POJIA破甲
地图 / Buffer overflow and affected url:-https://github.com/curl/curl/blob/master/docs/examples/hsts-preload.c

Buffer overflow and affected url:-https://github.com/curl/curl/blob/master/docs/examples/hsts-preload.c

内存破坏 / 经典缓冲区溢出 / #2252307

厂商
curl
严重程度
高危
赏金
—
弱点
经典缓冲区溢出
研究员
@cyberguardianrd
披露日期
2023-11-15
资产
—
CVE
—

该报告还没有中文解读。

原文摘录

摘自原文(4200 字符中的一小部分)
Summary: A buffer overflow, also known as a buffer overrun, occurs when a program or process attempts to write more data to a buffer than the buffer is allocated to hold. This can happen if the program does not properly check the length of the data before writing it to the buffer, or if the program …

默认不展示报告全文。以上为简短摘录,完整复现过程请阅读原文。版权归研究员与 curl 所有。

时间线

  • 报告提交
  • 公开披露
阅读 HackerOne 原文 ↗作者 @cyberguardianrd · 版权归作者与 curl 所有

同类报告

RCE on Steam Client via buffer overflow in Server InfoValve · 2019-03-15Malformed .BMP file in Counter-Strike 1.6 may cause shellcode injectionValve · 2020-02-27Malformed NAV file leads to buffer overflow and code execution in Left4Dead2.exeValve · 2020-03-25 · $10,000Remote vulnerabilities in sppPlayStation · 2024-04-25 · $12,500Buffer overrun in Steam SILK voice decoderValve · 2021-09-13 · $7,500[Portal 2] Remote Code Execution via voice packetsValve · 2021-05-10 · $5,000