| शीर्षक | D-Link DI-8100 DI-8100-16.07.26A1 Stack-based Buffer Overflow |
|---|
| विवरण | In the ddos_asp function of the jhttpd file of the DI_8100-16.07.26A1 firmware, the passed def_max, def_time, def_tcp_max, def_tcp_time, def_udp_max, def_udp_time, def_icmp_max and other parameters are controlled, and then the passed v32, v33, v34, v35, v36, v37 and other parameters are copied to v48 (local variables are on the stack) by sprintf again through the following judgment assignment, but there is no control, resulting in a stack overflow, which may cause a denial of service or even command execution. |
|---|
| स्रोत | ⚠️ https://github.com/Yhuanhuan01/DI-8100_Vulnerability_Report/blob/main/Vulnerability_Report.md |
|---|
| उपयोगकर्ता | huan (UID 84420) |
|---|
| सबमिशन | 20/04/2025 03:30 PM (1 वर्ष पहले) |
|---|
| संयम | 10/05/2025 05:21 PM (20 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 308291 [D-Link DI-8100 तक 16.07.26A1 jhttpd /ddos.asp बफ़र ओवरफ़्लो] |
|---|
| अंक | 20 |
|---|