D-Link DIR-825 Buffer Overflow Vulnerability in NetBIOS Name Service Daemon

A stack-based buffer overflow vulnerability has been identified in the D-Link DIR-825 router running firmware version 3.00b32. This issue arises in the NetBIOS Name Service daemon (nmbd), specifically within the NMBD_process function of the sserver.c file. The vulnerability allows for an out-of-bounds write by copying unvalidated packet data from NetBIOS name queries on UDP port 137 into a fixed-size stack buffer. As a result, an attacker on the local network can exploit this vulnerability to crash the service and potentially execute arbitrary code, depending on the runtime environment and available mitigations.

Impact

Exploitation of this vulnerability leads to a stack-based buffer overflow, which can cause the service to crash and may allow for arbitrary code execution, depending on the device's runtime environment and security mitigations in place.