| tiêu đề | TP-LINK TECHNOLOGIES Co., Ltd. TL-WR841ND Wireless Router V11_150616 Buffer Overflow |
|---|
| Mô tả | ping_addr parameter does not validate the length of user input. The input is directly passed to the ipAddrDispose() function, which uses a fixed-size buffer (51 bytes) without restricting input length. This leads to a buffer overflow during cyclic writes, overwriting stack memory. An attacker can trigger the overflow by crafting a long string (e.g., "A"*2000), overwriting return addresses or function pointers, resulting in:
Denial of Service (DoS): The web service process crashes, rendering the management interface inaccessible.
Potential Remote Code Execution (RCE): By controlling the stack layout, an attacker may hijack the program execution flow (requires bypassing ASLR/NX protections). |
|---|
| Nguồn | ⚠️ https://github.com/alc9700jmo/CVE/issues/12 |
|---|
| Người dùng | alc9700 (UID 79368) |
|---|
| Đệ trình | 28/05/2025 02:54 (cách đây 1 Năm) |
|---|
| Kiểm duyệt | 29/05/2025 09:27 (1 day later) |
|---|
| Trạng thái | Bản sao |
|---|
| Mục VulDB | 203893 [TP-LINK TL-WR841N 3.16.9 httpd tràn bộ đệm] |
|---|
| điểm | 0 |
|---|