CVE-2025-51823
libcsp 2.0 is vulnerable to Buffer Overflow in the csp_eth_init() function due to improper handling of the ifname parameter. The function uses strcpy...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
libcsp 2.0 is vulnerable to Buffer Overflow in the csp_eth_init() function due to improper handling of the ifname parameter. The function uses strcpy to copy the interface name into a structure member (ctx->name) without validating the input length.
Références
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- report github.com