Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Stack-based buffer overflow in the dissect_ospf_v3_address_prefix function in the OSPF protocol dissector in Ethereal 0.10.12, and possibly other versions, allows remote attackers to execute arbitrary code via crafted packets.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Ethereal OSPF协议处理单元栈溢出漏洞
Vulnerability Description
Ethereal是一款开放源码的网络协议分析工具。 Ethereal用于分析OSPF协议的组件中存在栈溢出漏洞,远程攻击者可以利用这个漏洞导致拒绝服务或执行任意代码。dissect_ospf_v3_address_prefix()函数中没有执行边界检查。该函数可能将用户输入的二进制数据转换成可读字符串,但没有对输入数据执行长度检查便使用栈中固定长度的缓冲区来存储所创建的字符串。如果生成的输入长度超过了缓冲区大小,便可能出现堆溢出。
CVSS Information
N/A
Vulnerability Type
N/A