código malicioso.

Cómo mitigar

Use funções seguras com limite de tamanho (`strncpy`, `snprintf`), valide e sanitize entradas antes de copiar, implemente proteções em tempo de execução (stack canaries, ASLR, DEP) e considere usar linguagens com verificação de limites automática quando possível.

CVE-2017-6025—A Stack Buffer Overflow issue was discovered in 3S-Smart Software Solutions GmbH CODESYS Web Server. The following versions of CODESYS Web SEPSS 2.0%CVE-2021-32040MEDIUMLarge aggregation pipelines with a specific stage can crash mongod under default configurationEPSS 2.0%CVE-2021-46643HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction EPSS 2.0%CVE-2020-28599HIGHA stack-based buffer overflow vulnerability exists in the import_stl.cc:import_stl() functionality of Openscad openscad-2020.12-RC2. A speciEPSS 2.0%CVE-2022-28750HIGHZoom On-Premise Deployments: Stack Buffer Overflow in Meeting ConnectorEPSS 2.0%CVE-2021-21821CRITICALA stack-based buffer overflow vulnerability exists in the PDF process_fontname functionality of Accusoft ImageGear 19.9. A specially craftedEPSS 2.0%CVE-2018-10602—WECON LeviStudio Versions 1.8.29 and 1.8.44 have multiple stack-based buffer overflow vulnerabilities that can be exploited when the applicaEPSS 1.9%CVE-2021-20046—A Stack-based buffer overflow in the SonicOS HTTP Content-Length response header allows a remote authenticated attacker to cause Denial of SEPSS 1.9%CVE-2021-20048—A Stack-based buffer overflow in the SonicOS SessionID HTTP response header allows a remote authenticated attacker to cause Denial of ServicEPSS 1.9%CVE-2021-34925HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction EPSS 1.9%CVE-2018-1125HIGHprocps-ng before version 3.3.15 is vulnerable to a stack buffer overflow in pgrep. This vulnerability is mitigated by FORTIFY, as it involveEPSS 1.9%CVE-2023-49913HIGHA stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling functionality of Tp-Link AC1350 Wireless MU-MIMO GiEPSS 1.9%CVE-2023-49906HIGHA stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling functionality of Tp-Link AC1350 Wireless MU-MIMO GiEPSS 1.9%CVE-2024-2809HIGHTenda AC15 SetFirewallCfg formSetFirewallCfg stack-based overflowEPSS 1.9%CVE-2024-45694CRITICALD-Link WiFi router - Stack-based Buffer OverflowEPSS 1.9%CVE-2024-3907HIGHTenda AC500 setcfm formSetCfm stack-based overflowEPSS 1.9%CVE-2022-38751MEDIUMDoS in SnakeYAMLEPSS 1.9%CVE-2019-6537—Multiple stack-based buffer overflow vulnerabilities in WECON LeviStudioU version 1.8.56 and prior may be exploited when parsing strings witEPSS 1.9%CVE-2026-32203HIGH.NET and Visual Studio Denial of Service VulnerabilityEPSS 1.9%CVE-2020-2006HIGHPAN-OS: Buffer overflow in management server payload parserEPSS 1.9%