CVE-2026-116566:詳細資料

CVE-2026-116566

2026-10-29
18h17 +00:00
2026-10-30
18h17 +00:00
指定 CVE 通知
掌握特定 CVE 的任何變更。
管理通知

CVE 描述

socket.getaddrinfo() previously accepted null bytes within *host* and *port* parameters which can cause the values to be silently truncated.

CVE 資訊

相關弱點

CWE-ID 弱點名稱 來源
CWE-158 Improper Neutralization of Null Byte or NUL Character
The product receives input from an upstream component, but it does not neutralize or incorrectly neutralizes NUL characters or null bytes when they are sent to a downstream component.

參考資料