| 제목 | PcapPlusPlus v25.05 Heap-based Buffer Overflow |
|---|
| 설명 | A heap-based buffer over-read vulnerability exists in PcapPlusPlus's TLS handshake parsing module within the pcpp::SSLClientHelloMessage::getHandshakeVersion() function at SSLHandshake.cpp:1453. The flaw is caused by missing boundary validation on truncated TLS Client Hello packet data. When parsing a maliciously crafted and truncated TLS Client Hello packet, the function directly accesses the handshakeVersion field of the client hello header without verifying that the packet buffer contains sufficient data for the full header structure. This triggers an out-of-bounds heap read of 2 bytes beyond the allocated buffer boundary, resulting in memory corruption and program crash. Remote attackers can exploit this vulnerability by supplying a malformed network packet, which can be used to cause a denial-of-service (DoS) condition and may lead to potential sensitive memory information disclosure. |
|---|
| 원천 | ⚠️ https://github.com/seladb/PcapPlusPlus/issues/2151 |
|---|
| 사용자 | TYGLS (UID 94774) |
|---|
| 제출 | 2026. 06. 01. AM 05:13 (29 날 ago) |
|---|
| 모더레이션 | 2026. 06. 29. AM 06:25 (28 days later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 374591 [seladb PcapPlusPlus 25.05 TLS Hello SSLHandshake.cpp getHandshakeVersion handshakeVersion 메모리 손상] |
|---|
| 포인트들 | 20 |
|---|