NHI’s health insurance web service component – Heap-based Buffer Overflow

NHI’s health insurance web service component has insufficient validation for input string length, which can result in heap-based buffer overflow attack. A remote attacker can exploit this vulnerability to flood the memory space reserved for the program, in order to terminate service without authentication, which requires a system restart to recover service.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

堆缓冲区溢出

National Health Insurance 缓冲区错误漏洞

National Health Insurance（NHI）是中国的台湾的医疗保险计划健保卡。 National Health Insurance 存在安全漏洞，该漏洞源于对输入字符串长度的验证不足。远程攻击者可以利用该漏洞淹没为程序保留的内存空间，从而在未经身份验证的情况下终止服务，这需要重新启动系统才能恢复服务。

N/A

N/A