| शीर्षक | TOTOLINK A3002R V1.1.1-B20200824.0128 Stack-based Buffer Overflow |
|---|
| विवरण | We found an stack overflow vulnerability in TOTOLINK router with firmware which was released recently, allows remote attackers to crash the server.In the router's formDhcpv6s function, dnsaddr、interfacenameds、addrPoolStart、addrPoolEnd is directly passed by the attacker, If this part of the data is too long, it will cause the stack overflow, so we can control the dnsaddr、interfacenameds、addrPoolStart、addrPoolEnd to execute arbitrary code. |
|---|
| स्रोत | ⚠️ https://github.com/wudipjq/my_vuln/blob/main/totolink3/vuln_41/41.md |
|---|
| उपयोगकर्ता | pjq123 (UID 86618) |
|---|
| सबमिशन | 19/06/2025 05:54 PM (1 वर्ष पहले) |
|---|
| संयम | 21/06/2025 08:00 AM (2 days later) |
|---|
| स्थिति | प्रतिलिपि |
|---|
| VulDB प्रविष्टि | 309666 [TOTOLINK A3002R 4.0.0-B20230531.1404 formDhcpv6s interfacenameds बफ़र ओवरफ़्लो] |
|---|
| अंक | 0 |
|---|