| Package | Affected versions | Patched versions |
|---|---|---|
| libcsp | = 2.0 |
libcsp 2.0 is vulnerable to Buffer Overflow in the csp_eth_init() function due to improper handling of the ifname parameter. The function uses strcpy to copy the interface name into a structure member (ctx->name) without validating the input length.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free