Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Stack-based buffer overflow in kkstrtext.h in ktools library 0.3 and earlier, as used in products such as (1) centericq, (2) orpheus, (3) motor, and (4) groan, allows local users or remote attackers to execute arbitrary code via a long parameter to the VGETSTRING macro.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Ktools kkstrtext.h远程缓冲区溢出漏洞
Vulnerability Description
ktools是用于提供各种文本模式用户界面控制的函数库。 ktools的kkstrtext.h中存在缓冲区溢出漏洞： #define VGETSTRING(c， fmt) { va_list vgs__ap; char vgs__buf[1024]; va_start(vgs__ap， fmt); vsprintf(vgs__buf， fmt， vgs__ap); c = vgs__buf; va_end(vgs__ap); } 攻击者可以通过发送超长字符串导致执行任意代码。例如，在centericq中攻
CVSS Information
N/A
Vulnerability Type
N/A