CWE-121 栈缓冲区溢出 类弱点 2979 条 CVE 漏洞汇总，含 AI 中文分析。
CWE-121 栈缓冲区溢出属于内存安全漏洞，指程序向栈上分配的局部变量或函数参数写入超出其容量的数据。攻击者通常利用此缺陷覆盖栈上的返回地址或关键数据，从而劫持控制流并执行任意代码。开发者应避免使用不安全的字符串处理函数，改用边界检查机制，启用编译器保护如栈金丝雀和 ASLR，并严格验证输入长度，以从根本上消除溢出风险。
#define BUFSIZE 256 int main(int argc, char **argv) { char buf[BUFSIZE]; strcpy(buf, argv[1]); }void host_lookup(char *user_supplied_addr){ struct hostent *hp; in_addr_t *addr; char hostname[64]; in_addr_t inet_addr(const char *cp); /*routine that ensures user_supplied_addr is in the right format for conversion */ validate_addr_form(user_supplied_addr); addr = inet_addr(user_supplied_addr); hp = gethostbyaddr( addr, sizeof(struct in_addr), AF_INET); strcpy(hostname, hp->h_name); }| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2017-15101 | liblouis 安全漏洞 — liblouis | 9.8 | - | 2018-07-27 |
| CVE-2017-2630 | QEMU 缓冲区错误漏洞 — Qemu: | 9.8 | - | 2018-07-27 |
| CVE-2018-10628 | AVEVA InTouch 安全漏洞 — InTouch | 9.8 | - | 2018-07-24 |
| CVE-2017-3223 | Dahua IP camera 缓冲区错误漏洞 — IP Camera | 9.8 | - | 2018-07-24 |
| CVE-2018-10620 | AVEVA InduSoft Web Studio和InTouch Machine Edition 缓冲区错误漏洞 — InduSoft Web Studio | 9.8 | - | 2018-07-19 |
| CVE-2018-1046 | pdns 缓冲区错误漏洞 — pdns | 7.8 | - | 2018-07-16 |
| CVE-2016-6563 | 多款D-Link路由器缓冲区错误漏洞 — DIR-823 | 9.8 | - | 2018-07-13 |
| CVE-2018-8847 | Eaton 9000X DriveA 缓冲区错误漏洞 — Eaton 9000X Drive | 9.8 | - | 2018-07-13 |
| CVE-2018-10594 | Delta Industrial Automation COMMGR 缓冲区错误漏洞 — Delta Industrial Automation COMMGR and accompanying PLC Simulators (DVPSimulator EH2, EH3, ES2, SE, SS2 and AHSIM_5x0, AHSIM_5x1) | 9.8 | - | 2018-06-26 |
| CVE-2018-11447 | Siemens SCALANCE M875 跨站请求伪造漏洞 — SCALANCE M875 | 8.8 | - | 2018-06-26 |
| CVE-2018-10621 | Delta Industrial Automation DOPSoft 缓冲区错误漏洞 — Delta Industrial Automation DOPSoft | 9.8 | - | 2018-06-18 |
| CVE-2018-10601 | 多款Philips产品缓冲区错误漏洞 — IntelliVue Patient Monitors, Avalon Fetal/Maternal Monitors | 8.0 | - | 2018-06-05 |
| CVE-2018-1125 | procps-ng pgrep 缓冲区错误漏洞 — procps-ng, procps | 6.2 | - | 2018-05-23 |
| CVE-2018-10494 | Foxit Reader 缓冲区错误漏洞 — Foxit Reader | 8.8 | - | 2018-05-17 |
| CVE-2018-7499 | 多款Advantech产品缓冲区错误漏洞 — WebAccess | 9.8 | - | 2018-05-15 |
| CVE-2018-7494 | Delta Electronics WPLSoft 缓冲区错误漏洞 — Delta Electronics WPLSoft | 8.8 | - | 2018-05-04 |
| CVE-2018-8865 | Lantech IDS 2102 缓冲区错误漏洞 — IDS 2102 | 9.8 | - | 2018-05-04 |
| CVE-2018-8839 | Delta PMSoft 缓冲区错误漏洞 — PMSoft | 7.8 | - | 2018-04-30 |
| CVE-2018-7527 | WECON LeviStudio HMI Editor和PI Studio HMI Project Programmer 缓冲区错误漏洞 — LeviStudio HMI Editor | 7.8 | - | 2018-04-26 |
| CVE-2018-8840 | Schneider Electric InduSoft Web Studio和InTouch Machine Edition 缓冲区错误漏洞 — Schneider Electric InduSoft Web Studio and InTouch Machine Edition | 9.8 | - | 2018-04-18 |
| CVE-2018-7514 | Omron CX-One多个软件缓冲区错误漏洞 — Omron CX-One | 7.3 | - | 2018-04-17 |
| CVE-2017-9638 | Mitsubishi Electric E-Designer 缓冲区错误漏洞 — E-Designer | 9.8 | - | 2018-04-17 |
| CVE-2018-7513 | Omron CX-Supervisor 缓冲区错误漏洞 — Omron CX-Supervisor | 5.3 | - | 2018-03-21 |
| CVE-2017-16751 | Delta Industrial Automation Screen Editor 缓冲区错误漏洞 — Delta Electronics Delta Industrial Automation Screen Editor | 7.8 | - | 2018-03-15 |
| CVE-2018-5476 | Delta Electronics Delta Industrial Automation DOPSoft 缓冲区错误漏洞 — Delta Electronics Delta Industrial Automation DOPSoft | 7.8 | - | 2018-03-15 |
| CVE-2017-12194 | Red Hat spice-gtk 安全漏洞 — spice-gtk | 8.8 | - | 2018-03-14 |
| CVE-2018-1071 | zsh 缓冲区错误漏洞 — zsh | 5.5 | - | 2018-03-09 |
| CVE-2018-5452 | Emerson Process Management ControlWave Micro Process Automation Controller 缓冲区错误漏洞 — Emerson ControlWave Micro Process Automation Controller | 7.5 | - | 2018-03-07 |
| CVE-2018-5475 | GE D60 Line Distance Relay devices 缓冲区错误漏洞 — GE D60 Line Distance Relay | 9.8 | - | 2018-02-19 |
| CVE-2018-5440 | 3S-Smart CODESYS和CODESYS runtime system 缓冲区错误漏洞 — 3S-Smart Software Solutions GmbH CODESYS Web Server | 9.8 | - | 2018-02-15 |
CWE-121（栈缓冲区溢出） 是常见的弱点类别，本平台收录该类弱点关联的 2979 条 CVE 漏洞。