Описание
hashcat's fgetl() function in src/filehandling.c writes a null terminator one byte past the caller's buffer when an input line is exactly the buffer length. Attackers can trigger this out-of-bounds heap write by providing a hash file, potfile, or wordlist containing a line of exactly HCBUFSIZ_LARGE bytes.
Ссылки
EPSS
6.1 Medium
CVSS3
Дефекты
Связанные уязвимости
(hashcat's fgetl() function in src/filehandling.c writes a null termina ...)
hashcat's fgetl() function in src/filehandling.c writes a null termina ...
hashcat's fgetl() function in src/filehandling.c writes a null terminator one byte past the caller's buffer when an input line is exactly the buffer length. Attackers can trigger this out-of-bounds heap write by providing a hash file, potfile, or wordlist containing a line of exactly HCBUFSIZ_LARGE bytes.
EPSS
6.1 Medium
CVSS3