vendor:
Chromium
by:
Project Zero
7,8
CVSS
HIGH
Out-of-bounds write
787
CWE
Product Name: Chromium
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: YES
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2020
SIOCSIFORDER and SIOCGIFORDER allow userspace programs to build and maintain the ifnet_ordered_head linked list of interfaces
The SIOCGIFORDER system call allows userspace programs to query the list of interface identifiers used to build the list. The loop at (c) iterates through the list of all entries and the check at (c) is supposed to check that the write at (d) won't go out of bounds, but it should be a >=, not a >.
Mitigation:
Ensure that the check at (c) is a >=, not a >.
