CVE-2026-116566:详情

CVE-2026-116566

2026-10-29
18h17 +00:00
2026-10-30
18h17 +00:00
指定 CVE 通知
随时了解指定 CVE 的变更。
管理通知

CVE 描述

socket.getaddrinfo() previously accepted null bytes within *host* and *port* parameters which can cause the values to be silently truncated.

CVE 信息

相关弱点

CWE-ID 弱点名称 来源
CWE-158 Improper Neutralization of Null Byte or NUL Character
The product receives input from an upstream component, but it does not neutralize or incorrectly neutralizes NUL characters or null bytes when they are sent to a downstream component.

参考资料