目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1110 元

100%
请我们喝杯咖啡

CWE-121 栈缓冲区溢出 类漏洞列表 2560

CWE-121 栈缓冲区溢出 类弱点 2560 条 CVE 漏洞汇总，含 AI 中文分析。

CWE-121 栈缓冲区溢出属于内存安全漏洞，指程序向栈上分配的局部变量或函数参数写入超出其容量的数据。攻击者通常利用此缺陷覆盖栈上的返回地址或关键数据，从而劫持控制流并执行任意代码。开发者应避免使用不安全的字符串处理函数，改用边界检查机制，启用编译器保护如栈金丝雀和 ASLR，并严格验证输入长度，以从根本上消除溢出风险。

MITRE CWE 官方描述
CWE：CWE-121 基于栈的缓冲区溢出（Stack-based Buffer Overflow） 英文：基于栈的缓冲区溢出（Stack-based Buffer Overflow）条件是指被覆盖的缓冲区分配在栈上（即，它是局部变量或，罕见情况下，是函数的参数）的条件。
常见影响 (3)
AvailabilityModify Memory, DoS: Crash, Exit, or Restart, DoS: Resource Consumption (CPU), DoS: Resource Consumption (Memory)
Buffer overflows generally lead to crashes. Other attacks leading to lack of availability are possible, including putting the program into an infinite loop.
Integrity, Confidentiality, Availability, Access ControlModify Memory, Execute Unauthorized Code or Commands, Bypass Protection Mechanism
Buffer overflows often can be used to execute arbitrary code, which is usually outside the scope of a program's implicit security policy.
Integrity, Confidentiality, Availability, Access Control, OtherModify Memory, Execute Unauthorized Code or Commands, Bypass Protection Mechanism, Other
When the consequence is arbitrary code execution, this can often be used to subvert any other security service.
缓解措施 (5)
Operation, Build and CompilationUse automatic buffer overflow detection mechanisms that are offered by certain compilers or compiler extensions. Examples include: the Microsoft Visual Studio /GS flag, Fedora/Red Hat FORTIFY_SOURCE GCC flag, StackGuard, and ProPolice, which provide various mechanisms including canary-based detection and range/index checking. D3-SFCV (Stack Frame Canary Validation) from D3FEND [REF-1334] discusses…
Effectiveness: Defense in Depth
Architecture and DesignUse an abstraction library to abstract away risky APIs. Not a complete solution.
ImplementationImplement and perform bounds checking on input.
ImplementationDo not use dangerous functions such as gets. Use safer, equivalent functions which check for boundary errors.
Operation, Build and CompilationRun or compile the software using features or extensions that randomly arrange the positions of a program's executable and libraries in memory. Because this makes the addresses unpredictable, it can prevent an attacker from reliably jumping to exploitable code. Examples include Address Space Layout Randomization (ASLR) [REF-58] [REF-60] and Position-Independent Executables (PIE) [REF-64]. Imported…
Effectiveness: Defense in Depth
代码示例 (2)
While buffer overflow examples can be rather complex, it is possible to have very simple, yet still exploitable, stack-based buffer overflows:
#define BUFSIZE 256 int main(int argc, char **argv) { char buf[BUFSIZE]; strcpy(buf, argv[1]); }
Bad · C
This example takes an IP address from a user, verifies that it is well formed and then looks up the hostname and copies it into a buffer.
void host_lookup(char *user_supplied_addr){ struct hostent *hp; in_addr_t *addr; char hostname[64]; in_addr_t inet_addr(const char *cp); /*routine that ensures user_supplied_addr is in the right format for conversion */ validate_addr_form(user_supplied_addr); addr = inet_addr(user_supplied_addr); hp = gethostbyaddr( addr, sizeof(struct in_addr), AF_INET); strcpy(hostname, hp->h_name); }
Bad · C
CVE ID标题CVSS风险等级Published
CVE-2014-0766 Advantech WebAccess 基于栈的缓冲区溢出漏洞 — WebAccess 9.8 -2014-04-12
CVE-2014-0767 Advantech WebAccess 基于栈的缓冲区溢出漏洞 — WebAccess 9.8 -2014-04-12
CVE-2014-0768 Advantech WebAccess 基于栈的缓冲区溢出漏洞 — WebAccess 9.8 -2014-04-12
CVE-2014-0770 Advantech WebAccess 基于栈的缓冲区溢出漏洞 — WebAccess 9.8 -2014-04-12
CVE-2014-0787 WellinTech KingSCADA 基于堆的缓冲区溢出漏洞 — KingSCADA 9.8 -2014-04-12
CVE-2014-0783 Yokogawa CENTUM CS 基于栈的缓冲区溢出漏洞 — CENTUM CS 3000 9.8 -2014-03-14
CVE-2014-0784 Yokogawa CENTUM CS 基于栈的缓冲区溢出漏洞 — CENTUM CS 3000 9.8 -2014-03-14
CVE-2014-0774 Schneider Electric OPC Factory Server 基于栈的缓冲区溢出漏洞 — TLXCDSUOFS33 7.8 -2014-02-28
CVE-2014-0753 Ecava IntegraXor 基于栈的缓冲区溢出漏洞 — IntegraXor 6.2 -2014-01-21
CVE-2010-3872 Apache httpd 数字错误漏洞 — mod_fcgid 7.5 High2010-11-20

CWE-121（栈缓冲区溢出） 是常见的弱点类别，本平台收录该类弱点关联的 2560 条 CVE 漏洞。