| Название | PcapPlusPlus v25.05 Heap-based Buffer Overflow |
|---|
| Описание | A heap-based buffer over-read vulnerability exists in PcapPlusPlus's bundled LightPcapNg parser within the parse_by_block_type function at light_pcapng.c:172. The flaw is caused by missing validation on the captured_packet_length value read directly from parsed PCAPNG file data. When processing a maliciously crafted PCAPNG file, the program calls memcpy() using the untrusted, uncontrolled length value without checking its validity against the actual allocated heap buffer size. This results in copying excessive bytes far beyond the heap buffer boundary, triggering a large out-of-bounds heap read and causing program crash. Remote attackers can exploit this vulnerability by supplying a specially crafted PCAPNG file to trigger heap memory corruption, leading to a denial-of-service (DoS) condition and potential sensitive memory information disclosure. |
|---|
| Источник | ⚠️ https://github.com/seladb/PcapPlusPlus/issues/2149 |
|---|
| Пользователь | TYGLS (UID 94774) |
|---|
| Представление | 01.06.2026 05:10 (1 месяц назад) |
|---|
| Модерация | 29.06.2026 06:25 (28 days later) |
|---|
| Статус | принято |
|---|
| Запись VulDB | 374590 [seladb PcapPlusPlus 25.05 LightPcapNg Parser light_pcapng.c parse_by_block_type captured_packet_length повреждение памяти] |
|---|
| Баллы | 20 |
|---|