CWE-121 栈缓冲区溢出 类弱点 2979 条 CVE 漏洞汇总，含 AI 中文分析。
CWE-121 栈缓冲区溢出属于内存安全漏洞，指程序向栈上分配的局部变量或函数参数写入超出其容量的数据。攻击者通常利用此缺陷覆盖栈上的返回地址或关键数据，从而劫持控制流并执行任意代码。开发者应避免使用不安全的字符串处理函数，改用边界检查机制，启用编译器保护如栈金丝雀和 ASLR，并严格验证输入长度，以从根本上消除溢出风险。
#define BUFSIZE 256 int main(int argc, char **argv) { char buf[BUFSIZE]; strcpy(buf, argv[1]); }void host_lookup(char *user_supplied_addr){ struct hostent *hp; in_addr_t *addr; char hostname[64]; in_addr_t inet_addr(const char *cp); /*routine that ensures user_supplied_addr is in the right format for conversion */ validate_addr_form(user_supplied_addr); addr = inet_addr(user_supplied_addr); hp = gethostbyaddr( addr, sizeof(struct in_addr), AF_INET); strcpy(hostname, hp->h_name); }| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2019-3922 | Nokia Alcatel Lucent I-240W-Q GPON ONT 缓冲区错误漏洞 — Alcatel Lucent I-240W-Q GPON ONT | 9.8 | - | 2019-03-05 |
| CVE-2019-8263 | UltraVNC 缓冲区错误漏洞 — UltraVNC | 6.5 | - | 2019-03-05 |
| CVE-2019-6537 | WECON Technologies LeviStudioU 缓冲区错误漏洞 — WECON LeviStudioU | 7.8 | - | 2019-02-13 |
| CVE-2019-3822 | Haxx libcurl 缓冲区错误漏洞 — curl | 9.8 | - | 2019-02-06 |
| CVE-2018-5410 | Dokan 缓冲区错误漏洞 — Open Source File System | 7.8 | - | 2019-01-07 |
| CVE-2018-20247 | Foxit Quick PDF Library 缓冲区错误漏洞 — Foxit Quick PDF Library | 8.8 | - | 2018-12-24 |
| CVE-2018-11463 | 多款Siemens产品缓冲区错误漏洞 — SINUMERIK 808D V4.7, SINUMERIK 808D V4.8, SINUMERIK 828D V4.7, SINUMERIK 840D sl V4.7, SINUMERIK 840D sl V4.8 | 7.8 | - | 2018-12-12 |
| CVE-2018-18993 | Omron CX-One 缓冲区错误漏洞 — CX-One (CX-Programmer and CX-Server) | 7.8 | - | 2018-12-04 |
| CVE-2018-17930 | Teledyne DALSA Sherlock 缓冲区错误漏洞 — Teledyne DALSA Sherlock | 9.8 | - | 2018-11-28 |
| CVE-2018-17614 | Losant Arduino MQTT Client 缓冲区错误漏洞 — Losant Arduino MQTT Client | 8.8 | - | 2018-11-13 |
| CVE-2018-17916 | Schneider Electric InduSoft Web Studio和InTouch Edge HMI 缓冲区错误漏洞 — InduSoft Web Studio, and InTouch Edge HMI (formerly InTouch Machine Edition) | 9.8 | - | 2018-11-02 |
| CVE-2018-17910 | Advantech WebAccess 缓冲区错误漏洞 — WebAccess Versions 8.3.2 and prior. | 7.8 | - | 2018-10-29 |
| CVE-2018-14816 | Advantech WebAccess 缓冲区错误漏洞 — Advantech WebAccess | 9.8 | - | 2018-10-23 |
| CVE-2018-14807 | Opto 22 PAC Control Basic和PAC Control Professional 缓冲区错误漏洞 — PAC Control Basic and PAC Control Professional | 9.8 | - | 2018-10-18 |
| CVE-2018-17911 | LAquis SCADA 缓冲区错误漏洞 — LAquis SCADA | 8.8 | - | 2018-10-17 |
| CVE-2018-10839 | QEMU 输入验证错误漏洞 — Qemu-kvm | 5.5 | - | 2018-10-16 |
| CVE-2018-17929 | Delta Industrial Automation TPEditor 缓冲区错误漏洞 — Delta Industrial Automation TPEditor | 7.8 | - | 2018-10-11 |
| CVE-2018-14818 | Wecon PI Studio HMI和PI Studio 缓冲区错误漏洞 — PI Studio HMI | 9.8 | - | 2018-10-08 |
| CVE-2018-14800 | Delta Electronics ISPSoft 安全漏洞 — ISPSoft | 7.8 | - | 2018-10-03 |
| CVE-2018-14802 | 多款Fuji Electric产品缓冲区错误漏洞 — FRENIC LOADER of FRENIC-Mini (C1), FRENIC-Mini (C2), FRENIC-Eco, FRENIC-Multi, FRENIC-MEGA, FRENIC-Ace | 9.8 | - | 2018-10-01 |
| CVE-2018-14823 | Fuji Electric V-Server VPR 缓冲区错误漏洞 — V-Server | 9.8 | - | 2018-09-26 |
| CVE-2018-10602 | WECON LeviStudioU 缓冲区错误漏洞 — LeviStudioU | 8.8 | - | 2018-09-26 |
| CVE-2018-14318 | Samsung Galaxy S8 输入验证错误漏洞 — Samsung Galaxy S8 | 8.8 | - | 2018-09-25 |
| CVE-2018-14633 | Linux kernel 缓冲区错误漏洞 — kernel | 7.7 | - | 2018-09-25 |
| CVE-2018-14829 | Rockwell Automation RSLinx Classic 安全漏洞 — RSLinx Classic | 9.8 | - | 2018-09-20 |
| CVE-2018-14792 | WECON PLC Editor 安全漏洞 — PLC Editor | 8.3 | - | 2018-09-19 |
| CVE-2018-10907 | Red Hat glusterfs服务器缓冲区错误漏洞 — glusterfs | 8.8 | - | 2018-09-04 |
| CVE-2018-14793 | Emerson Electric DeltaV 缓冲区错误漏洞 — DeltaV | 8.4 | - | 2018-08-21 |
| CVE-2018-10636 | Delta Electronics CNCSoft和ScreenEditor 缓冲区错误漏洞 — CNCSoft with ScreenEditor | 8.8 | - | 2018-08-13 |
| CVE-2017-15118 | QEMU 缓冲区错误漏洞 — Qemu | 9.8 | - | 2018-07-27 |
CWE-121（栈缓冲区溢出） 是常见的弱点类别，本平台收录该类弱点关联的 2979 条 CVE 漏洞。