提出 #443175: AVL-DiTEST-DiagDev libdoip libdoip==1.0.0 NULL Pointer Dereference情報

タイトルAVL-DiTEST-DiagDev libdoip libdoip==1.0.0 NULL Pointer Dereference
説明In the reactOnReceivedTcpMessage method, the ROUTINGACTIVATIONREQUEST activation command dynamically allocates an array to routedClientAddress. However, when the activation command is not used and a diagnostic command (8001) is sent directly, routedClientAddress is not allocated. If it is used afterward, it causes the program to crash.
ソース⚠️ https://github.com/AVL-DiTEST-DiagDev/libdoip/issues/11
ユーザー
 susu199 (UID 76394)
送信2024年11月13日 07:22 (2 年 ago)
モデレーション2024年11月21日 07:55 (8 days later)
ステータス承諾済み
VulDBエントリ285659 [AVL-DiTEST-DiagDev libdoip 1.0.0 DoIPConnection.cpp reactOnReceivedTcpMessage サービス拒否]
ポイント18

Interested in the pricing of exploits?

See the underground prices here!