| عنوان | PcapPlusPlus v25.05 Heap-based Buffer Overflow |
|---|
| الوصف | A heap-based buffer over-read vulnerability exists in PcapPlusPlus's TLS handshake parsing module within the pcpp::SSLClientHelloMessage::getHandshakeVersion() function at SSLHandshake.cpp:1453. The flaw is caused by missing boundary validation on truncated TLS Client Hello packet data. When parsing a maliciously crafted and truncated TLS Client Hello packet, the function directly accesses the handshakeVersion field of the client hello header without verifying that the packet buffer contains sufficient data for the full header structure. This triggers an out-of-bounds heap read of 2 bytes beyond the allocated buffer boundary, resulting in memory corruption and program crash. Remote attackers can exploit this vulnerability by supplying a malformed network packet, which can be used to cause a denial-of-service (DoS) condition and may lead to potential sensitive memory information disclosure. |
|---|
| المصدر | ⚠️ https://github.com/seladb/PcapPlusPlus/issues/2151 |
|---|
| المستخدم | TYGLS (UID 94774) |
|---|
| ارسال | 01/06/2026 05:13 AM (1 شهر منذ) |
|---|
| الاعتدال | 29/06/2026 06:25 AM (28 days later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 374591 [seladb PcapPlusPlus 25.05 TLS Hello SSLHandshake.cpp getHandshakeVersion handshakeVersion تلف الذاكرة] |
|---|
| النقاط | 20 |
|---|