| tiêu đề | qinguoyi TinyWebServer >0.0.0 Heap-based Buffer Overflow |
|---|
| Mô tả | TinyWebServer is a lightweight Web server framework for Linux written in C++, featuring a concurrent model with thread pool, non-blocking sockets and epoll, as well as support for HTTP request parsing, user authentication, and synchronous/asynchronous logging management.
This code is vulnerable to CWE-122 (Heap-based Buffer Overflow) as it uses unsafe string concatenation functions alongside fixed-size heap memory allocation. The do_request function processes user-provided username and password inputs extracted from HTTP POST requests. When handling user registration, the function allocates a fixed 200-byte heap buffer via malloc(), then uses strcpy() and strcat() to concatenate SQL template strings, wrapping characters, and unvalidated username/password inputs into this buffer.The issue is that no bounds checking is performed to verify if the total length of the concatenated SQL string (SQL template + wrapping characters + username + password) exceeds the 200-byte buffer size. Since usernames and passwords can each contain up to 99 bytes of user input (for a combined maximum of 198 bytes), the total length of the concatenated string easily exceeds the buffer’s capacity. This triggers a heap-based buffer overflow that corrupts metadata in adjacent heap memory, causing server crashes, and potentially enabling arbitrary code execution under specific conditions.
More details:https://github.com/qinguoyi/TinyWebServer/issues/319 |
|---|
| Nguồn | ⚠️ https://github.com/qinguoyi/TinyWebServer/issues/319 |
|---|
| Người dùng | zzxzzb (UID 95450) |
|---|
| Đệ trình | 11/02/2026 03:38 (cách đây 8 các tháng) |
|---|
| Kiểm duyệt | 21/02/2026 16:18 (11 days later) |
|---|
| Trạng thái | Bản sao |
|---|
| Mục VulDB | 303338 [qinguoyi TinyWebServer đến 1.0 /http/http_conn.cpp name/password tràn bộ đệm] |
|---|
| điểm | 0 |
|---|