| 标题 | PcapPlusPlus v25.05 Heap-based Buffer Overflow |
|---|
| 描述 | A heap-based buffer over-read vulnerability exists in PcapPlusPlus's TLS handshake parsing module within the pcpp::SSLClientHelloMessage::getHandshakeVersion() function at SSLHandshake.cpp:1453. The flaw is caused by missing boundary validation on truncated TLS Client Hello packet data. When parsing a maliciously crafted and truncated TLS Client Hello packet, the function directly accesses the handshakeVersion field of the client hello header without verifying that the packet buffer contains sufficient data for the full header structure. This triggers an out-of-bounds heap read of 2 bytes beyond the allocated buffer boundary, resulting in memory corruption and program crash. Remote attackers can exploit this vulnerability by supplying a malformed network packet, which can be used to cause a denial-of-service (DoS) condition and may lead to potential sensitive memory information disclosure. |
|---|
| 来源 | ⚠️ https://github.com/seladb/PcapPlusPlus/issues/2151 |
|---|
| 用户 | TYGLS (UID 94774) |
|---|
| 提交 | 2026-06-01 05時13分 (29 日前) |
|---|
| 管理 | 2026-06-29 06時25分 (28 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 374591 [seladb PcapPlusPlus 25.05 TLS Hello SSLHandshake.cpp getHandshakeVersion handshakeVersion 内存损坏] |
|---|
| 积分 | 20 |
|---|