Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2025-11678

Опубликовано: 20 окт. 2025
Источник: nvd
EPSS Низкий

Описание

Stack-based Buffer Overflow in lws_adns_parse_label in warmcat libwebsockets allows, when the LWS_WITH_SYS_ASYNC_DNS flag is enabled during compilation, to overflow the label_stack, when the attacker is able to sniff a DNS request in order to craft a response with a matching id containing a label longer than the maximum.

EPSS

Процентиль: 8%
0.00029
Низкий

Дефекты

CWE-121

Связанные уязвимости

ubuntu
4 месяца назад

Stack-based Buffer Overflow in lws_adns_parse_label in warmcat libwebsockets allows, when the LWS_WITH_SYS_ASYNC_DNS flag is enabled during compilation, to overflow the label_stack, when the attacker is able to sniff a DNS request in order to craft a response with a matching id containing a label longer than the maximum.

debian
4 месяца назад

Stack-based Buffer Overflowin lws_adns_parse_label in warmcat libwebso ...

github
4 месяца назад

Stack-based Buffer Overflow in lws_adns_parse_label in warmcat libwebsockets allows, when the LWS_WITH_SYS_ASYNC_DNS flag is enabled during compilation, to overflow the label_stack, when the attacker is able to sniff a DNS request in order to craft a response with a matching id containing a label longer than the maximum.

EPSS

Процентиль: 8%
0.00029
Низкий

Дефекты

CWE-121