Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-2g39-f45w-2fcm

Опубликовано: 20 окт. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 7.5

Описание

Stack-based Buffer Overflow in lws_adns_parse_label in warmcat libwebsockets allows, when the LWS_WITH_SYS_ASYNC_DNS flag is enabled during compilation, to overflow the label_stack, when the attacker is able to sniff a DNS request in order to craft a response with a matching id containing a label longer than the maximum.

Stack-based Buffer Overflow in lws_adns_parse_label in warmcat libwebsockets allows, when the LWS_WITH_SYS_ASYNC_DNS flag is enabled during compilation, to overflow the label_stack, when the attacker is able to sniff a DNS request in order to craft a response with a matching id containing a label longer than the maximum.

EPSS

Процентиль: 8%
0.00029
Низкий

7.5 High

CVSS4

Дефекты

CWE-121

Связанные уязвимости

ubuntu
4 месяца назад

Stack-based Buffer Overflow in lws_adns_parse_label in warmcat libwebsockets allows, when the LWS_WITH_SYS_ASYNC_DNS flag is enabled during compilation, to overflow the label_stack, when the attacker is able to sniff a DNS request in order to craft a response with a matching id containing a label longer than the maximum.

nvd
4 месяца назад

Stack-based Buffer Overflow in lws_adns_parse_label in warmcat libwebsockets allows, when the LWS_WITH_SYS_ASYNC_DNS flag is enabled during compilation, to overflow the label_stack, when the attacker is able to sniff a DNS request in order to craft a response with a matching id containing a label longer than the maximum.

debian
4 месяца назад

Stack-based Buffer Overflowin lws_adns_parse_label in warmcat libwebso ...

EPSS

Процентиль: 8%
0.00029
Низкий

7.5 High

CVSS4

Дефекты

CWE-121