POJIA破甲
地图 / Buffer out of bound read in miniupnpc xml parser

Buffer out of bound read in miniupnpc xml parser

内存破坏 / 缓冲区越界读 / #340012

厂商
Monero
严重程度
低危
赏金
—
弱点
缓冲区越界读
研究员
@yukichen
披露日期
2018-04-25
资产
—
CVE
—

该报告还没有中文解读。

原文摘录

摘自原文(4088 字符中的一小部分)
This is a buffer oob read vulnerability in miniupnpc when parsing xml response. This vulnerability could result in denial of service attack in monero client to in local area Network.

默认不展示报告全文。以上为简短摘录,完整复现过程请阅读原文。版权归研究员与 Monero 所有。

时间线

  • 报告提交
  • 公开披露
阅读 HackerOne 原文 ↗作者 @yukichen · 版权归作者与 Monero 所有

同类报告

Heap Buffer Overflow (READ: 4) in phar_parse_pharfileInternet Bug Bounty · 2020-10-10Out-of-bounds read in iconv.c:_php_iconv_mime_decode() due to integer overflowInternet Bug Bounty · 2020-10-12 · $1,500CVE-2024-7264: ASN.1 date parser overreadcurl · 2024-08-01CVE-2024-7347: Buffer overread in the ngx_http_mp4_moduleInternet Bug Bounty · 2024-08-27 · $2,142apache access.log leakage via long request on https://rapida.ru/QIWI · —CVE-2025-9086: Out of bounds read for cookie pathcurl · 2025-09-10