CWE-121—Stack-based Buffer Overflow

名称

Stack-based Buffer Overflow

描述

A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

常见后果

范围：

Availability

影响：

Modify Memory, DoS: Crash, Exit, or Restart, DoS: Resource Consumption (CPU), DoS: Resource Consumption (Memory)

注释：

Buffer overflows generally lead to crashes. Other attacks leading to lack of availability are possible, including putting the program into an infinite loop.

范围：

Integrity, Confidentiality, Availability, Access Control

影响：

Modify Memory, Execute Unauthorized Code or Commands, Bypass Protection Mechanism

注释：

Buffer overflows often can be used to execute arbitrary code, which is usually outside the scope of a program's implicit security policy.

范围：

Integrity, Confidentiality, Availability, Access Control, Other

影响：

Modify Memory, Execute Unauthorized Code or Commands, Bypass Protection Mechanism, Other

注释：

When the consequence is arbitrary code execution, this can often be used to subvert any other security service.

相关 CWE

• CWE-787Out-of-bounds WriteHigh
• CWE-788Access of Memory Location After End of Buffer