Falhas do tipo CWE-120

3.246 resultados

Estouro de buffer clássico

A aplicação copia dados em um buffer sem validar o tamanho, permitindo que um atacante sobrescreva memória adjacente. Isso pode corromper variáveis, desviar o fluxo de execução ou injetar código malicioso que será executado com os mesmos privilégios da aplicação.

Exemplo

Um formulário web aceita um nome de usuário e o copia direto em um array de 32 bytes sem checar comprimento. Um atacante envia 200 bytes; o excesso sobrescreve o endereço de retorno da função, desviando a execução para código dele. Comum em CGI antigos, serviços network e binários C/C++ mal escritos.

Como mitigar

Use funções seguras (strncpy, strlcpy em vez de strcpy; snprintf em vez de sprintf) que respeitam limites. Sempre valide e sanitize entrada externa antes de copiar. Em C moderno, considere AddressSanitizer ou ferramentas estáticas para detectar cópias inseguras em tempo de compilação.

CVE-2023-22780CRITICALUnauthenticated Buffer Overflow Vulnerabilities in Services Accessed by the PAPI ProtocolEPSS 2.1%CVE-2023-22783CRITICALUnauthenticated Buffer Overflow Vulnerabilities in Services Accessed by the PAPI ProtocolEPSS 2.1%CVE-2023-22784CRITICALUnauthenticated Buffer Overflow Vulnerabilities in Services Accessed by the PAPI ProtocolEPSS 2.1%CVE-2023-22785CRITICALUnauthenticated Buffer Overflow Vulnerabilities in Services Accessed by the PAPI ProtocolEPSS 2.1%CVE-2022-31031CRITICALPotential stack buffer overflow when parsing message as a STUN clientEPSS 2.1%CVE-2023-22782CRITICALUnauthenticated Buffer Overflow Vulnerabilities in Services Accessed by the PAPI ProtocolEPSS 2.1%CVE-2022-39274HIGHBuffer Overflow in `ProcessRadioRxDone` in LoRaMac-nodeEPSS 2.0%CVE-2026-25994HIGHPJSIP has a heap buffer overflow in ICE with long usernameEPSS 2.0%CVE-2025-4462HIGHTOTOLINK N150RT formWsc buffer overflowEPSS 2.0%CVE-2024-9565HIGHD-Link DIR-605L formSetPassword buffer overflowEPSS 2.0%CVE-2022-20827CRITICALCisco Small Business RV Series Routers VulnerabilitiesEPSS 2.0%CVE-2024-9564HIGHD-Link DIR-605L formWlanWizardSetup buffer overflowEPSS 1.9%CVE-2021-28176MEDIUMASUS BMC's firmware: buffer overflow - DNS configuration functionEPSS 1.9%CVE-2021-28175MEDIUMASUS BMC's firmware: buffer overflow - Radius configuration functionEPSS 1.9%CVE-2024-39358CRITICALA buffer overflow vulnerability exists in the adm.cgi set_wzap() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTEPSS 1.9%CVE-2024-39756CRITICALA buffer overflow vulnerability exists in the adm.cgi rep_as_router() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafteEPSS 1.9%CVE-2022-20842CRITICALCisco Small Business RV Series Routers VulnerabilitiesEPSS 1.9%CVE-2020-2015HIGHPAN-OS: Buffer overflow in the management serverEPSS 1.9%CVE-2020-7559—A CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability exists in PLC Simulator on EcoStruxureª ContEPSS 1.9%CVE-2020-10042—A vulnerability has been identified in SICAM MMU (All versions < V2.05), SICAM SGU (All versions), SICAM T (All versions < V2.18). A buffer EPSS 1.9%