CVE-2026-102715:详情

CVE-2026-102715

2026-09-29
18h17 +00:00
Overflow
2026-11-04
14h17 +00:00
指定 CVE 通知
随时了解指定 CVE 的变更。
管理通知

CVE 描述

In Eclipse ThreadX NetX Duo versions up to and including 6.5.2.202603, the mDNS add-on's string cache accepts a shorter name as a match for a longer stored one. A host on the local link can send two mDNS records that make a device performing continuous service discovery write up to three bytes past its transmit packet, corrupting a neighbouring packet or the pool's free list, and misattribute discovered records.

CVE 信息

相关弱点

CWE-ID 弱点名称 来源
CWE-697 Incorrect Comparison
The product compares two entities in a security-relevant context, but the comparison is incorrect.
CWE-787 Out-of-bounds Write
The product writes data past the end, or before the beginning, of the intended buffer.

参考资料