| タイトル | PcapPlusPlus v25.05 Heap-based Buffer Overflow |
|---|
| 説明 | A heap-based buffer over-read vulnerability exists in PcapPlusPlus's TLS handshake parsing module within the pcpp::SSLClientHelloMessage::getHandshakeVersion() function at SSLHandshake.cpp:1453. The flaw is caused by missing boundary validation on truncated TLS Client Hello packet data. When parsing a maliciously crafted and truncated TLS Client Hello packet, the function directly accesses the handshakeVersion field of the client hello header without verifying that the packet buffer contains sufficient data for the full header structure. This triggers an out-of-bounds heap read of 2 bytes beyond the allocated buffer boundary, resulting in memory corruption and program crash. Remote attackers can exploit this vulnerability by supplying a malformed network packet, which can be used to cause a denial-of-service (DoS) condition and may lead to potential sensitive memory information disclosure. |
|---|
| ソース | ⚠️ https://github.com/seladb/PcapPlusPlus/issues/2151 |
|---|
| ユーザー | TYGLS (UID 94774) |
|---|
| 送信 | 2026年06月01日 05:13 (28 日 ago) |
|---|
| モデレーション | 2026年06月29日 06:25 (28 days later) |
|---|
| ステータス | 承諾済み |
|---|
| VulDBエントリ | 374591 [seladb PcapPlusPlus 25.05 TLS Hello SSLHandshake.cpp getHandshakeVersion handshakeVersion メモリ破損] |
|---|
| ポイント | 20 |
|---|