Weakness (CWE)

CWE-121: Stack-based Buffer Overflow

Variant Draft

The product writes past the end of a buffer that was allocated on the stack.

How to prevent it (5 mitigations)

Operation, Build and Compilation

Use automatic buffer overflow detection mechanisms that are offered by certain compilers or compiler extensions. Examples include: the Microsoft Visual Studio /GS flag, Fedora/Red Hat FORTIFY_SOURCE GCC flag, StackGuard, and ProPolice, which provide various mechanisms including canary-based detection and range/index checking.
D3-SFCV (Stack Frame Canary Validation) from D3FEND [REF-1334] discusses canary-based detection in detail.
Architecture and Design

Use an abstraction library to abstract away risky APIs. Not a complete solution.
Implementation

Implement and perform bounds checking on input.
Implementation

Do not use dangerous functions such as gets. Use safer, equivalent functions which check for boundary errors.
Operation, Build and Compilation

Run or compile the software using features or extensions that randomly arrange the positions of a program's executable and libraries in memory. Because this makes the addresses unpredictable, it can prevent an attacker from reliably jumping to exploitable code.
Examples include Address Space Layout Randomization (ASLR) [REF-58] [REF-60] and Position-Independent Executables (PIE) [REF-64]. Imported modules may be similarly realigned if their default memory addresses conflict with other modules, in a process known as "rebasing" (for Windows) and "prelinking" (for Linux) [REF-1332] using randomly generated addresses. ASLR for libraries cannot be used in conjunction with prelink since it would require relocating the libraries at run-time, defeating the whole purpose of prelinking.
For more information on these techniques see D3-SAOR (Segment Address Offset Randomization) from D3FEND [REF-1335].

Source: MITRE CWE-121

All Critical High Medium Low Exploited only Public exploit

174 results · Clear filters · Feed

Unscored —

CVE-2016-6563 Public exploit EPSS 80%

D-Link DIR routers contain a stack-based buffer overflow in the HNAP Login action

Processing malformed SOAP messages when performing the HNAP Login action causes a buffer overflow in the stack in some D-Link DIR routers. The vulnerable XML fields within the SOAP body are: Action, Username, LoginPassword, and Captcha. The following products…

D-Link DIR-895L DIR-868L DIR-822 Network devices

Jul 13, 2018
Unscored —

CVE-2018-10594 Public exploit EPSS 68%

Delta Industrial Automation COMMGR from Delta Electronics versions 1.08 and prior with accompanying PLC Simulators (DVP…

ICS-CERT Delta Industrial Automation COMMGR and accompanying PLC Simulators (DVPSimulator EH2, EH3, ES2, SE, SS2 and AHSIM_5x0, AHSIM_5x1)

Jun 26, 2018
Unscored —

CVE-2017-3195 Public exploit EPSS 21%

Commvault Edge Communication Service (cvd) prior to version 11 SP7 or version 11 SP6 with hotfix 590 is prone to a stac…

Commvault Service Pack 6

Dec 15, 2017
Unscored —

CVE-2017-14016 Public exploit EPSS 16%

A Stack-based Buffer Overflow issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. The applicat…

Nov 6, 2017
High 8.8

CVE-2017-13089 Public exploit EPSS 80%

GNU Wget: stack overflow in HTTP protocol handling

The http.c:skip_short_body() function is called in some circumstances, such as when processing redirects. When the response is sent chunked in wget before 1.19.2, the chunk parser uses strtol() to read each chunk's length, but doesn't check that the chunk len…

GNU Project Wget wget wget Debian Ubuntu Alpine

Oct 27, 2017
Unscored —

CVE-2017-5177 Public exploit EPSS 18%

A Stack Buffer Overflow issue was discovered in VIPA Controls WinPLC7 5.0.45.5921 and prior. A stack-based buffer overf…

May 19, 2017
High 8.4

CVE-2013-2597 Exploited Public exploit

Stack-based buffer overflow in the acdb_ioctl function in audio_acdb.c in the acdb audio driver for the Linux kernel 2.…

Aug 31, 2014
KEV Sep 15, 2022
High 7.5

CVE-2014-2364 Public exploit EPSS 61%

Advantech WebAccess Stack-Based Buffer Overflow

Multiple stack-based buffer overflows in Advantech WebAccess before 7.2 allow remote attackers to execute arbitrary code via a long string in the (1) ProjectName, (2) SetParameter, (3) NodeName, (4) CCDParameter, (5) SetColor, (6) AlarmImage, (7) GetParameter…

Advantech WebAccess

Jul 19, 2014
High 8.3

CVE-2014-0782 Public exploit EPSS 57%

Yokogawa CENTUM CS 3000 Stack-based Buffer Overflow

Stack-based buffer overflow in BKESimmgr.exe in the Expanded Test Functions package in Yokogawa CENTUM CS 1000, CENTUM CS 3000 Entry Class R3.09.50 and earlier, CENTUM VP R5.03.00 and earlier, CENTUM VP Entry Class R5.03.00 and earlier, Exaopc R3.71.02 and ea…

Yokogawa CENTUM CS 3000 ICS / OT

May 16, 2014
Critical 10.0

CVE-2014-0787 Public exploit EPSS 14%

WellinTech KingSCADA Stack-based Buffer Overflow

Stack-based buffer overflow in WellinTech KingSCADA before 3.1.2.13 allows remote attackers to execute arbitrary code via a crafted packet.

WellinTech KingSCADA

Apr 12, 2014
High 8.3

CVE-2014-0784 Public exploit EPSS 36%

Yokogawa CENTUM CS 3000 Stack-based Buffer Overflow

Stack-based buffer overflow in BKBCopyD.exe in Yokogawa CENTUM CS 3000 R3.09.50 and earlier allows remote attackers to execute arbitrary code via a crafted TCP packet.

Yokogawa CENTUM CS 3000 ICS / OT

Mar 14, 2014
Critical 9.0

CVE-2014-0783 Public exploit EPSS 68%

Yokogawa CENTUM CS 3000 Stack-based Buffer Overflow

Stack-based buffer overflow in BKHOdeq.exe in Yokogawa CENTUM CS 3000 R3.09.50 and earlier allows remote attackers to execute arbitrary code via a crafted TCP packet.

Yokogawa CENTUM CS 3000 ICS / OT

Mar 14, 2014
High 8.8

CVE-2008-0015 Exploited Public exploit EPSS 77%

Stack-based buffer overflow in the CComVariant::ReadFromStream function in the Active Template Library (ATL), as used i…

Jul 7, 2009
KEV Feb 17, 2026
High 8.8

CVE-2009-0927 Exploited Public exploit EPSS 97%

Stack-based buffer overflow in Adobe Reader and Adobe Acrobat 9 before 9.1, 8 before 8.1.3 , and 7 before 7.1.1 allows …

Mar 19, 2009
KEV Mar 25, 2022