| عنوان | Tenda AC6 Unauthorized stack overflow vulnerability |
|---|
| الوصف | There is a function named "fromDhcpListClient" in the US_AC6V1.0BR_V15.03.05.19 upgrade software.The function "fromDhcpListClient" is vulnerable to a stack-based buffer overflow. When this function reads in a parameter supplied by the user, it passes the variable to the function without performing any length check, which means that the stack-based buffer could be overflowed. This vulnerability could allow an attacker to easily execute a denial-of-service attack or remote code execution with carefully crafted overflow data by accessing the page. To secure the system, input parameters should be strictly checked and filtered for length to prevent such vulnerabilities from occurring.
|
|---|
| المصدر | ⚠️ https://github.com/GleamingEyes/vul/blob/main/1.md |
|---|
| المستخدم | tianwenqi (UID 46929) |
|---|
| ارسال | 18/05/2023 10:29 AM (3 سنوات منذ) |
|---|
| الاعتدال | 27/05/2023 09:05 AM (9 days later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 230077 [Tenda AC6 US_AC6V1.0BR_V15.03.05.19 fromDhcpListClient تلف الذاكرة] |
|---|
| النقاط | 20 |
|---|