| タイトル | LB-LINK BL-WR9000 V2.4.9 Buffer Overflow |
|---|
| 説明 | The BLINK WR9000 router has a stack overflow vulnerability. The vulnerability exists in the libshare-0.0.26.so shared library, which is called by the /bin/goahead file. The vulnerability occurs in the internal implementation of the router handling specific functions of the wireless network. Because of out-of-bounds reading and memory structure copying without length limitation during development, if an attacker constructs an extremely long malicious configuration string in advance and injects it into it, it will cause the stack space of the underlying Web worker process to be broken through, leading to a crash and denial of service. |
|---|
| ソース | ⚠️ https://github.com/glkfc/IoT-Vulnerability/blob/main/LB-LINK/LB-LINK_HideSSID%20stack%20overflow_EN.md |
|---|
| ユーザー | jfkk (UID 79868) |
|---|
| 送信 | 2026年03月04日 08:40 (7 月 ago) |
|---|
| モデレーション | 2026年03月15日 19:41 (11 days later) |
|---|
| ステータス | 承諾済み |
|---|
| VulDBエントリ | 351150 [LB-LINK BL-WR9000 2.4.9 /goform/get_hidessid_cfg sub_44D844 メモリ破損] |
|---|
| ポイント | 20 |
|---|