Falhas do tipo CWE-121

3.823 resultados

Estouro de buffer na pilha

Ocorre quando código escreve mais dados em um buffer alocado na pilha do que sua capacidade permite, sobrescrevendo dados adjacentes (variáveis, endereços de retorno). Um atacante pode explorar isso para executar código arbitrário ou crashar a aplicação alterando o fluxo de execução.

Exemplo

Uma função C que copia uma string do usuário diretamente em um array local sem validar tamanho: `char buffer[10]; strcpy(buffer, user_input);`. Se user_input tiver 50 caracteres, os 40 extras sobrescrevem a pilha, incluindo potencialmente o endereço de retorno da função.

Como mitigar

Use funções seguras que limitam escrita (strncpy, snprintf em vez de strcpy/sprintf), valide tamanho de entrada antes de copiar, ative proteções do compilador (stack canaries, ASLR) e use ferramentas de análise estática para detectar cópias sem limite.

CVE-2021-1307HIGHCisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesEPSS 2.2%CVE-2021-1322HIGHCisco Small Business RV Series Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesEPSS 2.2%CVE-2021-1172HIGHCisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesEPSS 2.2%CVE-2021-1175HIGHCisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesEPSS 2.2%CVE-2021-1183HIGHCisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesEPSS 2.2%CVE-2019-5618—A-PDF WAV to MP3 Stack-based Buffer OverflowEPSS 2.2%CVE-2019-5621—ABBS Software Audio Media Player Stack-based Buffer OverflowEPSS 2.2%CVE-2022-1405HIGHDelta Electronics CNCSoft Stack-based Buffer OverflowEPSS 2.2%CVE-2020-12019—WebAccess Node Version 8.4.4 and prior is vulnerable to a stack-based buffer overflow, which may allow an attacker to remotely execute arbitEPSS 2.2%CVE-2020-25856—The function DecWPA2KeyData() in the Realtek RTL8195A Wi-Fi Module prior to versions released in April 2020 (up to and excluding 2.08) does EPSS 2.2%CVE-2018-5452—A Stack-based Buffer Overflow issue was discovered in Emerson Process Management ControlWave Micro Process Automation Controller: ControlWavEPSS 2.2%CVE-2021-22637—Multiple stack-based buffer overflow issues have been identified in the way the application processes project files, allowing an attacker toEPSS 2.1%CVE-2020-2027HIGHPAN-OS: Buffer overflow in authd authentication responseEPSS 2.1%CVE-2020-1990HIGHPAN-OS: Buffer overflow in the management serverEPSS 2.1%CVE-2021-25669—A vulnerability has been identified in SCALANCE X200-4P IRT (All versions < 5.5.1), SCALANCE X201-3P IRT (All versions < 5.5.1), SCALANCE X2EPSS 2.1%CVE-2019-13556—In WebAccess versions 8.4.1 and prior, multiple stack-based buffer overflow vulnerabilities are caused by a lack of proper validation of theEPSS 2.1%CVE-2020-10607—In Advantech WebAccess, Versions 8.4.2 and prior. A stack-based buffer overflow vulnerability caused by a lack of proper validation of the lEPSS 2.1%CVE-2023-33308CRITICALA stack-based overflow vulnerability [CWE-124] in Fortinet FortiOS version 7.0.0 through 7.0.10 and 7.2.0 through 7.2.3 and FortiProxy versiEPSS 2.1%CVE-2022-26419HIGHRockwell Automation Studio 5000 Logix Designer Code InjectionEPSS 2.1%CVE-2020-12498HIGHPhoenix Contact Automation Worx <= 1.87: out-of-bounds read remote code executionEPSS 2.1%