Description (CNA)
The digest generation function of NHIServiSignAdapter has not been verified for parameter’s length, which leads to a stack overflow loophole. Remote attackers can use the leak to execute code without privilege.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| CHANGING Inc. / NHIServiSignAdapter | affected 1.0.20.0218 |
CWE
CWE-121
References
ADP enrichment
No English description supplied.