Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A stack-based buffer over-read exists in setbit() at iptree.h of TCPFLOW 1.5.0, due to received incorrect values causing incorrect computation, leading to denial of service during an address_histogram call or a get_histogram call.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
TCPFLOW 缓冲区错误漏洞
Vulnerability Description
TCPFLOW是一款记录TCP会话的网络监视工具。 TCPFLOW 1.5.0版本中的iptree.h文件的‘setbit()’函数存在基于栈的缓冲区越界读取漏洞，该漏洞源于程序接收了错误值，从而导致计算错误。攻击者可利用该漏洞在‘address_histogram’函数调用或‘get_histogram’函数调用过程中造成拒绝服务。
CVSS Information
N/A
Vulnerability Type
N/A