Threats tagged 'ghsa-vrww-7rmp-3xrm'

Hashcat version 7.1.2 contains a stack-based buffer overflow vulnerability in the functions mangle_to_hex_lower() and mangle_to_hex_upper() located in src/rp_cpu.c. This flaw arises from an insufficient bounds check that does not consider the doubling in size when password bytes are converted to hexadecimal. An attacker can exploit this by supplying a crafted rule file or using the -j or -k rule options with password candidates of 128 or more characters, potentially causing denial of service or arbitrary code execution.