3 matches found
CVE-2025-27480
CVE-2025-27480 CVE‑2025‑27480 – OpenSSH 中的远程代码执行 漏洞是什么 OpenSSH 8.9p1 版本在解析 SSHUSERAUTH 数据包时存在一个隐蔽的缓冲区溢出缺陷。客户端可以发送一个带有 超长 “user”字段的数据包,导致数据写入内存中的错误位置。其结果是,攻击者可以在任何运行该版本 OpenSSH 的主机上注入任意 shellcode,并以 SYSTEM 权限运行。你为什么会感到似曾相识?因为一个非常相似的漏洞 CVE‑2024‑13401 同样源于对 user 字段缺少边界检查,攻击者可以在 SSH 进程中写入任意代码。...
CVE-2020-36995
Mocha Telnet Lite for iOS 4.2 contains a denial of service vulnerability that allows attackers to crash the application by manipulating the user configuration input. Attackers can overwrite the 'User' field with 350 bytes of repeated characters to trigger an application crash and prevent normal...
CVE-2020-36995
CVE-2020-36995 affects Mocha Telnet Lite for iOS 4.2. The vulnerability is a denial-of-service through user configuration input: an attacker can overwrite the 'User' field with 350 repeated characters to crash the app, leading to loss of normal functionality. The affected software/component is iO...