Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-q26r-j393-x8vq

Опубликовано: 31 мар. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 5.3

Описание

An attacker might be able to trigger an out-of-bounds read by sending a crafted DNS response packet, when custom Lua code uses newDNSPacketOverlay to parse DNS packets. The out-of-bounds read might trigger a crash, leading to a denial of service, or access unrelated memory, leading to potential information disclosure.

An attacker might be able to trigger an out-of-bounds read by sending a crafted DNS response packet, when custom Lua code uses newDNSPacketOverlay to parse DNS packets. The out-of-bounds read might trigger a crash, leading to a denial of service, or access unrelated memory, leading to potential information disclosure.

EPSS

Процентиль: 2%
0.00012
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-126

Связанные уязвимости

CVSS3: 5.3
ubuntu
1 день назад

[Unknown description]

CVSS3: 5.3
nvd
2 дня назад

An attacker might be able to trigger an out-of-bounds read by sending a crafted DNS response packet, when custom Lua code uses newDNSPacketOverlay to parse DNS packets. The out-of-bounds read might trigger a crash, leading to a denial of service, or access unrelated memory, leading to potential information disclosure.

CVSS3: 5.3
debian
2 дня назад

An attacker might be able to trigger an out-of-bounds read by sending ...

EPSS

Процентиль: 2%
0.00012
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-126