Описание
hashcat's fgetl() function in src/filehandling.c writes a null terminator one byte past the caller's buffer when an input line is exactly the buffer length. Attackers can trigger this out-of-bounds heap write by providing a hash file, potfile, or wordlist containing a line of exactly HCBUFSIZ_LARGE bytes.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| hashcat | unfixed | package |
Примечания
https://github.com/hashcat/hashcat/issues/4739
https://github.com/hashcat/hashcat/pull/4750
Fixed by: https://github.com/hashcat/hashcat/commit/93b55d37d3b2340013d4036f10181ddc67d44249
Crash in CLI tool, no security impact
Связанные уязвимости
(hashcat's fgetl() function in src/filehandling.c writes a null termina ...)
hashcat's fgetl() function in src/filehandling.c writes a null terminator one byte past the caller's buffer when an input line is exactly the buffer length. Attackers can trigger this out-of-bounds heap write by providing a hash file, potfile, or wordlist containing a line of exactly HCBUFSIZ_LARGE bytes.
hashcat's fgetl() function in src/filehandling.c writes a null terminator one byte past the caller's buffer when an input line is exactly the buffer length. Attackers can trigger this out-of-bounds heap write by providing a hash file, potfile, or wordlist containing a line of exactly HCBUFSIZ_LARGE bytes.