Description
A vulnerability was determined in LemonOS up to nightly-2024-07-12 on LemonOS. Affected by this issue is the function HTTPGet of the file /Applications/Steal/main.cpp of the component HTTP Client. The manipulation of the argument chunkSize leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | LemonOS | nightly-2024-07-12 | — |
References
- VDB-320030 | LemonOS HTTP Client main.cpp HTTPGet stack-based overflow vdb-entry technical-description
- VDB-320030 | CTI Indicators (IOB, IOC, IOA) signature permissions-required
- Submit #624974 | LemonOS Lemon OS nightly-2024-07-12 Buffer Overflow third-party-advisory
- https://hkohi.ca/vulnerability/16 related
- https://github.com/LemonOSProject/LemonOS/issues/60 exploit issue-tracking